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"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) 04:59:38 executing program 3: r0 = epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) read$snapshot(r1, &(0x7f0000000280)=""/117, 0x75) ioctl$SNAPSHOT_CREATE_IMAGE(r1, 0x40043311, &(0x7f0000000300)) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r1, 0x330f, 0x3) socketpair(0x9, 0x2, 0x2, &(0x7f0000000380)) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000001180)={0x50002002}) 04:59:38 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r0, 0x29, 0x3b, 0x0, &(0x7f0000000180)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@empty, 0xffff, 0x0, 0x2, 0x7, 0x40, 0x400}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x58, &(0x7f0000000080)}, 0x38) 04:59:38 executing program 4: r0 = epoll_create1(0x0) (async) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_wait(r0, &(0x7f00000000c0)=[{}], 0x1, 0x100) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r2, &(0x7f0000000040)={0x67446698, 0x1, 0x3, 0x3, 0x2, "cba027c6796ac7d8c50858019087b3b08d930c45ae4216c3006f2343a879b635bfe6fd78e4bb392fed8f8f21517ae5ae22daff7226d01a2da09e8997abd470d7becc7f76117c35c25b9fd35d6b679aec1d2e1b54a939e4"}, 0x42) 04:59:38 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000000)={0xb9, 0xb, &(0x7f00000002c0)="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"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) 04:59:38 executing program 5: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) r2 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, 0x0) 04:59:38 executing program 3: r0 = epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) read$snapshot(r1, &(0x7f0000000280)=""/117, 0x75) ioctl$SNAPSHOT_CREATE_IMAGE(r1, 0x40043311, &(0x7f0000000300)) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r1, 0x330f, 0x3) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000001180)={0x50002002}) 04:59:38 executing program 1: r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000001180)) 04:59:38 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r0, 0x29, 0x3b, 0x0, &(0x7f0000000180)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x58, &(0x7f0000000080)}, 0x38) 04:59:38 executing program 0: socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x58, &(0x7f0000000080)}, 0x38) 04:59:38 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r0, 0x29, 0x3b, 0x0, &(0x7f0000000180)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@empty, 0xffff, 0x0, 0x2, 0x7, 0x40, 0x400}, 0x20) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0x7, 0x8000) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000080)={0x7fff, {{0xa, 0x4f21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}}}, 0x88) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), 0xffffffffffffffff) r3 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) socketpair(0x11, 0x800, 0x3, &(0x7f0000000300)) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x7, 0x0, 0x9, 0x1105, r1, 0x4, '\x00', 0x0, r1, 0x0, 0x1, 0x3, 0x2}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x80000000, 0x5, 0x2, 0x2004, 0x1, 0x1f9, '\x00', 0x0, r1, 0x5, 0x1, 0x4, 0x4}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={r4, 0x58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x38) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in6=@empty, 0x4e21, 0x0, 0x4e22, 0x800, 0x0, 0x0, 0xc0, 0x89, r5, 0xffffffffffffffff}, {0x0, 0x0, 0x6, 0x8, 0x9, 0x4, 0x6}, {0xec, 0x0, 0x5, 0x8}, 0x0, 0x6e6bbc}, {{@in=@empty, 0x0, 0x32}, 0x2, @in=@empty, 0x0, 0x2, 0x2, 0x73, 0x0, 0x401}}, 0xe8) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000340)={@dev={0xfe, 0x80, '\x00', 0x2e}, @mcast1, @private0, 0x2, 0xfffb, 0x40, 0x500, 0x6, 0x40, r5}) epoll_wait(r3, &(0x7f0000000500)=[{}], 0x1, 0x0) ioctl$TCGETS2(r3, 0x802c542a, &(0x7f00000002c0)) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5}, {0x5}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x40000) socketpair(0x6, 0x5, 0x1, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$IMCLEAR_L2(r6, 0x80044946, &(0x7f00000005c0)=0x2) syz_open_dev$ttys(0xc, 0x2, 0x1) 04:59:38 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000000)={0xb9, 0xb, &(0x7f00000002c0)="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"}) (async, rerun: 32) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) (rerun: 32) 04:59:38 executing program 1: r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000001180)) 04:59:38 executing program 3: r0 = epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) read$snapshot(r1, &(0x7f0000000280)=""/117, 0x75) ioctl$SNAPSHOT_CREATE_IMAGE(r1, 0x40043311, &(0x7f0000000300)) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000001180)={0x50002002}) 04:59:38 executing program 0: bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x58, &(0x7f0000000080)}, 0x38) 04:59:38 executing program 4: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_wait(r0, &(0x7f00000000c0)=[{}], 0x1, 0x100) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r2, &(0x7f0000000040)={0x67446698, 0x1, 0x3, 0x3, 0x2, "cba027c6796ac7d8c50858019087b3b08d930c45ae4216c3006f2343a879b635bfe6fd78e4bb392fed8f8f21517ae5ae22daff7226d01a2da09e8997abd470d7becc7f76117c35c25b9fd35d6b679aec1d2e1b54a939e4"}, 0x42) 04:59:38 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000001180)) 04:59:38 executing program 5: socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x58, &(0x7f0000000080)}, 0x38) 04:59:38 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGPTPEER(r0, 0x5441, 0x80) r1 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r1, &(0x7f0000000500)=[{}], 0x1, 0x0) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f0000000080)) r2 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r2, &(0x7f0000000500)=[{}], 0x1, 0x0) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r3) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x4) 04:59:38 executing program 0: bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) 04:59:38 executing program 3: r0 = epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) read$snapshot(r1, &(0x7f0000000280)=""/117, 0x75) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000001180)={0x50002002}) 04:59:38 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGPTPEER(r0, 0x5441, 0x80) (async) r1 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r1, &(0x7f0000000500)=[{}], 0x1, 0x0) (async) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f0000000080)) (async) r2 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r2, &(0x7f0000000500)=[{}], 0x1, 0x0) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r3) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x4) 04:59:38 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000001180)) 04:59:38 executing program 0: bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) 04:59:38 executing program 5: socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x58, &(0x7f0000000080)}, 0x38) 04:59:38 executing program 3: r0 = epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)={0x50002002}) 04:59:38 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000001180)) 04:59:38 executing program 5: socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x58, &(0x7f0000000080)}, 0x38) 04:59:38 executing program 0: bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) 04:59:38 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGPTPEER(r0, 0x5441, 0x80) (async) r1 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r1, &(0x7f0000000500)=[{}], 0x1, 0x0) (async) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f0000000080)) (async) r2 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r2, &(0x7f0000000500)=[{}], 0x1, 0x0) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r3) (async) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x4) 04:59:38 executing program 3: r0 = epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)={0x50002002}) 04:59:38 executing program 1: r0 = epoll_create1(0x0) r1 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x800, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) 04:59:38 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000400)={0x1c9, 0x20, &(0x7f0000000000)="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"}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10e5864299b5eb31}, 0xc, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="14000000582f9cae7372c08cf7c7642d8f7b98ec8e27a7a492c76347b2e818fb7fff3793f0beb9bb6178b62e8f15ecdafdc18f8625a9ebe48439a13dc56249bf6b6e186796ab5e174aed2b19075ecc7807b1fd1921393cb04dac99849bb7ee2566e3a7a89f61c4d8846925c64004617384d8aae404d2abe602d4ef596f90dd58ce635e9629", @ANYRES16=0x0, @ANYBLOB="0000000000000000000002000000"], 0x14}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="28100000", @ANYRES16=0x0, @ANYBLOB="000226bd7000ffdbdf255500000099f603eb", @ANYRES32=0x0, @ANYBLOB="0c009900ff7f00004c000000"], 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x804) r1 = epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f0000001180)={0xa}) socketpair(0x2b, 0x80000, 0x9, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) read$snapshot(r3, &(0x7f0000000280)=""/117, 0x75) write$snapshot(0xffffffffffffffff, &(0x7f00000007c0)="c181b52bec06e39fa7a56164d14d2d0380d61edb4b3ce5a8eb43375b61f374265070ec124878fca61e6b42eab3e1509c3b78236abecd989775d9ecd8f8753237ccdcfe530f0c066477afce42227fca75a701cb512655ecbae5d7184f20e20e4ea7b21f0460d54ffd9c8b3565bc40453415b6ec08", 0x74) ioctl$SNAPSHOT_CREATE_IMAGE(r3, 0x40043311, &(0x7f0000000300)) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r3, 0x330f, 0x3) socketpair(0x9, 0x2, 0x2, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) read$snapshot(r3, &(0x7f00000004c0)=""/79, 0x4f) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), r3) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r3, 0x3309) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x38, r5, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x100}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010100}]}, 0x38}}, 0xc000) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x28, r5, 0x10, 0x70bd29, 0x25dfdbf9, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xb}]}, 0x28}, 0x1, 0x0, 0x0, 0x24040010}, 0x4004804) 04:59:39 executing program 1: r0 = epoll_create1(0x0) r1 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x800, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) 04:59:39 executing program 5: bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x58, &(0x7f0000000080)}, 0x38) 04:59:39 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000400)={0x1c9, 0x20, &(0x7f0000000000)="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"}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10e5864299b5eb31}, 0xc, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="14000000582f9cae7372c08cf7c7642d8f7b98ec8e27a7a492c76347b2e818fb7fff3793f0beb9bb6178b62e8f15ecdafdc18f8625a9ebe48439a13dc56249bf6b6e186796ab5e174aed2b19075ecc7807b1fd1921393cb04dac99849bb7ee2566e3a7a89f61c4d8846925c64004617384d8aae404d2abe602d4ef596f90dd58ce635e9629", @ANYRES16=0x0, @ANYBLOB="0000000000000000000002000000"], 0x14}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="28100000", @ANYRES16=0x0, @ANYBLOB="000226bd7000ffdbdf255500000099f603eb", @ANYRES32=0x0, @ANYBLOB="0c009900ff7f00004c000000"], 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x804) r1 = epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f0000001180)={0xa}) socketpair(0x2b, 0x80000, 0x9, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) read$snapshot(r3, &(0x7f0000000280)=""/117, 0x75) write$snapshot(0xffffffffffffffff, &(0x7f00000007c0)="c181b52bec06e39fa7a56164d14d2d0380d61edb4b3ce5a8eb43375b61f374265070ec124878fca61e6b42eab3e1509c3b78236abecd989775d9ecd8f8753237ccdcfe530f0c066477afce42227fca75a701cb512655ecbae5d7184f20e20e4ea7b21f0460d54ffd9c8b3565bc40453415b6ec08", 0x74) ioctl$SNAPSHOT_CREATE_IMAGE(r3, 0x40043311, &(0x7f0000000300)) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r3, 0x330f, 0x3) socketpair(0x9, 0x2, 0x2, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) read$snapshot(r3, &(0x7f00000004c0)=""/79, 0x4f) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), r3) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r3, 0x3309) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x38, r5, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x100}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010100}]}, 0x38}}, 0xc000) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x28, r5, 0x10, 0x70bd29, 0x25dfdbf9, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xb}]}, 0x28}, 0x1, 0x0, 0x0, 0x24040010}, 0x4004804) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000400)={0x1c9, 0x20, &(0x7f0000000000)="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"}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10e5864299b5eb31}, 0xc, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="14000000582f9cae7372c08cf7c7642d8f7b98ec8e27a7a492c76347b2e818fb7fff3793f0beb9bb6178b62e8f15ecdafdc18f8625a9ebe48439a13dc56249bf6b6e186796ab5e174aed2b19075ecc7807b1fd1921393cb04dac99849bb7ee2566e3a7a89f61c4d8846925c64004617384d8aae404d2abe602d4ef596f90dd58ce635e9629", @ANYRES16=0x0, @ANYBLOB="0000000000000000000002000000"], 0x14}}, 0x0) (async) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="28100000", @ANYRES16=0x0, @ANYBLOB="000226bd7000ffdbdf255500000099f603eb", @ANYRES32=0x0, @ANYBLOB="0c009900ff7f00004c000000"], 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x804) (async) epoll_create1(0x0) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f0000001180)={0xa}) (async) socketpair(0x2b, 0x80000, 0x9, &(0x7f0000000540)) (async) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) (async) read$snapshot(r3, &(0x7f0000000280)=""/117, 0x75) (async) write$snapshot(0xffffffffffffffff, &(0x7f00000007c0)="c181b52bec06e39fa7a56164d14d2d0380d61edb4b3ce5a8eb43375b61f374265070ec124878fca61e6b42eab3e1509c3b78236abecd989775d9ecd8f8753237ccdcfe530f0c066477afce42227fca75a701cb512655ecbae5d7184f20e20e4ea7b21f0460d54ffd9c8b3565bc40453415b6ec08", 0x74) (async) ioctl$SNAPSHOT_CREATE_IMAGE(r3, 0x40043311, &(0x7f0000000300)) (async) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r3, 0x330f, 0x3) (async) socketpair(0x9, 0x2, 0x2, &(0x7f0000000380)) (async) read$snapshot(r3, &(0x7f00000004c0)=""/79, 0x4f) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), r3) (async) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r3, 0x3309) (async) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x38, r5, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x100}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010100}]}, 0x38}}, 0xc000) (async) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x28, r5, 0x10, 0x70bd29, 0x25dfdbf9, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xb}]}, 0x28}, 0x1, 0x0, 0x0, 0x24040010}, 0x4004804) (async) 04:59:39 executing program 0: bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 04:59:39 executing program 3: r0 = epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)={0x50002002}) 04:59:39 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) ioctl$VT_WAITACTIVE(r0, 0x5607) 04:59:39 executing program 1: r0 = epoll_create1(0x0) r1 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x800, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) 04:59:39 executing program 5: bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) 04:59:39 executing program 3: r0 = epoll_create1(0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)={0x50002002}) 04:59:39 executing program 0: bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 04:59:39 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) ioctl$VT_WAITACTIVE(r0, 0x5607) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) (async) ioctl$VT_WAITACTIVE(r0, 0x5607) (async) 04:59:39 executing program 5: bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) 04:59:39 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000001180)={0x50002002}) 04:59:39 executing program 5: bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) 04:59:39 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000400)={0x1c9, 0x20, &(0x7f0000000000)="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"}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10e5864299b5eb31}, 0xc, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="14000000582f9cae7372c08cf7c7642d8f7b98ec8e27a7a492c76347b2e818fb7fff3793f0beb9bb6178b62e8f15ecdafdc18f8625a9ebe48439a13dc56249bf6b6e186796ab5e174aed2b19075ecc7807b1fd1921393cb04dac99849bb7ee2566e3a7a89f61c4d8846925c64004617384d8aae404d2abe602d4ef596f90dd58ce635e9629", @ANYRES16=0x0, @ANYBLOB="0000000000000000000002000000"], 0x14}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="28100000", @ANYRES16=0x0, @ANYBLOB="000226bd7000ffdbdf255500000099f603eb", @ANYRES32=0x0, @ANYBLOB="0c009900ff7f00004c000000"], 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x804) r1 = epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) (async) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f0000001180)={0xa}) socketpair(0x2b, 0x80000, 0x9, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) read$snapshot(r3, &(0x7f0000000280)=""/117, 0x75) (async) write$snapshot(0xffffffffffffffff, &(0x7f00000007c0)="c181b52bec06e39fa7a56164d14d2d0380d61edb4b3ce5a8eb43375b61f374265070ec124878fca61e6b42eab3e1509c3b78236abecd989775d9ecd8f8753237ccdcfe530f0c066477afce42227fca75a701cb512655ecbae5d7184f20e20e4ea7b21f0460d54ffd9c8b3565bc40453415b6ec08", 0x74) ioctl$SNAPSHOT_CREATE_IMAGE(r3, 0x40043311, &(0x7f0000000300)) (async) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r3, 0x330f, 0x3) socketpair(0x9, 0x2, 0x2, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) (async) read$snapshot(r3, &(0x7f00000004c0)=""/79, 0x4f) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), r3) (async, rerun: 32) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r3, 0x3309) (rerun: 32) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x38, r5, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x100}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010100}]}, 0x38}}, 0xc000) (async) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x28, r5, 0x10, 0x70bd29, 0x25dfdbf9, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xb}]}, 0x28}, 0x1, 0x0, 0x0, 0x24040010}, 0x4004804) 04:59:39 executing program 0: bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 04:59:39 executing program 1: r0 = epoll_create1(0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) 04:59:39 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000001180)={0x50002002}) 04:59:39 executing program 5: bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 04:59:39 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) (async, rerun: 32) ioctl$VT_WAITACTIVE(r0, 0x5607) (rerun: 32) 04:59:39 executing program 1: epoll_create1(0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000001180)) 04:59:39 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000400)={0x1c9, 0x20, &(0x7f0000000000)="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"}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10e5864299b5eb31}, 0xc, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="14000000582f9cae7372c08cf7c7642d8f7b98ec8e27a7a492c76347b2e818fb7fff3793f0beb9bb6178b62e8f15ecdafdc18f8625a9ebe48439a13dc56249bf6b6e186796ab5e174aed2b19075ecc7807b1fd1921393cb04dac99849bb7ee2566e3a7a89f61c4d8846925c64004617384d8aae404d2abe602d4ef596f90dd58ce635e9629", @ANYRES16=0x0, @ANYBLOB="0000000000000000000002000000"], 0x14}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="28100000", @ANYRES16=0x0, @ANYBLOB="000226bd7000ffdbdf255500000099f603eb", @ANYRES32=0x0, @ANYBLOB="0c009900ff7f00004c000000"], 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x804) r1 = epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f0000001180)={0xa}) socketpair(0x2b, 0x80000, 0x9, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) read$snapshot(r3, &(0x7f0000000280)=""/117, 0x75) write$snapshot(0xffffffffffffffff, &(0x7f00000007c0)="c181b52bec06e39fa7a56164d14d2d0380d61edb4b3ce5a8eb43375b61f374265070ec124878fca61e6b42eab3e1509c3b78236abecd989775d9ecd8f8753237ccdcfe530f0c066477afce42227fca75a701cb512655ecbae5d7184f20e20e4ea7b21f0460d54ffd9c8b3565bc40453415b6ec08", 0x74) ioctl$SNAPSHOT_CREATE_IMAGE(r3, 0x40043311, &(0x7f0000000300)) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r3, 0x330f, 0x3) socketpair(0x9, 0x2, 0x2, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) read$snapshot(r3, &(0x7f00000004c0)=""/79, 0x4f) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), r3) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r3, 0x3309) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x38, r5, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x100}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010100}]}, 0x38}}, 0xc000) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x28, r5, 0x10, 0x70bd29, 0x25dfdbf9, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xb}]}, 0x28}, 0x1, 0x0, 0x0, 0x24040010}, 0x4004804) 04:59:39 executing program 2: ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCL_SELLOADLUT(r0, 0x541c, &(0x7f0000000000)={0x5, 0x8, 0x7, 0x10001, 0x7}) clock_gettime(0x5, &(0x7f0000000040)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) 04:59:39 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000001180)={0x50002002}) 04:59:39 executing program 5: bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 04:59:39 executing program 4: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x1) 04:59:39 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000400)={0x1c9, 0x20, &(0x7f0000000000)="4098179969523b06e599e9a25580b001cdac86a3c23ea1781c4b943ff345c2e484b37820f6c35ac73e3e139852f3461419374e79aba15cb4b46a0dbbbc3d089a734f0b8cf18bc709e213e3d68c1c9276160a214ac24d05bc03e5ea9f9d45e9145a0bd0b8afce710825871766015a1e627b937ae41551a847a4f442c414432f21ff985d7e76f51055349836e818053350f2f2348603a7434374bd39a3a53a6c0d9078dc6b23c13651ee268d48abfceaf31f600f62d96b62ba89560c186bea95c2b39be75e22084f52104212fa5dd512c3779c5b97a3201bd18bd42bff3a37f7555a7f5de7a0af2198725f938222a0153985560e2787c85cd4267e90cfbbee12023bba21853b42467389ac32444d8044301969763112a7f84228f5bfc0515de879579ee224dcc9ba8fff1be06a9aca44517f86feb1743d8eef0596b7d8795586387792fd02969cbe748e26638f8589269a7b752bb2f79d2f88737ad69c1bb8fe301acfa4973c8890b8165b05d5cacf34ee845feb847e10f15adc7b50c0118252251bbafac671e70cf6a58cffe8cbf4de581dc4339db58bda4bac00395daf9270fa28b8fb8c88942ff7f4025145e9547d83d190e7ffaecc3aed86ad0c8ac08fb823230df09f842ae54869ab310b8b92bab0f0533970f6cdddc02acf0e92716e524785d23c2ef40e87b6bda9034753e470dbf4e9abd55395b1dab2b2ff2b668deceab730593069287b2d8af194a6e009bd48a88ca292f64a948bba09fde00f02c498e4fea89db6463438f26b1cb27ac7974319746c519c1be663729b2d209e2a0dd35cecb18d0b1912a4bacc7827da93649e8f44f5a567ddca3268b169e3ceb3d26633920f940433a414215d1c2c1cccbaccdca07367d6de00ac03aa9bf81b8cb4b8a1fd80e247d8d83099ef14a2b458976b5c6a33a567ce9cc061b347bb25d48e51a8285025287d95bd5f90d6c57a410987054902bdda8d5032dcdfa1ef8ad268d88fa14997ce20d560759e140ee5dff134b69df205f02d72893cac6f454fbab3ba484dd2b0650622115860b72798a4bf443aba5940d63852fc74f64da881c0f20153d055ce968ae69f0040faaa2851800c4bc793329ccbe204849709009175cc71e390eac49b459da5cdcd035bb621c53c353f964bbdd217c00d1e6b57e9721df2c3775b0c01bdb358c3051e50c0b46492296b14395668ee39234a9c3415ed95a059b1c931e8ad5054de9bf5b76412e3ebd0a9c4213cfd76cc0ae01d6d8a0446116abfc44f30916d00c8e41535c25fde333fa0aef41fd6c7ddc651c78df83a910efe5a6cca4126432ae7c442cc444b6e0ac7d3da48c357050837352cf27d78712357aae13e466b46668ee2b56bbfbfc0ed377b26c7a7bf7bb1dbc55f269137050defb06364edfc2317163c943b3a2d13d07e7ceb883c4051cf1291be66ba089fe7"}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10e5864299b5eb31}, 0xc, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="14000000582f9cae7372c08cf7c7642d8f7b98ec8e27a7a492c76347b2e818fb7fff3793f0beb9bb6178b62e8f15ecdafdc18f8625a9ebe48439a13dc56249bf6b6e186796ab5e174aed2b19075ecc7807b1fd1921393cb04dac99849bb7ee2566e3a7a89f61c4d8846925c64004617384d8aae404d2abe602d4ef596f90dd58ce635e9629", @ANYRES16=0x0, @ANYBLOB="0000000000000000000002000000"], 0x14}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="28100000", @ANYRES16=0x0, @ANYBLOB="000226bd7000ffdbdf255500000099f603eb", @ANYRES32=0x0, @ANYBLOB="0c009900ff7f00004c000000"], 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x804) r1 = epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f0000001180)={0xa}) socketpair(0x2b, 0x80000, 0x9, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) read$snapshot(r3, &(0x7f0000000280)=""/117, 0x75) write$snapshot(0xffffffffffffffff, &(0x7f00000007c0)="c181b52bec06e39fa7a56164d14d2d0380d61edb4b3ce5a8eb43375b61f374265070ec124878fca61e6b42eab3e1509c3b78236abecd989775d9ecd8f8753237ccdcfe530f0c066477afce42227fca75a701cb512655ecbae5d7184f20e20e4ea7b21f0460d54ffd9c8b3565bc40453415b6ec08", 0x74) ioctl$SNAPSHOT_CREATE_IMAGE(r3, 0x40043311, &(0x7f0000000300)) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r3, 0x330f, 0x3) socketpair(0x9, 0x2, 0x2, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) read$snapshot(r3, &(0x7f00000004c0)=""/79, 0x4f) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), r3) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r3, 0x3309) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x38, r5, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x100}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010100}]}, 0x38}}, 0xc000) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x28, r5, 0x10, 0x70bd29, 0x25dfdbf9, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xb}]}, 0x28}, 0x1, 0x0, 0x0, 0x24040010}, 0x4004804) 04:59:39 executing program 1: epoll_create1(0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000001180)) 04:59:39 executing program 2: ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) (async) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCL_SELLOADLUT(r0, 0x541c, &(0x7f0000000000)={0x5, 0x8, 0x7, 0x10001, 0x7}) (async) clock_gettime(0x5, &(0x7f0000000040)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) 04:59:39 executing program 3: r0 = epoll_create1(0x0) r1 = socket$inet6_sctp(0xa, 0x0, 0x84) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)={0x50002002}) 04:59:39 executing program 5: bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 04:59:39 executing program 4: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_create1(0x80000) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x1) 04:59:39 executing program 1: epoll_create1(0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000001180)) 04:59:39 executing program 5: ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCL_SELLOADLUT(r0, 0x541c, &(0x7f0000000000)={0x5, 0x8, 0x7, 0x10001, 0x7}) clock_gettime(0x5, &(0x7f0000000040)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) 04:59:39 executing program 2: ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCL_SELLOADLUT(r0, 0x541c, &(0x7f0000000000)={0x5, 0x8, 0x7, 0x10001, 0x7}) clock_gettime(0x5, &(0x7f0000000040)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$TIOCL_SELLOADLUT(r0, 0x541c, &(0x7f0000000000)={0x5, 0x8, 0x7, 0x10001, 0x7}) (async) clock_gettime(0x5, &(0x7f0000000040)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) (async) 04:59:39 executing program 3: r0 = epoll_create1(0x0) r1 = socket$inet6_sctp(0xa, 0x0, 0x84) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)={0x50002002}) 04:59:39 executing program 4: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x1) epoll_create1(0x0) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) epoll_create1(0x80000) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x1) (async) 04:59:39 executing program 1: r0 = epoll_create1(0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000001180)) 04:59:39 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000400)={0x1c9, 0x20, &(0x7f0000000000)="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"}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10e5864299b5eb31}, 0xc, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="14000000582f9cae7372c08cf7c7642d8f7b98ec8e27a7a492c76347b2e818fb7fff3793f0beb9bb6178b62e8f15ecdafdc18f8625a9ebe48439a13dc56249bf6b6e186796ab5e174aed2b19075ecc7807b1fd1921393cb04dac99849bb7ee2566e3a7a89f61c4d8846925c64004617384d8aae404d2abe602d4ef596f90dd58ce635e9629", @ANYRES16=0x0, @ANYBLOB="0000000000000000000002000000"], 0x14}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="28100000", @ANYRES16=0x0, @ANYBLOB="000226bd7000ffdbdf255500000099f603eb", @ANYRES32=0x0, @ANYBLOB="0c009900ff7f00004c000000"], 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x804) r1 = epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f0000001180)={0xa}) socketpair(0x2b, 0x80000, 0x9, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) read$snapshot(r3, &(0x7f0000000280)=""/117, 0x75) write$snapshot(0xffffffffffffffff, &(0x7f00000007c0)="c181b52bec06e39fa7a56164d14d2d0380d61edb4b3ce5a8eb43375b61f374265070ec124878fca61e6b42eab3e1509c3b78236abecd989775d9ecd8f8753237ccdcfe530f0c066477afce42227fca75a701cb512655ecbae5d7184f20e20e4ea7b21f0460d54ffd9c8b3565bc40453415b6ec08", 0x74) ioctl$SNAPSHOT_CREATE_IMAGE(r3, 0x40043311, &(0x7f0000000300)) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r3, 0x330f, 0x3) socketpair(0x9, 0x2, 0x2, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) read$snapshot(r3, &(0x7f00000004c0)=""/79, 0x4f) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), r3) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r3, 0x3309) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x38, r5, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x100}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010100}]}, 0x38}}, 0xc000) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x28, r5, 0x10, 0x70bd29, 0x25dfdbf9, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xb}]}, 0x28}, 0x1, 0x0, 0x0, 0x24040010}, 0x4004804) 04:59:39 executing program 5: ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCL_SELLOADLUT(r0, 0x541c, &(0x7f0000000000)={0x5, 0x8, 0x7, 0x10001, 0x7}) clock_gettime(0x5, &(0x7f0000000040)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) 04:59:39 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) 04:59:39 executing program 1: r0 = epoll_create1(0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000001180)) 04:59:39 executing program 3: r0 = epoll_create1(0x0) r1 = socket$inet6_sctp(0xa, 0x0, 0x84) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)={0x50002002}) 04:59:39 executing program 4: epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) r0 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r0, &(0x7f0000000500)=[{}], 0x1, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000040)) r2 = syz_open_dev$vcsn(&(0x7f0000000000), 0x400000000004, 0x14802) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r2, &(0x7f0000001180)={0xb}) 04:59:39 executing program 5: ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCL_SELLOADLUT(r0, 0x541c, &(0x7f0000000000)={0x5, 0x8, 0x7, 0x10001, 0x7}) clock_gettime(0x5, &(0x7f0000000040)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) 04:59:39 executing program 4: epoll_create1(0x0) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) r0 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r0, &(0x7f0000000500)=[{}], 0x1, 0x0) (async) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000040)) (async) r2 = syz_open_dev$vcsn(&(0x7f0000000000), 0x400000000004, 0x14802) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r2, &(0x7f0000001180)={0xb}) 04:59:39 executing program 1: r0 = epoll_create1(0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000001180)) 04:59:39 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) 04:59:39 executing program 3: epoll_create1(0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000001180)={0x50002002}) 04:59:39 executing program 5: ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCL_SELLOADLUT(r0, 0x541c, &(0x7f0000000000)={0x5, 0x8, 0x7, 0x10001, 0x7}) clock_gettime(0x5, &(0x7f0000000040)) 04:59:39 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000400)={0x1c9, 0x20, &(0x7f0000000000)="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"}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10e5864299b5eb31}, 0xc, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="14000000582f9cae7372c08cf7c7642d8f7b98ec8e27a7a492c76347b2e818fb7fff3793f0beb9bb6178b62e8f15ecdafdc18f8625a9ebe48439a13dc56249bf6b6e186796ab5e174aed2b19075ecc7807b1fd1921393cb04dac99849bb7ee2566e3a7a89f61c4d8846925c64004617384d8aae404d2abe602d4ef596f90dd58ce635e9629", @ANYRES16=0x0, @ANYBLOB="0000000000000000000002000000"], 0x14}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="28100000", @ANYRES16=0x0, @ANYBLOB="000226bd7000ffdbdf255500000099f603eb", @ANYRES32=0x0, @ANYBLOB="0c009900ff7f00004c000000"], 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x804) r1 = epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f0000001180)={0xa}) socketpair(0x2b, 0x80000, 0x9, &(0x7f0000000540)) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) read$snapshot(r2, &(0x7f0000000280)=""/117, 0x75) write$snapshot(0xffffffffffffffff, &(0x7f00000007c0)="c181b52bec06e39fa7a56164d14d2d0380d61edb4b3ce5a8eb43375b61f374265070ec124878fca61e6b42eab3e1509c3b78236abecd989775d9ecd8f8753237ccdcfe530f0c066477afce42227fca75a701cb512655ecbae5d7184f20e20e4ea7b21f0460d54ffd9c8b3565bc40453415b6ec08", 0x74) ioctl$SNAPSHOT_CREATE_IMAGE(r2, 0x40043311, &(0x7f0000000300)) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r2, 0x330f, 0x3) socketpair(0x9, 0x2, 0x2, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) read$snapshot(r2, &(0x7f00000004c0)=""/79, 0x4f) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), r2) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r2, 0x3309) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x38, r4, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x100}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010100}]}, 0x38}}, 0xc000) 04:59:39 executing program 4: epoll_create1(0x0) (async) socket$l2tp6(0xa, 0x2, 0x73) r0 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r0, &(0x7f0000000500)=[{}], 0x1, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000040)) (async) r2 = syz_open_dev$vcsn(&(0x7f0000000000), 0x400000000004, 0x14802) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r2, &(0x7f0000001180)={0xb}) 04:59:39 executing program 1: r0 = epoll_create1(0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, 0x0) 04:59:39 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) (async) 04:59:39 executing program 5: ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) syz_open_dev$ttys(0xc, 0x2, 0x1) clock_gettime(0x5, &(0x7f0000000040)) 04:59:39 executing program 3: epoll_create1(0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000001180)={0x50002002}) 04:59:39 executing program 4: ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000000)) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f00000000c0)={0x6, &(0x7f0000000080)=[{0x4, 0x4}, {0x9, 0x7}, {0xb, 0x3f}, {0x3, 0x1}, {0x100, 0x7}, {0xe30, 0xe67}]}) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000100)=0x1, 0x4) r1 = epoll_create1(0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000001180)) 04:59:39 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000400)={0x1c9, 0x20, &(0x7f0000000000)="4098179969523b06e599e9a25580b001cdac86a3c23ea1781c4b943ff345c2e484b37820f6c35ac73e3e139852f3461419374e79aba15cb4b46a0dbbbc3d089a734f0b8cf18bc709e213e3d68c1c9276160a214ac24d05bc03e5ea9f9d45e9145a0bd0b8afce710825871766015a1e627b937ae41551a847a4f442c414432f21ff985d7e76f51055349836e818053350f2f2348603a7434374bd39a3a53a6c0d9078dc6b23c13651ee268d48abfceaf31f600f62d96b62ba89560c186bea95c2b39be75e22084f52104212fa5dd512c3779c5b97a3201bd18bd42bff3a37f7555a7f5de7a0af2198725f938222a0153985560e2787c85cd4267e90cfbbee12023bba21853b42467389ac32444d8044301969763112a7f84228f5bfc0515de879579ee224dcc9ba8fff1be06a9aca44517f86feb1743d8eef0596b7d8795586387792fd02969cbe748e26638f8589269a7b752bb2f79d2f88737ad69c1bb8fe301acfa4973c8890b8165b05d5cacf34ee845feb847e10f15adc7b50c0118252251bbafac671e70cf6a58cffe8cbf4de581dc4339db58bda4bac00395daf9270fa28b8fb8c88942ff7f4025145e9547d83d190e7ffaecc3aed86ad0c8ac08fb823230df09f842ae54869ab310b8b92bab0f0533970f6cdddc02acf0e92716e524785d23c2ef40e87b6bda9034753e470dbf4e9abd55395b1dab2b2ff2b668deceab730593069287b2d8af194a6e009bd48a88ca292f64a948bba09fde00f02c498e4fea89db6463438f26b1cb27ac7974319746c519c1be663729b2d209e2a0dd35cecb18d0b1912a4bacc7827da93649e8f44f5a567ddca3268b169e3ceb3d26633920f940433a414215d1c2c1cccbaccdca07367d6de00ac03aa9bf81b8cb4b8a1fd80e247d8d83099ef14a2b458976b5c6a33a567ce9cc061b347bb25d48e51a8285025287d95bd5f90d6c57a410987054902bdda8d5032dcdfa1ef8ad268d88fa14997ce20d560759e140ee5dff134b69df205f02d72893cac6f454fbab3ba484dd2b0650622115860b72798a4bf443aba5940d63852fc74f64da881c0f20153d055ce968ae69f0040faaa2851800c4bc793329ccbe204849709009175cc71e390eac49b459da5cdcd035bb621c53c353f964bbdd217c00d1e6b57e9721df2c3775b0c01bdb358c3051e50c0b46492296b14395668ee39234a9c3415ed95a059b1c931e8ad5054de9bf5b76412e3ebd0a9c4213cfd76cc0ae01d6d8a0446116abfc44f30916d00c8e41535c25fde333fa0aef41fd6c7ddc651c78df83a910efe5a6cca4126432ae7c442cc444b6e0ac7d3da48c357050837352cf27d78712357aae13e466b46668ee2b56bbfbfc0ed377b26c7a7bf7bb1dbc55f269137050defb06364edfc2317163c943b3a2d13d07e7ceb883c4051cf1291be66ba089fe7"}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10e5864299b5eb31}, 0xc, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="14000000582f9cae7372c08cf7c7642d8f7b98ec8e27a7a492c76347b2e818fb7fff3793f0beb9bb6178b62e8f15ecdafdc18f8625a9ebe48439a13dc56249bf6b6e186796ab5e174aed2b19075ecc7807b1fd1921393cb04dac99849bb7ee2566e3a7a89f61c4d8846925c64004617384d8aae404d2abe602d4ef596f90dd58ce635e9629", @ANYRES16=0x0, @ANYBLOB="0000000000000000000002000000"], 0x14}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="28100000", @ANYRES16=0x0, @ANYBLOB="000226bd7000ffdbdf255500000099f603eb", @ANYRES32=0x0, @ANYBLOB="0c009900ff7f00004c000000"], 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x804) r1 = epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f0000001180)={0xa}) socketpair(0x2b, 0x80000, 0x9, &(0x7f0000000540)) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) read$snapshot(r2, &(0x7f0000000280)=""/117, 0x75) write$snapshot(0xffffffffffffffff, &(0x7f00000007c0)="c181b52bec06e39fa7a56164d14d2d0380d61edb4b3ce5a8eb43375b61f374265070ec124878fca61e6b42eab3e1509c3b78236abecd989775d9ecd8f8753237ccdcfe530f0c066477afce42227fca75a701cb512655ecbae5d7184f20e20e4ea7b21f0460d54ffd9c8b3565bc40453415b6ec08", 0x74) ioctl$SNAPSHOT_CREATE_IMAGE(r2, 0x40043311, &(0x7f0000000300)) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r2, 0x330f, 0x3) socketpair(0x9, 0x2, 0x2, &(0x7f0000000380)) read$snapshot(r2, &(0x7f00000004c0)=""/79, 0x4f) syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), r2) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r2, 0x3309) 04:59:39 executing program 5: ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) clock_gettime(0x5, &(0x7f0000000040)) 04:59:39 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000080)) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x10000, 0x8e, 0x44, 0x7fff, 0x19, "b685da6780c2d1404da9cbff178fe5b07c8316"}) socketpair(0x6, 0x1, 0x2, &(0x7f0000000000)) 04:59:39 executing program 1: r0 = epoll_create1(0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, 0x0) 04:59:40 executing program 3: epoll_create1(0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000001180)={0x50002002}) 04:59:40 executing program 4: ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000000)) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f00000000c0)={0x6, &(0x7f0000000080)=[{0x4, 0x4}, {0x9, 0x7}, {0xb, 0x3f}, {0x3, 0x1}, {0x100, 0x7}, {0xe30, 0xe67}]}) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000100)=0x1, 0x4) r1 = epoll_create1(0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000001180)) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000000)) (async) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) (async) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f00000000c0)={0x6, &(0x7f0000000080)=[{0x4, 0x4}, {0x9, 0x7}, {0xb, 0x3f}, {0x3, 0x1}, {0x100, 0x7}, {0xe30, 0xe67}]}) (async) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000100)=0x1, 0x4) (async) epoll_create1(0x0) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000001180)) (async) 04:59:40 executing program 5: clock_gettime(0x5, &(0x7f0000000040)) 04:59:40 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) (async) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000080)) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x10000, 0x8e, 0x44, 0x7fff, 0x19, "b685da6780c2d1404da9cbff178fe5b07c8316"}) (async) socketpair(0x6, 0x1, 0x2, &(0x7f0000000000)) 04:59:40 executing program 1: r0 = epoll_create1(0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, 0x0) 04:59:40 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000400)={0x1c9, 0x20, &(0x7f0000000000)="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"}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10e5864299b5eb31}, 0xc, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="14000000582f9cae7372c08cf7c7642d8f7b98ec8e27a7a492c76347b2e818fb7fff3793f0beb9bb6178b62e8f15ecdafdc18f8625a9ebe48439a13dc56249bf6b6e186796ab5e174aed2b19075ecc7807b1fd1921393cb04dac99849bb7ee2566e3a7a89f61c4d8846925c64004617384d8aae404d2abe602d4ef596f90dd58ce635e9629", @ANYRES16=0x0, @ANYBLOB="0000000000000000000002000000"], 0x14}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="28100000", @ANYRES16=0x0, @ANYBLOB="000226bd7000ffdbdf255500000099f603eb", @ANYRES32=0x0, @ANYBLOB="0c009900ff7f00004c000000"], 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x804) r1 = epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f0000001180)={0xa}) socketpair(0x2b, 0x80000, 0x9, &(0x7f0000000540)) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) read$snapshot(r2, &(0x7f0000000280)=""/117, 0x75) write$snapshot(0xffffffffffffffff, &(0x7f00000007c0)="c181b52bec06e39fa7a56164d14d2d0380d61edb4b3ce5a8eb43375b61f374265070ec124878fca61e6b42eab3e1509c3b78236abecd989775d9ecd8f8753237ccdcfe530f0c066477afce42227fca75a701cb512655ecbae5d7184f20e20e4ea7b21f0460d54ffd9c8b3565bc40453415b6ec08", 0x74) ioctl$SNAPSHOT_CREATE_IMAGE(r2, 0x40043311, &(0x7f0000000300)) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r2, 0x330f, 0x3) socketpair(0x9, 0x2, 0x2, &(0x7f0000000380)) read$snapshot(r2, &(0x7f00000004c0)=""/79, 0x4f) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r2, 0x3309) 04:59:40 executing program 3: r0 = epoll_create1(0x0) socket$inet6_sctp(0xa, 0x1, 0x84) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000001180)={0x50002002}) 04:59:40 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000080)) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x10000, 0x8e, 0x44, 0x7fff, 0x19, "b685da6780c2d1404da9cbff178fe5b07c8316"}) socketpair(0x6, 0x1, 0x2, &(0x7f0000000000)) 04:59:40 executing program 1: r0 = epoll_create1(0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000001180)) 04:59:40 executing program 5: clock_gettime(0x0, &(0x7f0000000040)) 04:59:40 executing program 4: ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000000)) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f00000000c0)={0x6, &(0x7f0000000080)=[{0x4, 0x4}, {0x9, 0x7}, {0xb, 0x3f}, {0x3, 0x1}, {0x100, 0x7}, {0xe30, 0xe67}]}) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000100)=0x1, 0x4) r1 = epoll_create1(0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000001180)) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000000)) (async) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) (async) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f00000000c0)={0x6, &(0x7f0000000080)=[{0x4, 0x4}, {0x9, 0x7}, {0xb, 0x3f}, {0x3, 0x1}, {0x100, 0x7}, {0xe30, 0xe67}]}) (async) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000100)=0x1, 0x4) (async) epoll_create1(0x0) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000001180)) (async) 04:59:40 executing program 3: r0 = epoll_create1(0x0) socket$inet6_sctp(0xa, 0x1, 0x84) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000001180)={0x50002002}) 04:59:40 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1c) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDMKTONE(r1, 0x4b30, 0x3f) ioctl$TIOCCONS(r1, 0x541d) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x0, 0x3}, {0x1ff, 0x5}, {0x3, 0x8}]}) 04:59:40 executing program 1: r0 = epoll_create1(0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000001180)) 04:59:40 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000400)={0x1c9, 0x20, &(0x7f0000000000)="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"}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10e5864299b5eb31}, 0xc, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="14000000582f9cae7372c08cf7c7642d8f7b98ec8e27a7a492c76347b2e818fb7fff3793f0beb9bb6178b62e8f15ecdafdc18f8625a9ebe48439a13dc56249bf6b6e186796ab5e174aed2b19075ecc7807b1fd1921393cb04dac99849bb7ee2566e3a7a89f61c4d8846925c64004617384d8aae404d2abe602d4ef596f90dd58ce635e9629", @ANYRES16=0x0, @ANYBLOB="0000000000000000000002000000"], 0x14}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="28100000", @ANYRES16=0x0, @ANYBLOB="000226bd7000ffdbdf255500000099f603eb", @ANYRES32=0x0, @ANYBLOB="0c009900ff7f00004c000000"], 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x804) r1 = epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f0000001180)={0xa}) socketpair(0x2b, 0x80000, 0x9, &(0x7f0000000540)) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) read$snapshot(r2, &(0x7f0000000280)=""/117, 0x75) write$snapshot(0xffffffffffffffff, &(0x7f00000007c0)="c181b52bec06e39fa7a56164d14d2d0380d61edb4b3ce5a8eb43375b61f374265070ec124878fca61e6b42eab3e1509c3b78236abecd989775d9ecd8f8753237ccdcfe530f0c066477afce42227fca75a701cb512655ecbae5d7184f20e20e4ea7b21f0460d54ffd9c8b3565bc40453415b6ec08", 0x74) ioctl$SNAPSHOT_CREATE_IMAGE(r2, 0x40043311, &(0x7f0000000300)) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r2, 0x330f, 0x3) socketpair(0x9, 0x2, 0x2, &(0x7f0000000380)) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r2, 0x3309) 04:59:40 executing program 5: clock_gettime(0x0, &(0x7f0000000040)) 04:59:40 executing program 4: r0 = epoll_create1(0x0) r1 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r1, &(0x7f0000000500)=[{}], 0x1, 0x0) ioctl$KVM_GET_FPU(r1, 0x81a0ae8c, &(0x7f0000000000)) r2 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000001180)) 04:59:40 executing program 3: r0 = epoll_create1(0x0) socket$inet6_sctp(0xa, 0x1, 0x84) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000001180)={0x50002002}) 04:59:40 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1c) (async) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDMKTONE(r1, 0x4b30, 0x3f) (async) ioctl$TIOCCONS(r1, 0x541d) (async) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x0, 0x3}, {0x1ff, 0x5}, {0x3, 0x8}]}) 04:59:40 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1c) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDMKTONE(r1, 0x4b30, 0x3f) ioctl$TIOCCONS(r1, 0x541d) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x0, 0x3}, {0x1ff, 0x5}, {0x3, 0x8}]}) 04:59:40 executing program 4: r0 = epoll_create1(0x0) r1 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r1, &(0x7f0000000500)=[{}], 0x1, 0x0) ioctl$KVM_GET_FPU(r1, 0x81a0ae8c, &(0x7f0000000000)) r2 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000001180)) epoll_create1(0x0) (async) syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) (async) epoll_wait(r1, &(0x7f0000000500)=[{}], 0x1, 0x0) (async) ioctl$KVM_GET_FPU(r1, 0x81a0ae8c, &(0x7f0000000000)) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000001180)) (async) 04:59:40 executing program 3: r0 = epoll_create1(0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, 0x0) 04:59:40 executing program 5: clock_gettime(0x0, &(0x7f0000000040)) 04:59:40 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000400)={0x1c9, 0x20, &(0x7f0000000000)="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"}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10e5864299b5eb31}, 0xc, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="14000000582f9cae7372c08cf7c7642d8f7b98ec8e27a7a492c76347b2e818fb7fff3793f0beb9bb6178b62e8f15ecdafdc18f8625a9ebe48439a13dc56249bf6b6e186796ab5e174aed2b19075ecc7807b1fd1921393cb04dac99849bb7ee2566e3a7a89f61c4d8846925c64004617384d8aae404d2abe602d4ef596f90dd58ce635e9629", @ANYRES16=0x0, @ANYBLOB="0000000000000000000002000000"], 0x14}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="28100000", @ANYRES16=0x0, @ANYBLOB="000226bd7000ffdbdf255500000099f603eb", @ANYRES32=0x0, @ANYBLOB="0c009900ff7f00004c000000"], 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x804) r1 = epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f0000001180)={0xa}) socketpair(0x2b, 0x80000, 0x9, &(0x7f0000000540)) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) read$snapshot(r2, &(0x7f0000000280)=""/117, 0x75) write$snapshot(0xffffffffffffffff, &(0x7f00000007c0)="c181b52bec06e39fa7a56164d14d2d0380d61edb4b3ce5a8eb43375b61f374265070ec124878fca61e6b42eab3e1509c3b78236abecd989775d9ecd8f8753237ccdcfe530f0c066477afce42227fca75a701cb512655ecbae5d7184f20e20e4ea7b21f0460d54ffd9c8b3565bc40453415b6ec08", 0x74) ioctl$SNAPSHOT_CREATE_IMAGE(r2, 0x40043311, &(0x7f0000000300)) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r2, 0x330f, 0x3) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r2, 0x3309) 04:59:40 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1c) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDMKTONE(r1, 0x4b30, 0x3f) ioctl$TIOCCONS(r1, 0x541d) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x0, 0x3}, {0x1ff, 0x5}, {0x3, 0x8}]}) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1c) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$KDMKTONE(r1, 0x4b30, 0x3f) (async) ioctl$TIOCCONS(r1, 0x541d) (async) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x0, 0x3}, {0x1ff, 0x5}, {0x3, 0x8}]}) (async) 04:59:40 executing program 4: r0 = epoll_create1(0x0) r1 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r1, &(0x7f0000000500)=[{}], 0x1, 0x0) ioctl$KVM_GET_FPU(r1, 0x81a0ae8c, &(0x7f0000000000)) (async, rerun: 64) r2 = socket$l2tp6(0xa, 0x2, 0x73) (rerun: 64) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000001180)) 04:59:40 executing program 3: r0 = epoll_create1(0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, 0x0) 04:59:40 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000400)={0x1c9, 0x20, &(0x7f0000000000)="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"}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10e5864299b5eb31}, 0xc, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="14000000582f9cae7372c08cf7c7642d8f7b98ec8e27a7a492c76347b2e818fb7fff3793f0beb9bb6178b62e8f15ecdafdc18f8625a9ebe48439a13dc56249bf6b6e186796ab5e174aed2b19075ecc7807b1fd1921393cb04dac99849bb7ee2566e3a7a89f61c4d8846925c64004617384d8aae404d2abe602d4ef596f90dd58ce635e9629", @ANYRES16=0x0, @ANYBLOB="0000000000000000000002000000"], 0x14}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="28100000", @ANYRES16=0x0, @ANYBLOB="000226bd7000ffdbdf255500000099f603eb", @ANYRES32=0x0, @ANYBLOB="0c009900ff7f00004c000000"], 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x804) r1 = epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f0000001180)={0xa}) socketpair(0x2b, 0x80000, 0x9, &(0x7f0000000540)) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) read$snapshot(r2, &(0x7f0000000280)=""/117, 0x75) write$snapshot(0xffffffffffffffff, &(0x7f00000007c0)="c181b52bec06e39fa7a56164d14d2d0380d61edb4b3ce5a8eb43375b61f374265070ec124878fca61e6b42eab3e1509c3b78236abecd989775d9ecd8f8753237ccdcfe530f0c066477afce42227fca75a701cb512655ecbae5d7184f20e20e4ea7b21f0460d54ffd9c8b3565bc40453415b6ec08", 0x74) ioctl$SNAPSHOT_CREATE_IMAGE(r2, 0x40043311, &(0x7f0000000300)) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r2, 0x330f, 0x3) socketpair(0x9, 0x2, 0x2, &(0x7f0000000380)) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r2, 0x3309) 04:59:40 executing program 5: clock_gettime(0x5, 0x0) 04:59:40 executing program 5: clock_gettime(0x5, 0x0) 04:59:40 executing program 3: r0 = epoll_create1(0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, 0x0) 04:59:40 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000400)={0x1c9, 0x20, &(0x7f0000000000)="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"}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10e5864299b5eb31}, 0xc, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="14000000582f9cae7372c08cf7c7642d8f7b98ec8e27a7a492c76347b2e818fb7fff3793f0beb9bb6178b62e8f15ecdafdc18f8625a9ebe48439a13dc56249bf6b6e186796ab5e174aed2b19075ecc7807b1fd1921393cb04dac99849bb7ee2566e3a7a89f61c4d8846925c64004617384d8aae404d2abe602d4ef596f90dd58ce635e9629", @ANYRES16=0x0, @ANYBLOB="0000000000000000000002000000"], 0x14}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="28100000", @ANYRES16=0x0, @ANYBLOB="000226bd7000ffdbdf255500000099f603eb", @ANYRES32=0x0, @ANYBLOB="0c009900ff7f00004c000000"], 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x804) r1 = epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f0000001180)={0xa}) socketpair(0x2b, 0x80000, 0x9, &(0x7f0000000540)) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) read$snapshot(r2, &(0x7f0000000280)=""/117, 0x75) write$snapshot(0xffffffffffffffff, &(0x7f00000007c0)="c181b52bec06e39fa7a56164d14d2d0380d61edb4b3ce5a8eb43375b61f374265070ec124878fca61e6b42eab3e1509c3b78236abecd989775d9ecd8f8753237ccdcfe530f0c066477afce42227fca75a701cb512655ecbae5d7184f20e20e4ea7b21f0460d54ffd9c8b3565bc40453415b6ec08", 0x74) ioctl$SNAPSHOT_CREATE_IMAGE(r2, 0x40043311, &(0x7f0000000300)) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r2, 0x330f, 0x3) socketpair(0x9, 0x2, 0x2, &(0x7f0000000380)) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r2, 0x3309) 04:59:40 executing program 5: clock_gettime(0x5, 0x0) 04:59:40 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCGICOUNT(r0, 0x545d, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x281b) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCCONS(r1, 0x541d) ioctl$VT_WAITACTIVE(r1, 0x5607) 04:59:40 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000400)={0x1c9, 0x20, &(0x7f0000000000)="4098179969523b06e599e9a25580b001cdac86a3c23ea1781c4b943ff345c2e484b37820f6c35ac73e3e139852f3461419374e79aba15cb4b46a0dbbbc3d089a734f0b8cf18bc709e213e3d68c1c9276160a214ac24d05bc03e5ea9f9d45e9145a0bd0b8afce710825871766015a1e627b937ae41551a847a4f442c414432f21ff985d7e76f51055349836e818053350f2f2348603a7434374bd39a3a53a6c0d9078dc6b23c13651ee268d48abfceaf31f600f62d96b62ba89560c186bea95c2b39be75e22084f52104212fa5dd512c3779c5b97a3201bd18bd42bff3a37f7555a7f5de7a0af2198725f938222a0153985560e2787c85cd4267e90cfbbee12023bba21853b42467389ac32444d8044301969763112a7f84228f5bfc0515de879579ee224dcc9ba8fff1be06a9aca44517f86feb1743d8eef0596b7d8795586387792fd02969cbe748e26638f8589269a7b752bb2f79d2f88737ad69c1bb8fe301acfa4973c8890b8165b05d5cacf34ee845feb847e10f15adc7b50c0118252251bbafac671e70cf6a58cffe8cbf4de581dc4339db58bda4bac00395daf9270fa28b8fb8c88942ff7f4025145e9547d83d190e7ffaecc3aed86ad0c8ac08fb823230df09f842ae54869ab310b8b92bab0f0533970f6cdddc02acf0e92716e524785d23c2ef40e87b6bda9034753e470dbf4e9abd55395b1dab2b2ff2b668deceab730593069287b2d8af194a6e009bd48a88ca292f64a948bba09fde00f02c498e4fea89db6463438f26b1cb27ac7974319746c519c1be663729b2d209e2a0dd35cecb18d0b1912a4bacc7827da93649e8f44f5a567ddca3268b169e3ceb3d26633920f940433a414215d1c2c1cccbaccdca07367d6de00ac03aa9bf81b8cb4b8a1fd80e247d8d83099ef14a2b458976b5c6a33a567ce9cc061b347bb25d48e51a8285025287d95bd5f90d6c57a410987054902bdda8d5032dcdfa1ef8ad268d88fa14997ce20d560759e140ee5dff134b69df205f02d72893cac6f454fbab3ba484dd2b0650622115860b72798a4bf443aba5940d63852fc74f64da881c0f20153d055ce968ae69f0040faaa2851800c4bc793329ccbe204849709009175cc71e390eac49b459da5cdcd035bb621c53c353f964bbdd217c00d1e6b57e9721df2c3775b0c01bdb358c3051e50c0b46492296b14395668ee39234a9c3415ed95a059b1c931e8ad5054de9bf5b76412e3ebd0a9c4213cfd76cc0ae01d6d8a0446116abfc44f30916d00c8e41535c25fde333fa0aef41fd6c7ddc651c78df83a910efe5a6cca4126432ae7c442cc444b6e0ac7d3da48c357050837352cf27d78712357aae13e466b46668ee2b56bbfbfc0ed377b26c7a7bf7bb1dbc55f269137050defb06364edfc2317163c943b3a2d13d07e7ceb883c4051cf1291be66ba089fe7"}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10e5864299b5eb31}, 0xc, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="14000000582f9cae7372c08cf7c7642d8f7b98ec8e27a7a492c76347b2e818fb7fff3793f0beb9bb6178b62e8f15ecdafdc18f8625a9ebe48439a13dc56249bf6b6e186796ab5e174aed2b19075ecc7807b1fd1921393cb04dac99849bb7ee2566e3a7a89f61c4d8846925c64004617384d8aae404d2abe602d4ef596f90dd58ce635e9629", @ANYRES16=0x0, @ANYBLOB="0000000000000000000002000000"], 0x14}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="28100000", @ANYRES16=0x0, @ANYBLOB="000226bd7000ffdbdf255500000099f603eb", @ANYRES32=0x0, @ANYBLOB="0c009900ff7f00004c000000"], 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x804) r1 = epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f0000001180)={0xa}) socketpair(0x2b, 0x80000, 0x9, &(0x7f0000000540)) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) read$snapshot(r2, &(0x7f0000000280)=""/117, 0x75) write$snapshot(0xffffffffffffffff, &(0x7f00000007c0)="c181b52bec06e39fa7a56164d14d2d0380d61edb4b3ce5a8eb43375b61f374265070ec124878fca61e6b42eab3e1509c3b78236abecd989775d9ecd8f8753237ccdcfe530f0c066477afce42227fca75a701cb512655ecbae5d7184f20e20e4ea7b21f0460d54ffd9c8b3565bc40453415b6ec08", 0x74) ioctl$SNAPSHOT_CREATE_IMAGE(r2, 0x40043311, &(0x7f0000000300)) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r2, 0x3309) 04:59:40 executing program 4: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) r2 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r0, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCEXCL(r2, 0x540c) 04:59:40 executing program 3: r0 = epoll_create1(0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) 04:59:40 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x1) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCGICOUNT(r0, 0x545d, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x281b) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCCONS(r1, 0x541d) (async) ioctl$VT_WAITACTIVE(r1, 0x5607) 04:59:40 executing program 4: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) (async) r2 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r0, &(0x7f0000000500), 0x0, 0x0) (async) ioctl$TIOCEXCL(r2, 0x540c) 04:59:40 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000001180)) 04:59:40 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000400)={0x1c9, 0x20, &(0x7f0000000000)="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"}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10e5864299b5eb31}, 0xc, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="14000000582f9cae7372c08cf7c7642d8f7b98ec8e27a7a492c76347b2e818fb7fff3793f0beb9bb6178b62e8f15ecdafdc18f8625a9ebe48439a13dc56249bf6b6e186796ab5e174aed2b19075ecc7807b1fd1921393cb04dac99849bb7ee2566e3a7a89f61c4d8846925c64004617384d8aae404d2abe602d4ef596f90dd58ce635e9629", @ANYRES16=0x0, @ANYBLOB="0000000000000000000002000000"], 0x14}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="28100000", @ANYRES16=0x0, @ANYBLOB="000226bd7000ffdbdf255500000099f603eb", @ANYRES32=0x0, @ANYBLOB="0c009900ff7f00004c000000"], 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x804) r1 = epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f0000001180)={0xa}) socketpair(0x2b, 0x80000, 0x9, &(0x7f0000000540)) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) read$snapshot(r2, &(0x7f0000000280)=""/117, 0x75) write$snapshot(0xffffffffffffffff, &(0x7f00000007c0)="c181b52bec06e39fa7a56164d14d2d0380d61edb4b3ce5a8eb43375b61f374265070ec124878fca61e6b42eab3e1509c3b78236abecd989775d9ecd8f8753237ccdcfe530f0c066477afce42227fca75a701cb512655ecbae5d7184f20e20e4ea7b21f0460d54ffd9c8b3565bc40453415b6ec08", 0x74) ioctl$SNAPSHOT_CREATE_IMAGE(r2, 0x40043311, &(0x7f0000000300)) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r2, 0x3309) 04:59:40 executing program 3: r0 = epoll_create1(0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) 04:59:40 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000400)={0x1c9, 0x20, &(0x7f0000000000)="4098179969523b06e599e9a25580b001cdac86a3c23ea1781c4b943ff345c2e484b37820f6c35ac73e3e139852f3461419374e79aba15cb4b46a0dbbbc3d089a734f0b8cf18bc709e213e3d68c1c9276160a214ac24d05bc03e5ea9f9d45e9145a0bd0b8afce710825871766015a1e627b937ae41551a847a4f442c414432f21ff985d7e76f51055349836e818053350f2f2348603a7434374bd39a3a53a6c0d9078dc6b23c13651ee268d48abfceaf31f600f62d96b62ba89560c186bea95c2b39be75e22084f52104212fa5dd512c3779c5b97a3201bd18bd42bff3a37f7555a7f5de7a0af2198725f938222a0153985560e2787c85cd4267e90cfbbee12023bba21853b42467389ac32444d8044301969763112a7f84228f5bfc0515de879579ee224dcc9ba8fff1be06a9aca44517f86feb1743d8eef0596b7d8795586387792fd02969cbe748e26638f8589269a7b752bb2f79d2f88737ad69c1bb8fe301acfa4973c8890b8165b05d5cacf34ee845feb847e10f15adc7b50c0118252251bbafac671e70cf6a58cffe8cbf4de581dc4339db58bda4bac00395daf9270fa28b8fb8c88942ff7f4025145e9547d83d190e7ffaecc3aed86ad0c8ac08fb823230df09f842ae54869ab310b8b92bab0f0533970f6cdddc02acf0e92716e524785d23c2ef40e87b6bda9034753e470dbf4e9abd55395b1dab2b2ff2b668deceab730593069287b2d8af194a6e009bd48a88ca292f64a948bba09fde00f02c498e4fea89db6463438f26b1cb27ac7974319746c519c1be663729b2d209e2a0dd35cecb18d0b1912a4bacc7827da93649e8f44f5a567ddca3268b169e3ceb3d26633920f940433a414215d1c2c1cccbaccdca07367d6de00ac03aa9bf81b8cb4b8a1fd80e247d8d83099ef14a2b458976b5c6a33a567ce9cc061b347bb25d48e51a8285025287d95bd5f90d6c57a410987054902bdda8d5032dcdfa1ef8ad268d88fa14997ce20d560759e140ee5dff134b69df205f02d72893cac6f454fbab3ba484dd2b0650622115860b72798a4bf443aba5940d63852fc74f64da881c0f20153d055ce968ae69f0040faaa2851800c4bc793329ccbe204849709009175cc71e390eac49b459da5cdcd035bb621c53c353f964bbdd217c00d1e6b57e9721df2c3775b0c01bdb358c3051e50c0b46492296b14395668ee39234a9c3415ed95a059b1c931e8ad5054de9bf5b76412e3ebd0a9c4213cfd76cc0ae01d6d8a0446116abfc44f30916d00c8e41535c25fde333fa0aef41fd6c7ddc651c78df83a910efe5a6cca4126432ae7c442cc444b6e0ac7d3da48c357050837352cf27d78712357aae13e466b46668ee2b56bbfbfc0ed377b26c7a7bf7bb1dbc55f269137050defb06364edfc2317163c943b3a2d13d07e7ceb883c4051cf1291be66ba089fe7"}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10e5864299b5eb31}, 0xc, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="14000000582f9cae7372c08cf7c7642d8f7b98ec8e27a7a492c76347b2e818fb7fff3793f0beb9bb6178b62e8f15ecdafdc18f8625a9ebe48439a13dc56249bf6b6e186796ab5e174aed2b19075ecc7807b1fd1921393cb04dac99849bb7ee2566e3a7a89f61c4d8846925c64004617384d8aae404d2abe602d4ef596f90dd58ce635e9629", @ANYRES16=0x0, @ANYBLOB="0000000000000000000002000000"], 0x14}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="28100000", @ANYRES16=0x0, @ANYBLOB="000226bd7000ffdbdf255500000099f603eb", @ANYRES32=0x0, @ANYBLOB="0c009900ff7f00004c000000"], 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x804) r1 = epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f0000001180)={0xa}) socketpair(0x2b, 0x80000, 0x9, &(0x7f0000000540)) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) read$snapshot(r2, &(0x7f0000000280)=""/117, 0x75) write$snapshot(0xffffffffffffffff, &(0x7f00000007c0)="c181b52bec06e39fa7a56164d14d2d0380d61edb4b3ce5a8eb43375b61f374265070ec124878fca61e6b42eab3e1509c3b78236abecd989775d9ecd8f8753237ccdcfe530f0c066477afce42227fca75a701cb512655ecbae5d7184f20e20e4ea7b21f0460d54ffd9c8b3565bc40453415b6ec08", 0x74) ioctl$SNAPSHOT_CREATE_IMAGE(r2, 0x40043311, &(0x7f0000000300)) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r2, 0x330f, 0x3) socketpair(0x9, 0x2, 0x2, &(0x7f0000000380)) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r2, 0x3309) 04:59:40 executing program 4: r0 = epoll_create1(0x0) (async) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) r2 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r0, &(0x7f0000000500), 0x0, 0x0) (async) ioctl$TIOCEXCL(r2, 0x540c) 04:59:40 executing program 5: r0 = epoll_create1(0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) 04:59:40 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCGICOUNT(r0, 0x545d, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x281b) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCCONS(r1, 0x541d) ioctl$VT_WAITACTIVE(r1, 0x5607) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) syz_open_dev$ptys(0xc, 0x3, 0x1) (async) ioctl$TIOCGICOUNT(r0, 0x545d, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x281b) (async) syz_open_dev$ptys(0xc, 0x3, 0x1) (async) ioctl$TIOCCONS(r1, 0x541d) (async) ioctl$VT_WAITACTIVE(r1, 0x5607) (async) 04:59:40 executing program 3: r0 = epoll_create1(0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) 04:59:40 executing program 1: r0 = epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) read$snapshot(r1, &(0x7f0000000280)=""/117, 0x75) ioctl$SNAPSHOT_CREATE_IMAGE(r1, 0x40043311, &(0x7f0000000300)) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r1, 0x330f, 0x3) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000001180)={0x50002002}) 04:59:40 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000400)={0x1c9, 0x20, &(0x7f0000000000)="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"}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10e5864299b5eb31}, 0xc, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="14000000582f9cae7372c08cf7c7642d8f7b98ec8e27a7a492c76347b2e818fb7fff3793f0beb9bb6178b62e8f15ecdafdc18f8625a9ebe48439a13dc56249bf6b6e186796ab5e174aed2b19075ecc7807b1fd1921393cb04dac99849bb7ee2566e3a7a89f61c4d8846925c64004617384d8aae404d2abe602d4ef596f90dd58ce635e9629", @ANYRES16=0x0, @ANYBLOB="0000000000000000000002000000"], 0x14}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="28100000", @ANYRES16=0x0, @ANYBLOB="000226bd7000ffdbdf255500000099f603eb", @ANYRES32=0x0, @ANYBLOB="0c009900ff7f00004c000000"], 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x804) r1 = epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f0000001180)={0xa}) socketpair(0x2b, 0x80000, 0x9, &(0x7f0000000540)) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) read$snapshot(r2, &(0x7f0000000280)=""/117, 0x75) write$snapshot(0xffffffffffffffff, &(0x7f00000007c0)="c181b52bec06e39fa7a56164d14d2d0380d61edb4b3ce5a8eb43375b61f374265070ec124878fca61e6b42eab3e1509c3b78236abecd989775d9ecd8f8753237ccdcfe530f0c066477afce42227fca75a701cb512655ecbae5d7184f20e20e4ea7b21f0460d54ffd9c8b3565bc40453415b6ec08", 0x74) ioctl$SNAPSHOT_CREATE_IMAGE(r2, 0x40043311, &(0x7f0000000300)) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r2, 0x3309) 04:59:40 executing program 5: r0 = epoll_create1(0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) 04:59:40 executing program 4: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="48000300", @ANYRES16=0x0, @ANYBLOB="31002dbd7000fedbdf2505000000050005000100000005000600430000000c0016000200000000000000050012000600000006001b004e2200000800110000000000"], 0x48}}, 0x8001) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r2) sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, r4, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'nr0\x00'}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @loopback}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x40800}, 0x4008000) 04:59:40 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x2, 0x2000) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000040)=@hopopts={0x87, 0x4, '\x00', [@ra={0x5, 0x2, 0x7}, @ra={0x5, 0x2, 0x100}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, 0x30) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)=0x1b) 04:59:40 executing program 3: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) epoll_create1(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x4402, 0x0) 04:59:40 executing program 5: r0 = epoll_create1(0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) 04:59:40 executing program 4: r0 = epoll_create1(0x0) (async) r1 = socket$l2tp6(0xa, 0x2, 0x73) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="48000300", @ANYRES16=0x0, @ANYBLOB="31002dbd7000fedbdf2505000000050005000100000005000600430000000c0016000200000000000000050012000600000006001b004e2200000800110000000000"], 0x48}}, 0x8001) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r2) sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, r4, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'nr0\x00'}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @loopback}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x40800}, 0x4008000) 04:59:41 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = epoll_create1(0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000001180)) 04:59:41 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000400)={0x1c9, 0x20, &(0x7f0000000000)="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"}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10e5864299b5eb31}, 0xc, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="14000000582f9cae7372c08cf7c7642d8f7b98ec8e27a7a492c76347b2e818fb7fff3793f0beb9bb6178b62e8f15ecdafdc18f8625a9ebe48439a13dc56249bf6b6e186796ab5e174aed2b19075ecc7807b1fd1921393cb04dac99849bb7ee2566e3a7a89f61c4d8846925c64004617384d8aae404d2abe602d4ef596f90dd58ce635e9629", @ANYRES16=0x0, @ANYBLOB="0000000000000000000002000000"], 0x14}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="28100000", @ANYRES16=0x0, @ANYBLOB="000226bd7000ffdbdf255500000099f603eb", @ANYRES32=0x0, @ANYBLOB="0c009900ff7f00004c000000"], 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x804) r1 = epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f0000001180)={0xa}) socketpair(0x2b, 0x80000, 0x9, &(0x7f0000000540)) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) read$snapshot(r2, &(0x7f0000000280)=""/117, 0x75) write$snapshot(0xffffffffffffffff, &(0x7f00000007c0)="c181b52bec06e39fa7a56164d14d2d0380d61edb4b3ce5a8eb43375b61f374265070ec124878fca61e6b42eab3e1509c3b78236abecd989775d9ecd8f8753237ccdcfe530f0c066477afce42227fca75a701cb512655ecbae5d7184f20e20e4ea7b21f0460d54ffd9c8b3565bc40453415b6ec08", 0x74) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r2, 0x3309) 04:59:41 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x2, 0x2000) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000040)=@hopopts={0x87, 0x4, '\x00', [@ra={0x5, 0x2, 0x7}, @ra={0x5, 0x2, 0x100}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, 0x30) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)=0x1b) 04:59:41 executing program 5: r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000001180)) 04:59:41 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x2, 0x2000) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000040)=@hopopts={0x87, 0x4, '\x00', [@ra={0x5, 0x2, 0x7}, @ra={0x5, 0x2, 0x100}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, 0x30) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)=0x1b) 04:59:41 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = epoll_create1(0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000001180)) 04:59:41 executing program 4: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="48000300", @ANYRES16=0x0, @ANYBLOB="31002dbd7000fedbdf2505000000050005000100000005000600430000000c0016000200000000000000050012000600000006001b004e2200000800110000000000"], 0x48}}, 0x8001) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r2) sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, r4, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'nr0\x00'}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @loopback}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x40800}, 0x4008000) 04:59:41 executing program 5: r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000001180)) 04:59:41 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x2, 0x2000) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000040)=@hopopts={0x87, 0x4, '\x00', [@ra={0x5, 0x2, 0x7}, @ra={0x5, 0x2, 0x100}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, 0x30) (async) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)=0x1b) 04:59:41 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x4, 0x730, 0xffffffff, 0x360, 0x590, 0x590, 0xffffffff, 0xffffffff, 0x660, 0x660, 0x660, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x320, 0x360, 0x0, {}, [@common=@dst={{0x48}}, @common=@unspec=@bpf0={{0x230}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xffb, 0xbe, 0x1, 0xf890, 0x200, 0x7, 0x655b036b]}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'geneve0\x00', 'tunl0\x00'}, 0x0, 0x208, 0x230, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@private2, @ipv4={'\x00', '\xff\xff', @private}, @empty, @private1, @remote, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, @private0, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, @mcast1, @rand_addr=' \x01\x00']}}, @common=@mh={{0x28}, {'q<'}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x790) 04:59:41 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000400)={0x1c9, 0x20, &(0x7f0000000000)="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"}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10e5864299b5eb31}, 0xc, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="14000000582f9cae7372c08cf7c7642d8f7b98ec8e27a7a492c76347b2e818fb7fff3793f0beb9bb6178b62e8f15ecdafdc18f8625a9ebe48439a13dc56249bf6b6e186796ab5e174aed2b19075ecc7807b1fd1921393cb04dac99849bb7ee2566e3a7a89f61c4d8846925c64004617384d8aae404d2abe602d4ef596f90dd58ce635e9629", @ANYRES16=0x0, @ANYBLOB="0000000000000000000002000000"], 0x14}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="28100000", @ANYRES16=0x0, @ANYBLOB="000226bd7000ffdbdf255500000099f603eb", @ANYRES32=0x0, @ANYBLOB="0c009900ff7f00004c000000"], 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x804) r1 = epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f0000001180)={0xa}) socketpair(0x2b, 0x80000, 0x9, &(0x7f0000000540)) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) read$snapshot(r2, &(0x7f0000000280)=""/117, 0x75) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r2, 0x3309) 04:59:41 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = epoll_create1(0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000001180)) 04:59:41 executing program 5: r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000001180)) 04:59:41 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r0, &(0x7f0000000500)=[{}], 0x1, 0x0) ioctl$KVM_GET_FPU(r0, 0x81a0ae8c, &(0x7f00000001c0)) timer_create(0x3, &(0x7f0000000140)={0x0, 0x3c, 0x4, @thr={&(0x7f0000000000)="cec80acb8f6d2710b74a074e20f7fb873047cc76196a2c1ca02c0eb5eb0f4a9a7562ab34a2760edd6b2e450509875051a9d4755614a13936cb4969e6031f1de5fdbe581443b2c1076f6ba7dd822fc8e0ba7dade4af4296eab2bf83c305616cbd896ecaaa6683b377810cfeb1494e1ea60bc5e4fb63526b20fa0a3a0857cc26c633e1d5d836e26e3664cc3224cc9408a33a6d8d4216877d498d8abf8a3f2e7ec43947079d1c", &(0x7f00000000c0)="91b8c672158497f0cd12b8b87928913c6d575017fd27d75340452f773fbd6507adeaf13921bee49960c325bc437aceeb27c6dbee6a16816f505ff89f3389086b7640bc3629a9c6748d4dc39a956f950a1d5f99a0874cb67ee0793534e70cb4c677b275bcc1bcf6070e4c58bb6adf9768e7502fae93225c473201d2e810b91375"}}, &(0x7f0000000180)) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000400)={'ip6_vti0\x00', &(0x7f0000000380)={'sit0\x00', 0x0, 0x2f, 0x4, 0xf1, 0x0, 0x0, @private1, @remote, 0x700, 0x80, 0x80000001, 0x2}}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000440)={@remote, @mcast2, @mcast1, 0x80000001, 0x0, 0x400, 0x100, 0x1, 0x4200010, r1}) r2 = epoll_create1(0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000001180)) [ 560.110603] bpf: check failed: parse error 04:59:41 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x4, 0x730, 0xffffffff, 0x360, 0x590, 0x590, 0xffffffff, 0xffffffff, 0x660, 0x660, 0x660, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x320, 0x360, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x8, 0x0, 0x200, 0x2, 0x8, 0x1, 0x9, 0xa8be, 0xffff, 0x80, 0xd5d, 0xffff, 0x7], 0x2}}, @common=@unspec=@bpf0={{0x230}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xffb, 0xbe, 0x1, 0xf890, 0x200, 0x7, 0x655b036b, 0xa56]}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'geneve0\x00', 'tunl0\x00'}, 0x0, 0x208, 0x230, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@private2, @ipv4={'\x00', '\xff\xff', @private}, @empty, @private1, @remote, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, @private0, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, @mcast1, @rand_addr=' \x01\x00']}}, @common=@mh={{0x28}, {'q<'}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x790) 04:59:41 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0xe) 04:59:41 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r0, &(0x7f0000000500)=[{}], 0x1, 0x0) ioctl$KVM_GET_FPU(r0, 0x81a0ae8c, &(0x7f00000001c0)) timer_create(0x3, &(0x7f0000000140)={0x0, 0x3c, 0x4, @thr={&(0x7f0000000000)="cec80acb8f6d2710b74a074e20f7fb873047cc76196a2c1ca02c0eb5eb0f4a9a7562ab34a2760edd6b2e450509875051a9d4755614a13936cb4969e6031f1de5fdbe581443b2c1076f6ba7dd822fc8e0ba7dade4af4296eab2bf83c305616cbd896ecaaa6683b377810cfeb1494e1ea60bc5e4fb63526b20fa0a3a0857cc26c633e1d5d836e26e3664cc3224cc9408a33a6d8d4216877d498d8abf8a3f2e7ec43947079d1c", &(0x7f00000000c0)="91b8c672158497f0cd12b8b87928913c6d575017fd27d75340452f773fbd6507adeaf13921bee49960c325bc437aceeb27c6dbee6a16816f505ff89f3389086b7640bc3629a9c6748d4dc39a956f950a1d5f99a0874cb67ee0793534e70cb4c677b275bcc1bcf6070e4c58bb6adf9768e7502fae93225c473201d2e810b91375"}}, &(0x7f0000000180)) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000400)={'ip6_vti0\x00', &(0x7f0000000380)={'sit0\x00', 0x0, 0x2f, 0x4, 0xf1, 0x0, 0x0, @private1, @remote, 0x700, 0x80, 0x80000001, 0x2}}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000440)={@remote, @mcast2, @mcast1, 0x80000001, 0x0, 0x400, 0x100, 0x1, 0x4200010, r1}) r2 = epoll_create1(0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000001180)) syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) (async) epoll_wait(r0, &(0x7f0000000500)=[{}], 0x1, 0x0) (async) ioctl$KVM_GET_FPU(r0, 0x81a0ae8c, &(0x7f00000001c0)) (async) timer_create(0x3, &(0x7f0000000140)={0x0, 0x3c, 0x4, @thr={&(0x7f0000000000)="cec80acb8f6d2710b74a074e20f7fb873047cc76196a2c1ca02c0eb5eb0f4a9a7562ab34a2760edd6b2e450509875051a9d4755614a13936cb4969e6031f1de5fdbe581443b2c1076f6ba7dd822fc8e0ba7dade4af4296eab2bf83c305616cbd896ecaaa6683b377810cfeb1494e1ea60bc5e4fb63526b20fa0a3a0857cc26c633e1d5d836e26e3664cc3224cc9408a33a6d8d4216877d498d8abf8a3f2e7ec43947079d1c", &(0x7f00000000c0)="91b8c672158497f0cd12b8b87928913c6d575017fd27d75340452f773fbd6507adeaf13921bee49960c325bc437aceeb27c6dbee6a16816f505ff89f3389086b7640bc3629a9c6748d4dc39a956f950a1d5f99a0874cb67ee0793534e70cb4c677b275bcc1bcf6070e4c58bb6adf9768e7502fae93225c473201d2e810b91375"}}, &(0x7f0000000180)) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000400)={'ip6_vti0\x00', &(0x7f0000000380)={'sit0\x00', 0x0, 0x2f, 0x4, 0xf1, 0x0, 0x0, @private1, @remote, 0x700, 0x80, 0x80000001, 0x2}}) (async) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000440)={@remote, @mcast2, @mcast1, 0x80000001, 0x0, 0x400, 0x100, 0x1, 0x4200010, r1}) (async) epoll_create1(0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000001180)) (async) 04:59:41 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) 04:59:41 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000001180)) 04:59:41 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000400)={0x1c9, 0x20, &(0x7f0000000000)="4098179969523b06e599e9a25580b001cdac86a3c23ea1781c4b943ff345c2e484b37820f6c35ac73e3e139852f3461419374e79aba15cb4b46a0dbbbc3d089a734f0b8cf18bc709e213e3d68c1c9276160a214ac24d05bc03e5ea9f9d45e9145a0bd0b8afce710825871766015a1e627b937ae41551a847a4f442c414432f21ff985d7e76f51055349836e818053350f2f2348603a7434374bd39a3a53a6c0d9078dc6b23c13651ee268d48abfceaf31f600f62d96b62ba89560c186bea95c2b39be75e22084f52104212fa5dd512c3779c5b97a3201bd18bd42bff3a37f7555a7f5de7a0af2198725f938222a0153985560e2787c85cd4267e90cfbbee12023bba21853b42467389ac32444d8044301969763112a7f84228f5bfc0515de879579ee224dcc9ba8fff1be06a9aca44517f86feb1743d8eef0596b7d8795586387792fd02969cbe748e26638f8589269a7b752bb2f79d2f88737ad69c1bb8fe301acfa4973c8890b8165b05d5cacf34ee845feb847e10f15adc7b50c0118252251bbafac671e70cf6a58cffe8cbf4de581dc4339db58bda4bac00395daf9270fa28b8fb8c88942ff7f4025145e9547d83d190e7ffaecc3aed86ad0c8ac08fb823230df09f842ae54869ab310b8b92bab0f0533970f6cdddc02acf0e92716e524785d23c2ef40e87b6bda9034753e470dbf4e9abd55395b1dab2b2ff2b668deceab730593069287b2d8af194a6e009bd48a88ca292f64a948bba09fde00f02c498e4fea89db6463438f26b1cb27ac7974319746c519c1be663729b2d209e2a0dd35cecb18d0b1912a4bacc7827da93649e8f44f5a567ddca3268b169e3ceb3d26633920f940433a414215d1c2c1cccbaccdca07367d6de00ac03aa9bf81b8cb4b8a1fd80e247d8d83099ef14a2b458976b5c6a33a567ce9cc061b347bb25d48e51a8285025287d95bd5f90d6c57a410987054902bdda8d5032dcdfa1ef8ad268d88fa14997ce20d560759e140ee5dff134b69df205f02d72893cac6f454fbab3ba484dd2b0650622115860b72798a4bf443aba5940d63852fc74f64da881c0f20153d055ce968ae69f0040faaa2851800c4bc793329ccbe204849709009175cc71e390eac49b459da5cdcd035bb621c53c353f964bbdd217c00d1e6b57e9721df2c3775b0c01bdb358c3051e50c0b46492296b14395668ee39234a9c3415ed95a059b1c931e8ad5054de9bf5b76412e3ebd0a9c4213cfd76cc0ae01d6d8a0446116abfc44f30916d00c8e41535c25fde333fa0aef41fd6c7ddc651c78df83a910efe5a6cca4126432ae7c442cc444b6e0ac7d3da48c357050837352cf27d78712357aae13e466b46668ee2b56bbfbfc0ed377b26c7a7bf7bb1dbc55f269137050defb06364edfc2317163c943b3a2d13d07e7ceb883c4051cf1291be66ba089fe7"}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10e5864299b5eb31}, 0xc, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="14000000582f9cae7372c08cf7c7642d8f7b98ec8e27a7a492c76347b2e818fb7fff3793f0beb9bb6178b62e8f15ecdafdc18f8625a9ebe48439a13dc56249bf6b6e186796ab5e174aed2b19075ecc7807b1fd1921393cb04dac99849bb7ee2566e3a7a89f61c4d8846925c64004617384d8aae404d2abe602d4ef596f90dd58ce635e9629", @ANYRES16=0x0, @ANYBLOB="0000000000000000000002000000"], 0x14}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="28100000", @ANYRES16=0x0, @ANYBLOB="000226bd7000ffdbdf255500000099f603eb", @ANYRES32=0x0, @ANYBLOB="0c009900ff7f00004c000000"], 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x804) r1 = epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f0000001180)={0xa}) socketpair(0x2b, 0x80000, 0x9, &(0x7f0000000540)) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r2, 0x3309) 04:59:41 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000400)={0x1c9, 0x20, &(0x7f0000000000)="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"}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10e5864299b5eb31}, 0xc, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="14000000582f9cae7372c08cf7c7642d8f7b98ec8e27a7a492c76347b2e818fb7fff3793f0beb9bb6178b62e8f15ecdafdc18f8625a9ebe48439a13dc56249bf6b6e186796ab5e174aed2b19075ecc7807b1fd1921393cb04dac99849bb7ee2566e3a7a89f61c4d8846925c64004617384d8aae404d2abe602d4ef596f90dd58ce635e9629", @ANYRES16=0x0, @ANYBLOB="0000000000000000000002000000"], 0x14}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="28100000", @ANYRES16=0x0, @ANYBLOB="000226bd7000ffdbdf255500000099f603eb", @ANYRES32=0x0, @ANYBLOB="0c009900ff7f00004c000000"], 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x804) r1 = epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f0000001180)={0xa}) socketpair(0x2b, 0x80000, 0x9, &(0x7f0000000540)) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) read$snapshot(r2, &(0x7f0000000280)=""/117, 0x75) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r2, 0x3309) [ 560.209455] bpf: check failed: parse error 04:59:41 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0xe) 04:59:41 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) epoll_create1(0x0) 04:59:41 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000001180)) 04:59:41 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r0, &(0x7f0000000500)=[{}], 0x1, 0x0) ioctl$KVM_GET_FPU(r0, 0x81a0ae8c, &(0x7f00000001c0)) timer_create(0x3, &(0x7f0000000140)={0x0, 0x3c, 0x4, @thr={&(0x7f0000000000)="cec80acb8f6d2710b74a074e20f7fb873047cc76196a2c1ca02c0eb5eb0f4a9a7562ab34a2760edd6b2e450509875051a9d4755614a13936cb4969e6031f1de5fdbe581443b2c1076f6ba7dd822fc8e0ba7dade4af4296eab2bf83c305616cbd896ecaaa6683b377810cfeb1494e1ea60bc5e4fb63526b20fa0a3a0857cc26c633e1d5d836e26e3664cc3224cc9408a33a6d8d4216877d498d8abf8a3f2e7ec43947079d1c", &(0x7f00000000c0)="91b8c672158497f0cd12b8b87928913c6d575017fd27d75340452f773fbd6507adeaf13921bee49960c325bc437aceeb27c6dbee6a16816f505ff89f3389086b7640bc3629a9c6748d4dc39a956f950a1d5f99a0874cb67ee0793534e70cb4c677b275bcc1bcf6070e4c58bb6adf9768e7502fae93225c473201d2e810b91375"}}, &(0x7f0000000180)) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000400)={'ip6_vti0\x00', &(0x7f0000000380)={'sit0\x00', 0x0, 0x2f, 0x4, 0xf1, 0x0, 0x0, @private1, @remote, 0x700, 0x80, 0x80000001, 0x2}}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000440)={@remote, @mcast2, @mcast1, 0x80000001, 0x0, 0x400, 0x100, 0x1, 0x4200010, r1}) r2 = epoll_create1(0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000001180)) syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) (async) epoll_wait(r0, &(0x7f0000000500)=[{}], 0x1, 0x0) (async) ioctl$KVM_GET_FPU(r0, 0x81a0ae8c, &(0x7f00000001c0)) (async) timer_create(0x3, &(0x7f0000000140)={0x0, 0x3c, 0x4, @thr={&(0x7f0000000000)="cec80acb8f6d2710b74a074e20f7fb873047cc76196a2c1ca02c0eb5eb0f4a9a7562ab34a2760edd6b2e450509875051a9d4755614a13936cb4969e6031f1de5fdbe581443b2c1076f6ba7dd822fc8e0ba7dade4af4296eab2bf83c305616cbd896ecaaa6683b377810cfeb1494e1ea60bc5e4fb63526b20fa0a3a0857cc26c633e1d5d836e26e3664cc3224cc9408a33a6d8d4216877d498d8abf8a3f2e7ec43947079d1c", &(0x7f00000000c0)="91b8c672158497f0cd12b8b87928913c6d575017fd27d75340452f773fbd6507adeaf13921bee49960c325bc437aceeb27c6dbee6a16816f505ff89f3389086b7640bc3629a9c6748d4dc39a956f950a1d5f99a0874cb67ee0793534e70cb4c677b275bcc1bcf6070e4c58bb6adf9768e7502fae93225c473201d2e810b91375"}}, &(0x7f0000000180)) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000400)={'ip6_vti0\x00', &(0x7f0000000380)={'sit0\x00', 0x0, 0x2f, 0x4, 0xf1, 0x0, 0x0, @private1, @remote, 0x700, 0x80, 0x80000001, 0x2}}) (async) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000440)={@remote, @mcast2, @mcast1, 0x80000001, 0x0, 0x400, 0x100, 0x1, 0x4200010, r1}) (async) epoll_create1(0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000001180)) (async) 04:59:41 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0xe) 04:59:41 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0xe) 04:59:41 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000400)={0x1c9, 0x20, &(0x7f0000000000)="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"}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10e5864299b5eb31}, 0xc, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="14000000582f9cae7372c08cf7c7642d8f7b98ec8e27a7a492c76347b2e818fb7fff3793f0beb9bb6178b62e8f15ecdafdc18f8625a9ebe48439a13dc56249bf6b6e186796ab5e174aed2b19075ecc7807b1fd1921393cb04dac99849bb7ee2566e3a7a89f61c4d8846925c64004617384d8aae404d2abe602d4ef596f90dd58ce635e9629", @ANYRES16=0x0, @ANYBLOB="0000000000000000000002000000"], 0x14}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="28100000", @ANYRES16=0x0, @ANYBLOB="000226bd7000ffdbdf255500000099f603eb", @ANYRES32=0x0, @ANYBLOB="0c009900ff7f00004c000000"], 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x804) r1 = epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f0000001180)={0xa}) socketpair(0x2b, 0x80000, 0x9, &(0x7f0000000540)) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r2, 0x3309) 04:59:41 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000001180)) 04:59:41 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) 04:59:41 executing program 4: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) read$snapshot(r2, &(0x7f0000000280)=""/117, 0x75) ioctl$SNAPSHOT_CREATE_IMAGE(r2, 0x40043311, &(0x7f0000000300)) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r2, 0x330f, 0x3) socketpair(0x9, 0x2, 0x2, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) read$snapshot(r2, &(0x7f00000004c0)=""/79, 0x4f) r4 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r4, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r4) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), r2) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f00000001c0)={0x54, r6, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'ip6tnl0\x00'}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x21}}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0xc000) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r5, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x4}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'wg2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) 04:59:41 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x7fff, 0x6}, {0x2, 0xf2}]}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x29, 0x9, 0x40, 0x1, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, 0x10, 0x80, 0x0, 0xfffffffc}}) sendto$isdn(0xffffffffffffffff, &(0x7f00000002c0)={0x3f, 0x3ff, "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"}, 0x107, 0x4000, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@loopback, 0x7fff, 0x1, 0x1, 0x8, 0x6, 0x3}, 0x20) 04:59:41 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0xe) 04:59:41 executing program 5: r0 = epoll_create1(0x0) r1 = socket$inet6_sctp(0xa, 0x0, 0x84) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) 04:59:41 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0xe) 04:59:41 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000400)={0x1c9, 0x20, &(0x7f0000000000)="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"}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10e5864299b5eb31}, 0xc, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="14000000582f9cae7372c08cf7c7642d8f7b98ec8e27a7a492c76347b2e818fb7fff3793f0beb9bb6178b62e8f15ecdafdc18f8625a9ebe48439a13dc56249bf6b6e186796ab5e174aed2b19075ecc7807b1fd1921393cb04dac99849bb7ee2566e3a7a89f61c4d8846925c64004617384d8aae404d2abe602d4ef596f90dd58ce635e9629", @ANYRES16=0x0, @ANYBLOB="0000000000000000000002000000"], 0x14}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="28100000", @ANYRES16=0x0, @ANYBLOB="000226bd7000ffdbdf255500000099f603eb", @ANYRES32=0x0, @ANYBLOB="0c009900ff7f00004c000000"], 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x804) r1 = epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f0000001180)={0xa}) socketpair(0x2b, 0x80000, 0x9, &(0x7f0000000540)) ioctl$SNAPSHOT_FREE_SWAP_PAGES(0xffffffffffffffff, 0x3309) 04:59:41 executing program 1: getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) 04:59:41 executing program 5: r0 = epoll_create1(0x0) r1 = socket$inet6_sctp(0xa, 0x0, 0x84) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) 04:59:41 executing program 4: r0 = epoll_create1(0x0) (async) r1 = socket$l2tp6(0xa, 0x2, 0x73) (async) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) read$snapshot(r2, &(0x7f0000000280)=""/117, 0x75) (async) ioctl$SNAPSHOT_CREATE_IMAGE(r2, 0x40043311, &(0x7f0000000300)) (async) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r2, 0x330f, 0x3) socketpair(0x9, 0x2, 0x2, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) (async) read$snapshot(r2, &(0x7f00000004c0)=""/79, 0x4f) r4 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r4, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) (async) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r4) (async) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), r2) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f00000001c0)={0x54, r6, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'ip6tnl0\x00'}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x21}}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0xc000) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r5, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x4}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'wg2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) 04:59:41 executing program 3: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0xe) 04:59:41 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x7fff, 0x6}, {0x2, 0xf2}]}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x29, 0x9, 0x40, 0x1, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, 0x10, 0x80, 0x0, 0xfffffffc}}) (async) sendto$isdn(0xffffffffffffffff, &(0x7f00000002c0)={0x3f, 0x3ff, "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"}, 0x107, 0x4000, 0x0, 0x0) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@loopback, 0x7fff, 0x1, 0x1, 0x8, 0x6, 0x3}, 0x20) 04:59:41 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000400)={0x1c9, 0x20, &(0x7f0000000000)="4098179969523b06e599e9a25580b001cdac86a3c23ea1781c4b943ff345c2e484b37820f6c35ac73e3e139852f3461419374e79aba15cb4b46a0dbbbc3d089a734f0b8cf18bc709e213e3d68c1c9276160a214ac24d05bc03e5ea9f9d45e9145a0bd0b8afce710825871766015a1e627b937ae41551a847a4f442c414432f21ff985d7e76f51055349836e818053350f2f2348603a7434374bd39a3a53a6c0d9078dc6b23c13651ee268d48abfceaf31f600f62d96b62ba89560c186bea95c2b39be75e22084f52104212fa5dd512c3779c5b97a3201bd18bd42bff3a37f7555a7f5de7a0af2198725f938222a0153985560e2787c85cd4267e90cfbbee12023bba21853b42467389ac32444d8044301969763112a7f84228f5bfc0515de879579ee224dcc9ba8fff1be06a9aca44517f86feb1743d8eef0596b7d8795586387792fd02969cbe748e26638f8589269a7b752bb2f79d2f88737ad69c1bb8fe301acfa4973c8890b8165b05d5cacf34ee845feb847e10f15adc7b50c0118252251bbafac671e70cf6a58cffe8cbf4de581dc4339db58bda4bac00395daf9270fa28b8fb8c88942ff7f4025145e9547d83d190e7ffaecc3aed86ad0c8ac08fb823230df09f842ae54869ab310b8b92bab0f0533970f6cdddc02acf0e92716e524785d23c2ef40e87b6bda9034753e470dbf4e9abd55395b1dab2b2ff2b668deceab730593069287b2d8af194a6e009bd48a88ca292f64a948bba09fde00f02c498e4fea89db6463438f26b1cb27ac7974319746c519c1be663729b2d209e2a0dd35cecb18d0b1912a4bacc7827da93649e8f44f5a567ddca3268b169e3ceb3d26633920f940433a414215d1c2c1cccbaccdca07367d6de00ac03aa9bf81b8cb4b8a1fd80e247d8d83099ef14a2b458976b5c6a33a567ce9cc061b347bb25d48e51a8285025287d95bd5f90d6c57a410987054902bdda8d5032dcdfa1ef8ad268d88fa14997ce20d560759e140ee5dff134b69df205f02d72893cac6f454fbab3ba484dd2b0650622115860b72798a4bf443aba5940d63852fc74f64da881c0f20153d055ce968ae69f0040faaa2851800c4bc793329ccbe204849709009175cc71e390eac49b459da5cdcd035bb621c53c353f964bbdd217c00d1e6b57e9721df2c3775b0c01bdb358c3051e50c0b46492296b14395668ee39234a9c3415ed95a059b1c931e8ad5054de9bf5b76412e3ebd0a9c4213cfd76cc0ae01d6d8a0446116abfc44f30916d00c8e41535c25fde333fa0aef41fd6c7ddc651c78df83a910efe5a6cca4126432ae7c442cc444b6e0ac7d3da48c357050837352cf27d78712357aae13e466b46668ee2b56bbfbfc0ed377b26c7a7bf7bb1dbc55f269137050defb06364edfc2317163c943b3a2d13d07e7ceb883c4051cf1291be66ba089fe7"}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10e5864299b5eb31}, 0xc, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="14000000582f9cae7372c08cf7c7642d8f7b98ec8e27a7a492c76347b2e818fb7fff3793f0beb9bb6178b62e8f15ecdafdc18f8625a9ebe48439a13dc56249bf6b6e186796ab5e174aed2b19075ecc7807b1fd1921393cb04dac99849bb7ee2566e3a7a89f61c4d8846925c64004617384d8aae404d2abe602d4ef596f90dd58ce635e9629", @ANYRES16=0x0, @ANYBLOB="0000000000000000000002000000"], 0x14}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="28100000", @ANYRES16=0x0, @ANYBLOB="000226bd7000ffdbdf255500000099f603eb", @ANYRES32=0x0, @ANYBLOB="0c009900ff7f00004c000000"], 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x804) r1 = epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f0000001180)={0xa}) socketpair(0x2b, 0x80000, 0x9, &(0x7f0000000540)) ioctl$SNAPSHOT_FREE_SWAP_PAGES(0xffffffffffffffff, 0x3309) 04:59:41 executing program 1: getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) 04:59:41 executing program 3: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0xe) 04:59:41 executing program 5: r0 = epoll_create1(0x0) r1 = socket$inet6_sctp(0xa, 0x0, 0x84) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) 04:59:41 executing program 4: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) (async) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) read$snapshot(r2, &(0x7f0000000280)=""/117, 0x75) (async, rerun: 32) ioctl$SNAPSHOT_CREATE_IMAGE(r2, 0x40043311, &(0x7f0000000300)) (async, rerun: 32) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r2, 0x330f, 0x3) (async, rerun: 64) socketpair(0x9, 0x2, 0x2, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) read$snapshot(r2, &(0x7f00000004c0)=""/79, 0x4f) r4 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r4, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) (async) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r4) (async) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), r2) (async) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f00000001c0)={0x54, r6, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'ip6tnl0\x00'}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x21}}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0xc000) (async) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r5, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x4}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'wg2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) 04:59:41 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x7fff, 0x6}, {0x2, 0xf2}]}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x29, 0x9, 0x40, 0x1, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, 0x10, 0x80, 0x0, 0xfffffffc}}) sendto$isdn(0xffffffffffffffff, &(0x7f00000002c0)={0x3f, 0x3ff, "80bb041fb14f04e178427aa1d6b0a0e89cb24c5d39cdc3d2409fa989986a71e764929a9ef9493f33f2bbb4e93b84964fa9f8c97f5c09d8cbdd0bf7cb17976df765111c2b9840e393ceb353641badee3e9b95f23f9193bb121ea31029cfdebb64f42b1038c330ade6487548ddc8147ece378c71ebdff1ee9fc4bdd2b6cc83cdc9be7922f384b15997034a14402f7cfa5a8d277bf322d627914fae99c3c272016d6ac4a8762bf0d3612a9d4a8bd1f2fcbff6352149cfac16acf3c7853a977925684139aa3b21e8a01f2f742df4eeab251daf11cf2062cbf3e6e4421e835ce10d88dc3991e4fbb8c2e4cfbd241a39e3f76c3b6e52bb7501df9315180d32ba3983"}, 0x107, 0x4000, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@loopback, 0x7fff, 0x1, 0x1, 0x8, 0x6, 0x3}, 0x20) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x7fff, 0x6}, {0x2, 0xf2}]}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x29, 0x9, 0x40, 0x1, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, 0x10, 0x80, 0x0, 0xfffffffc}}) (async) sendto$isdn(0xffffffffffffffff, &(0x7f00000002c0)={0x3f, 0x3ff, "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"}, 0x107, 0x4000, 0x0, 0x0) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@loopback, 0x7fff, 0x1, 0x1, 0x8, 0x6, 0x3}, 0x20) (async) 04:59:41 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000400)={0x1c9, 0x20, &(0x7f0000000000)="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"}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10e5864299b5eb31}, 0xc, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="14000000582f9cae7372c08cf7c7642d8f7b98ec8e27a7a492c76347b2e818fb7fff3793f0beb9bb6178b62e8f15ecdafdc18f8625a9ebe48439a13dc56249bf6b6e186796ab5e174aed2b19075ecc7807b1fd1921393cb04dac99849bb7ee2566e3a7a89f61c4d8846925c64004617384d8aae404d2abe602d4ef596f90dd58ce635e9629", @ANYRES16=0x0, @ANYBLOB="0000000000000000000002000000"], 0x14}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="28100000", @ANYRES16=0x0, @ANYBLOB="000226bd7000ffdbdf255500000099f603eb", @ANYRES32=0x0, @ANYBLOB="0c009900ff7f00004c000000"], 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x804) r1 = epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f0000001180)={0xa}) socketpair(0x2b, 0x80000, 0x9, &(0x7f0000000540)) ioctl$SNAPSHOT_FREE_SWAP_PAGES(0xffffffffffffffff, 0x3309) 04:59:41 executing program 1: getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) 04:59:41 executing program 3: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0xe) 04:59:41 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x19) ioctl$VT_ACTIVATE(r0, 0x5606, 0xfffffffffffff93b) r1 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) r2 = syz_open_dev$vcsn(&(0x7f0000000100), 0x5, 0x7390c0) epoll_wait(r2, &(0x7f0000000500)=[{}], 0x1, 0x0) epoll_pwait(r2, &(0x7f0000000040)=[{}, {}], 0x2, 0xca07, &(0x7f0000000080)={[0x5]}, 0x8) epoll_wait(r1, &(0x7f0000000500)=[{}], 0x1, 0x0) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f00000000c0)) syz_open_pts(r0, 0x44440) r3 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r3, &(0x7f0000000500)=[{}], 0x1, 0x0) ioctl$VT_DISALLOCATE(r3, 0x5608) 04:59:41 executing program 1: socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) 04:59:41 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000400)={0x1c9, 0x20, &(0x7f0000000000)="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"}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10e5864299b5eb31}, 0xc, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="14000000582f9cae7372c08cf7c7642d8f7b98ec8e27a7a492c76347b2e818fb7fff3793f0beb9bb6178b62e8f15ecdafdc18f8625a9ebe48439a13dc56249bf6b6e186796ab5e174aed2b19075ecc7807b1fd1921393cb04dac99849bb7ee2566e3a7a89f61c4d8846925c64004617384d8aae404d2abe602d4ef596f90dd58ce635e9629", @ANYRES16=0x0, @ANYBLOB="0000000000000000000002000000"], 0x14}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="28100000", @ANYRES16=0x0, @ANYBLOB="000226bd7000ffdbdf255500000099f603eb", @ANYRES32=0x0, @ANYBLOB="0c009900ff7f00004c000000"], 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x804) r1 = epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f0000001180)={0xa}) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r2, 0x3309) 04:59:41 executing program 5: epoll_create1(0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000001180)) 04:59:41 executing program 4: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000040)={0x0, 0x3, r1, 0x5}) r2 = socket$l2tp6(0xa, 0x2, 0x73) r3 = epoll_create1(0x0) socketpair(0x22, 0x2, 0x692c1549, &(0x7f0000000080)={0xffffffffffffffff}) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r1, &(0x7f00000000c0)={r3, r4, 0x40}) r5 = epoll_create1(0x0) epoll_wait(r5, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0xfffffffd) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000001180)) r6 = syz_open_dev$vcsn(&(0x7f0000000100), 0xfffffffffffffffb, 0x20000) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = epoll_create(0x400) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0xffffffffffffffff, 0x7, r7, &(0x7f0000000140)={r3, r8, 0x2}) 04:59:41 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0xe) 04:59:41 executing program 1: socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) 04:59:41 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x19) ioctl$VT_ACTIVATE(r0, 0x5606, 0xfffffffffffff93b) r1 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) r2 = syz_open_dev$vcsn(&(0x7f0000000100), 0x5, 0x7390c0) epoll_wait(r2, &(0x7f0000000500)=[{}], 0x1, 0x0) epoll_pwait(r2, &(0x7f0000000040)=[{}, {}], 0x2, 0xca07, &(0x7f0000000080)={[0x5]}, 0x8) epoll_wait(r1, &(0x7f0000000500)=[{}], 0x1, 0x0) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f00000000c0)) syz_open_pts(r0, 0x44440) r3 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r3, &(0x7f0000000500)=[{}], 0x1, 0x0) ioctl$VT_DISALLOCATE(r3, 0x5608) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) syz_open_dev$ptys(0xc, 0x3, 0x1) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x19) (async) ioctl$VT_ACTIVATE(r0, 0x5606, 0xfffffffffffff93b) (async) syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) (async) syz_open_dev$ptys(0xc, 0x3, 0x1) (async) syz_open_dev$vcsn(&(0x7f0000000100), 0x5, 0x7390c0) (async) epoll_wait(r2, &(0x7f0000000500)=[{}], 0x1, 0x0) (async) epoll_pwait(r2, &(0x7f0000000040)=[{}, {}], 0x2, 0xca07, &(0x7f0000000080)={[0x5]}, 0x8) (async) epoll_wait(r1, &(0x7f0000000500)=[{}], 0x1, 0x0) (async) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f00000000c0)) (async) syz_open_pts(r0, 0x44440) (async) syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) (async) epoll_wait(r3, &(0x7f0000000500)=[{}], 0x1, 0x0) (async) ioctl$VT_DISALLOCATE(r3, 0x5608) (async) 04:59:41 executing program 5: epoll_create1(0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000001180)) 04:59:42 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0xe) 04:59:42 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000400)={0x1c9, 0x20, &(0x7f0000000000)="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"}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10e5864299b5eb31}, 0xc, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="14000000582f9cae7372c08cf7c7642d8f7b98ec8e27a7a492c76347b2e818fb7fff3793f0beb9bb6178b62e8f15ecdafdc18f8625a9ebe48439a13dc56249bf6b6e186796ab5e174aed2b19075ecc7807b1fd1921393cb04dac99849bb7ee2566e3a7a89f61c4d8846925c64004617384d8aae404d2abe602d4ef596f90dd58ce635e9629", @ANYRES16=0x0, @ANYBLOB="0000000000000000000002000000"], 0x14}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="28100000", @ANYRES16=0x0, @ANYBLOB="000226bd7000ffdbdf255500000099f603eb", @ANYRES32=0x0, @ANYBLOB="0c009900ff7f00004c000000"], 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x804) epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r1, 0x3309) 04:59:42 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x1) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x19) (async) ioctl$VT_ACTIVATE(r0, 0x5606, 0xfffffffffffff93b) r1 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) (async) syz_open_dev$ptys(0xc, 0x3, 0x1) (async) r2 = syz_open_dev$vcsn(&(0x7f0000000100), 0x5, 0x7390c0) epoll_wait(r2, &(0x7f0000000500)=[{}], 0x1, 0x0) epoll_pwait(r2, &(0x7f0000000040)=[{}, {}], 0x2, 0xca07, &(0x7f0000000080)={[0x5]}, 0x8) epoll_wait(r1, &(0x7f0000000500)=[{}], 0x1, 0x0) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f00000000c0)) syz_open_pts(r0, 0x44440) (async) r3 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r3, &(0x7f0000000500)=[{}], 0x1, 0x0) (async) ioctl$VT_DISALLOCATE(r3, 0x5608) 04:59:42 executing program 1: socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) 04:59:42 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0xe) 04:59:42 executing program 5: epoll_create1(0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000001180)) 04:59:42 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) ioctl$TCGETS(r0, 0x5401, &(0x7f0000000040)) epoll_wait(r1, &(0x7f0000000500)=[{}], 0x1, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x13) 04:59:42 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x4) 04:59:42 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) 04:59:42 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) (async, rerun: 64) ioctl$TCGETS(r0, 0x5401, &(0x7f0000000040)) (rerun: 64) epoll_wait(r1, &(0x7f0000000500)=[{}], 0x1, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x13) 04:59:42 executing program 5: r0 = epoll_create1(0x0) socket$inet6_sctp(0xa, 0x1, 0x84) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000001180)) 04:59:42 executing program 4: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000040)={0x0, 0x3, r1, 0x5}) r2 = socket$l2tp6(0xa, 0x2, 0x73) r3 = epoll_create1(0x0) socketpair(0x22, 0x2, 0x692c1549, &(0x7f0000000080)={0xffffffffffffffff}) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r1, &(0x7f00000000c0)={r3, r4, 0x40}) r5 = epoll_create1(0x0) epoll_wait(r5, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0xfffffffd) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000001180)) r6 = syz_open_dev$vcsn(&(0x7f0000000100), 0xfffffffffffffffb, 0x20000) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = epoll_create(0x400) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0xffffffffffffffff, 0x7, r7, &(0x7f0000000140)={r3, r8, 0x2}) epoll_create1(0x0) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000040)={0x0, 0x3, r1, 0x5}) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) epoll_create1(0x0) (async) socketpair(0x22, 0x2, 0x692c1549, &(0x7f0000000080)) (async) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r1, &(0x7f00000000c0)={r3, r4, 0x40}) (async) epoll_create1(0x0) (async) epoll_wait(r5, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0xfffffffd) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000001180)) (async) syz_open_dev$vcsn(&(0x7f0000000100), 0xfffffffffffffffb, 0x20000) (async) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async) epoll_create(0x400) (async) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0xffffffffffffffff, 0x7, r7, &(0x7f0000000140)={r3, r8, 0x2}) (async) 04:59:42 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000400)={0x1c9, 0x20, &(0x7f0000000000)="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"}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10e5864299b5eb31}, 0xc, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="14000000582f9cae7372c08cf7c7642d8f7b98ec8e27a7a492c76347b2e818fb7fff3793f0beb9bb6178b62e8f15ecdafdc18f8625a9ebe48439a13dc56249bf6b6e186796ab5e174aed2b19075ecc7807b1fd1921393cb04dac99849bb7ee2566e3a7a89f61c4d8846925c64004617384d8aae404d2abe602d4ef596f90dd58ce635e9629", @ANYRES16=0x0, @ANYBLOB="0000000000000000000002000000"], 0x14}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="28100000", @ANYRES16=0x0, @ANYBLOB="000226bd7000ffdbdf255500000099f603eb", @ANYRES32=0x0, @ANYBLOB="0c009900ff7f00004c000000"], 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x804) epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r1, 0x3309) 04:59:42 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x4) 04:59:42 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) 04:59:42 executing program 5: r0 = epoll_create1(0x0) socket$inet6_sctp(0xa, 0x1, 0x84) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000001180)) 04:59:42 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x4) 04:59:42 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) ioctl$TCGETS(r0, 0x5401, &(0x7f0000000040)) epoll_wait(r1, &(0x7f0000000500)=[{}], 0x1, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x13) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) (async) ioctl$TCGETS(r0, 0x5401, &(0x7f0000000040)) (async) epoll_wait(r1, &(0x7f0000000500)=[{}], 0x1, 0x0) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x13) (async) 04:59:42 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000400)={0x1c9, 0x20, &(0x7f0000000000)="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"}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10e5864299b5eb31}, 0xc, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="14000000582f9cae7372c08cf7c7642d8f7b98ec8e27a7a492c76347b2e818fb7fff3793f0beb9bb6178b62e8f15ecdafdc18f8625a9ebe48439a13dc56249bf6b6e186796ab5e174aed2b19075ecc7807b1fd1921393cb04dac99849bb7ee2566e3a7a89f61c4d8846925c64004617384d8aae404d2abe602d4ef596f90dd58ce635e9629", @ANYRES16=0x0, @ANYBLOB="0000000000000000000002000000"], 0x14}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="28100000", @ANYRES16=0x0, @ANYBLOB="000226bd7000ffdbdf255500000099f603eb", @ANYRES32=0x0, @ANYBLOB="0c009900ff7f00004c000000"], 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x804) epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r1, 0x3309) 04:59:43 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) 04:59:43 executing program 5: r0 = epoll_create1(0x0) socket$inet6_sctp(0xa, 0x1, 0x84) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000001180)) 04:59:43 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x3, 0x0, &(0x7f0000000040)) 04:59:43 executing program 4: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000040)={0x0, 0x3, r1, 0x5}) r2 = socket$l2tp6(0xa, 0x2, 0x73) r3 = epoll_create1(0x0) socketpair(0x22, 0x2, 0x692c1549, &(0x7f0000000080)={0xffffffffffffffff}) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r1, &(0x7f00000000c0)={r3, r4, 0x40}) r5 = epoll_create1(0x0) epoll_wait(r5, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0xfffffffd) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000001180)) r6 = syz_open_dev$vcsn(&(0x7f0000000100), 0xfffffffffffffffb, 0x20000) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = epoll_create(0x400) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0xffffffffffffffff, 0x7, r7, &(0x7f0000000140)={r3, r8, 0x2}) epoll_create1(0x0) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000040)={0x0, 0x3, r1, 0x5}) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) epoll_create1(0x0) (async) socketpair(0x22, 0x2, 0x692c1549, &(0x7f0000000080)) (async) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r1, &(0x7f00000000c0)={r3, r4, 0x40}) (async) epoll_create1(0x0) (async) epoll_wait(r5, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0xfffffffd) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000001180)) (async) syz_open_dev$vcsn(&(0x7f0000000100), 0xfffffffffffffffb, 0x20000) (async) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async) epoll_create(0x400) (async) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0xffffffffffffffff, 0x7, r7, &(0x7f0000000140)={r3, r8, 0x2}) (async) 04:59:43 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) ioctl$TIOCGICOUNT(r0, 0x545d, 0x0) ioctl$TIOCGICOUNT(r0, 0x545d, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) 04:59:43 executing program 5: r0 = epoll_create1(0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, 0x0) 04:59:43 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)) 04:59:43 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x3, 0x0, 0x0) 04:59:43 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000400)={0x1c9, 0x20, &(0x7f0000000000)="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"}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10e5864299b5eb31}, 0xc, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="14000000582f9cae7372c08cf7c7642d8f7b98ec8e27a7a492c76347b2e818fb7fff3793f0beb9bb6178b62e8f15ecdafdc18f8625a9ebe48439a13dc56249bf6b6e186796ab5e174aed2b19075ecc7807b1fd1921393cb04dac99849bb7ee2566e3a7a89f61c4d8846925c64004617384d8aae404d2abe602d4ef596f90dd58ce635e9629", @ANYRES16=0x0, @ANYBLOB="0000000000000000000002000000"], 0x14}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="28100000", @ANYRES16=0x0, @ANYBLOB="000226bd7000ffdbdf255500000099f603eb", @ANYRES32=0x0, @ANYBLOB="0c009900ff7f00004c000000"], 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x804) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f0000001180)={0xa}) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r2, 0x3309) 04:59:43 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) (async) ioctl$TIOCGICOUNT(r0, 0x545d, 0x0) ioctl$TIOCGICOUNT(r0, 0x545d, 0x0) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) 04:59:43 executing program 5: r0 = epoll_create1(0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, 0x0) 04:59:43 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)) 04:59:43 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x3, 0x0, 0x0) 04:59:43 executing program 4: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) r3 = syz_open_dev$ptys(0xc, 0x3, 0x1) syz_open_pts(r3, 0x8800) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) 04:59:43 executing program 5: r0 = epoll_create1(0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, 0x0) 04:59:43 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) ioctl$TIOCGICOUNT(r0, 0x545d, 0x0) ioctl$TIOCGICOUNT(r0, 0x545d, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) (async) ioctl$TIOCGICOUNT(r0, 0x545d, 0x0) (async) ioctl$TIOCGICOUNT(r0, 0x545d, 0x0) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) (async) 04:59:43 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)) 04:59:43 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x3, 0x0, 0x0) 04:59:43 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000400)={0x1c9, 0x20, &(0x7f0000000000)="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"}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10e5864299b5eb31}, 0xc, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="14000000582f9cae7372c08cf7c7642d8f7b98ec8e27a7a492c76347b2e818fb7fff3793f0beb9bb6178b62e8f15ecdafdc18f8625a9ebe48439a13dc56249bf6b6e186796ab5e174aed2b19075ecc7807b1fd1921393cb04dac99849bb7ee2566e3a7a89f61c4d8846925c64004617384d8aae404d2abe602d4ef596f90dd58ce635e9629", @ANYRES16=0x0, @ANYBLOB="0000000000000000000002000000"], 0x14}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="28100000", @ANYRES16=0x0, @ANYBLOB="000226bd7000ffdbdf255500000099f603eb", @ANYRES32=0x0, @ANYBLOB="0c009900ff7f00004c000000"], 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x804) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000001180)={0xa}) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r1, 0x3309) 04:59:43 executing program 4: r0 = epoll_create1(0x0) (async) r1 = socket$l2tp6(0xa, 0x2, 0x73) (async) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) (async) r3 = syz_open_dev$ptys(0xc, 0x3, 0x1) syz_open_pts(r3, 0x8800) (async) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) 04:59:43 executing program 5: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) r3 = syz_open_dev$ptys(0xc, 0x3, 0x1) syz_open_pts(r3, 0x8800) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) 04:59:43 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000400)={0x1c9, 0x20, &(0x7f0000000000)="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"}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10e5864299b5eb31}, 0xc, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="14000000582f9cae7372c08cf7c7642d8f7b98ec8e27a7a492c76347b2e818fb7fff3793f0beb9bb6178b62e8f15ecdafdc18f8625a9ebe48439a13dc56249bf6b6e186796ab5e174aed2b19075ecc7807b1fd1921393cb04dac99849bb7ee2566e3a7a89f61c4d8846925c64004617384d8aae404d2abe602d4ef596f90dd58ce635e9629", @ANYRES16=0x0, @ANYBLOB="0000000000000000000002000000"], 0x14}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="28100000", @ANYRES16=0x0, @ANYBLOB="000226bd7000ffdbdf255500000099f603eb", @ANYRES32=0x0, @ANYBLOB="0c009900ff7f00004c000000"], 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x804) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f0000001180)={0xa}) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r2, 0x3309) 04:59:43 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCL_SELLOADLUT(r0, 0x541c, &(0x7f0000000040)={0x5, 0x2, 0x6, 0x6781, 0x8000000000000000}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x18) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000140), 0xfffffffffffffffb, 0x0) ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0) ioctl$KVM_GET_FPU(0xffffffffffffffff, 0x81a0ae8c, &(0x7f00000002c0)) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder-control\x00', 0x802, 0x0) ioctl$TCGETS2(r2, 0x802c542a, &(0x7f00000000c0)) r4 = syz_open_pts(r0, 0x400003) r5 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r5, &(0x7f0000000500)=[{}], 0x1, 0x0) ioctl$TIOCGSERIAL(r5, 0x541e, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/199}) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000000080)={0x1ff, 0x0, 0x81, 0x1, 0x9, 0x7}) 04:59:43 executing program 4: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) (async) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) (async, rerun: 32) r3 = syz_open_dev$ptys(0xc, 0x3, 0x1) (rerun: 32) syz_open_pts(r3, 0x8800) (async) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) 04:59:43 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)) 04:59:43 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000400)={0x1c9, 0x20, &(0x7f0000000000)="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"}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10e5864299b5eb31}, 0xc, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="14000000582f9cae7372c08cf7c7642d8f7b98ec8e27a7a492c76347b2e818fb7fff3793f0beb9bb6178b62e8f15ecdafdc18f8625a9ebe48439a13dc56249bf6b6e186796ab5e174aed2b19075ecc7807b1fd1921393cb04dac99849bb7ee2566e3a7a89f61c4d8846925c64004617384d8aae404d2abe602d4ef596f90dd58ce635e9629", @ANYRES16=0x0, @ANYBLOB="0000000000000000000002000000"], 0x14}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000001180)={0xa}) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r1, 0x3309) 04:59:43 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) 04:59:43 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCL_SELLOADLUT(r0, 0x541c, &(0x7f0000000040)={0x5, 0x2, 0x6, 0x6781, 0x8000000000000000}) (async) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x18) (async) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000140), 0xfffffffffffffffb, 0x0) ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0) (async, rerun: 32) ioctl$KVM_GET_FPU(0xffffffffffffffff, 0x81a0ae8c, &(0x7f00000002c0)) (rerun: 32) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder-control\x00', 0x802, 0x0) (async) ioctl$TCGETS2(r2, 0x802c542a, &(0x7f00000000c0)) r4 = syz_open_pts(r0, 0x400003) r5 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r5, &(0x7f0000000500)=[{}], 0x1, 0x0) ioctl$TIOCGSERIAL(r5, 0x541e, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/199}) (async, rerun: 32) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000000080)={0x1ff, 0x0, 0x81, 0x1, 0x9, 0x7}) (rerun: 32) 04:59:43 executing program 1: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000040)={0x0, 0x3, r1, 0x5}) r2 = socket$l2tp6(0xa, 0x2, 0x73) r3 = epoll_create1(0x0) socketpair(0x22, 0x2, 0x692c1549, &(0x7f0000000080)={0xffffffffffffffff}) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r1, &(0x7f00000000c0)={r3, r4, 0x40}) r5 = epoll_create1(0x0) epoll_wait(r5, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0xfffffffd) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000001180)) r6 = syz_open_dev$vcsn(&(0x7f0000000100), 0xfffffffffffffffb, 0x20000) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = epoll_create(0x400) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0xffffffffffffffff, 0x7, r7, &(0x7f0000000140)={r3, r8, 0x2}) 04:59:43 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000400)={0x1c9, 0x20, &(0x7f0000000000)="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"}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10e5864299b5eb31}, 0xc, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="14000000582f9cae7372c08cf7c7642d8f7b98ec8e27a7a492c76347b2e818fb7fff3793f0beb9bb6178b62e8f15ecdafdc18f8625a9ebe48439a13dc56249bf6b6e186796ab5e174aed2b19075ecc7807b1fd1921393cb04dac99849bb7ee2566e3a7a89f61c4d8846925c64004617384d8aae404d2abe602d4ef596f90dd58ce635e9629", @ANYRES16=0x0, @ANYBLOB="0000000000000000000002000000"], 0x14}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000001180)={0xa}) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r1, 0x3309) 04:59:43 executing program 4: r0 = epoll_create1(0x0) connect$l2tp(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast1, 0x2}, 0x10) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000000)) socket$isdn(0x22, 0x3, 0x25) 04:59:43 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) ioctl$TCGETS(r0, 0x5401, &(0x7f0000000040)) epoll_wait(r1, &(0x7f0000000500)=[{}], 0x1, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x13) 04:59:43 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x19) ioctl$VT_ACTIVATE(r0, 0x5606, 0xfffffffffffff93b) r1 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) r2 = syz_open_dev$vcsn(&(0x7f0000000100), 0x5, 0x7390c0) epoll_wait(r2, &(0x7f0000000500)=[{}], 0x1, 0x0) epoll_pwait(r2, &(0x7f0000000040)=[{}, {}], 0x2, 0xca07, &(0x7f0000000080)={[0x5]}, 0x8) epoll_wait(r1, &(0x7f0000000500)=[{}], 0x1, 0x0) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f00000000c0)) syz_open_pts(r0, 0x44440) r3 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r3, &(0x7f0000000500)=[{}], 0x1, 0x0) ioctl$VT_DISALLOCATE(r3, 0x5608) 04:59:43 executing program 4: r0 = epoll_create1(0x0) connect$l2tp(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast1, 0x2}, 0x10) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000000)) socket$isdn(0x22, 0x3, 0x25) epoll_create1(0x0) (async) connect$l2tp(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast1, 0x2}, 0x10) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000000)) (async) socket$isdn(0x22, 0x3, 0x25) (async) 04:59:43 executing program 5: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) read$snapshot(r2, &(0x7f0000000280)=""/117, 0x75) ioctl$SNAPSHOT_CREATE_IMAGE(r2, 0x40043311, &(0x7f0000000300)) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r2, 0x330f, 0x3) socketpair(0x9, 0x2, 0x2, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) read$snapshot(r2, &(0x7f00000004c0)=""/79, 0x4f) r4 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r4, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r4) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), r2) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f00000001c0)={0x54, r6, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'ip6tnl0\x00'}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x21}}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0xc000) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r5, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x4}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'wg2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) 04:59:43 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCL_SELLOADLUT(r0, 0x541c, &(0x7f0000000040)={0x5, 0x2, 0x6, 0x6781, 0x8000000000000000}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x18) (async) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) (async) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) (async) r3 = syz_open_dev$vcsn(&(0x7f0000000140), 0xfffffffffffffffb, 0x0) ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0) (async) ioctl$KVM_GET_FPU(0xffffffffffffffff, 0x81a0ae8c, &(0x7f00000002c0)) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder-control\x00', 0x802, 0x0) ioctl$TCGETS2(r2, 0x802c542a, &(0x7f00000000c0)) (async) r4 = syz_open_pts(r0, 0x400003) r5 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r5, &(0x7f0000000500)=[{}], 0x1, 0x0) (async) ioctl$TIOCGSERIAL(r5, 0x541e, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/199}) (async) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000000080)={0x1ff, 0x0, 0x81, 0x1, 0x9, 0x7}) 04:59:43 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000400)={0x1c9, 0x20, &(0x7f0000000000)="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"}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10e5864299b5eb31}, 0xc, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="14000000582f9cae7372c08cf7c7642d8f7b98ec8e27a7a492c76347b2e818fb7fff3793f0beb9bb6178b62e8f15ecdafdc18f8625a9ebe48439a13dc56249bf6b6e186796ab5e174aed2b19075ecc7807b1fd1921393cb04dac99849bb7ee2566e3a7a89f61c4d8846925c64004617384d8aae404d2abe602d4ef596f90dd58ce635e9629", @ANYRES16=0x0, @ANYBLOB="0000000000000000000002000000"], 0x14}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000001180)={0xa}) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r1, 0x3309) 04:59:43 executing program 4: r0 = epoll_create1(0x0) connect$l2tp(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast1, 0x2}, 0x10) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000000)) socket$isdn(0x22, 0x3, 0x25) epoll_create1(0x0) (async) connect$l2tp(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast1, 0x2}, 0x10) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000000)) (async) socket$isdn(0x22, 0x3, 0x25) (async) 04:59:43 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x19) ioctl$VT_ACTIVATE(r0, 0x5606, 0xfffffffffffff93b) r1 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) r2 = syz_open_dev$vcsn(&(0x7f0000000100), 0x5, 0x7390c0) epoll_wait(r2, &(0x7f0000000500)=[{}], 0x1, 0x0) epoll_pwait(r2, &(0x7f0000000040)=[{}, {}], 0x2, 0xca07, &(0x7f0000000080)={[0x5]}, 0x8) epoll_wait(r1, &(0x7f0000000500)=[{}], 0x1, 0x0) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f00000000c0)) syz_open_pts(r0, 0x44440) r3 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r3, &(0x7f0000000500)=[{}], 0x1, 0x0) ioctl$VT_DISALLOCATE(r3, 0x5608) 04:59:43 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) 04:59:44 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x19) ioctl$VT_ACTIVATE(r0, 0x5606, 0xfffffffffffff93b) r1 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) r2 = syz_open_dev$vcsn(&(0x7f0000000100), 0x5, 0x7390c0) epoll_wait(r2, &(0x7f0000000500)=[{}], 0x1, 0x0) epoll_pwait(r2, &(0x7f0000000040)=[{}, {}], 0x2, 0xca07, &(0x7f0000000080)={[0x5]}, 0x8) epoll_wait(r1, &(0x7f0000000500)=[{}], 0x1, 0x0) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f00000000c0)) syz_open_pts(r0, 0x44440) r3 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r3, &(0x7f0000000500)=[{}], 0x1, 0x0) ioctl$VT_DISALLOCATE(r3, 0x5608) 04:59:44 executing program 1: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000040)={0x0, 0x3, r1, 0x5}) r2 = socket$l2tp6(0xa, 0x2, 0x73) r3 = epoll_create1(0x0) socketpair(0x22, 0x2, 0x692c1549, &(0x7f0000000080)={0xffffffffffffffff}) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r1, &(0x7f00000000c0)={r3, r4, 0x40}) r5 = epoll_create1(0x0) epoll_wait(r5, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0xfffffffd) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000001180)) r6 = syz_open_dev$vcsn(&(0x7f0000000100), 0xfffffffffffffffb, 0x20000) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = epoll_create(0x400) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0xffffffffffffffff, 0x7, r7, &(0x7f0000000140)={r3, r8, 0x2}) 04:59:44 executing program 4: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)={0x70000004}) 04:59:44 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000400)={0x1c9, 0x20, &(0x7f0000000000)="4098179969523b06e599e9a25580b001cdac86a3c23ea1781c4b943ff345c2e484b37820f6c35ac73e3e139852f3461419374e79aba15cb4b46a0dbbbc3d089a734f0b8cf18bc709e213e3d68c1c9276160a214ac24d05bc03e5ea9f9d45e9145a0bd0b8afce710825871766015a1e627b937ae41551a847a4f442c414432f21ff985d7e76f51055349836e818053350f2f2348603a7434374bd39a3a53a6c0d9078dc6b23c13651ee268d48abfceaf31f600f62d96b62ba89560c186bea95c2b39be75e22084f52104212fa5dd512c3779c5b97a3201bd18bd42bff3a37f7555a7f5de7a0af2198725f938222a0153985560e2787c85cd4267e90cfbbee12023bba21853b42467389ac32444d8044301969763112a7f84228f5bfc0515de879579ee224dcc9ba8fff1be06a9aca44517f86feb1743d8eef0596b7d8795586387792fd02969cbe748e26638f8589269a7b752bb2f79d2f88737ad69c1bb8fe301acfa4973c8890b8165b05d5cacf34ee845feb847e10f15adc7b50c0118252251bbafac671e70cf6a58cffe8cbf4de581dc4339db58bda4bac00395daf9270fa28b8fb8c88942ff7f4025145e9547d83d190e7ffaecc3aed86ad0c8ac08fb823230df09f842ae54869ab310b8b92bab0f0533970f6cdddc02acf0e92716e524785d23c2ef40e87b6bda9034753e470dbf4e9abd55395b1dab2b2ff2b668deceab730593069287b2d8af194a6e009bd48a88ca292f64a948bba09fde00f02c498e4fea89db6463438f26b1cb27ac7974319746c519c1be663729b2d209e2a0dd35cecb18d0b1912a4bacc7827da93649e8f44f5a567ddca3268b169e3ceb3d26633920f940433a414215d1c2c1cccbaccdca07367d6de00ac03aa9bf81b8cb4b8a1fd80e247d8d83099ef14a2b458976b5c6a33a567ce9cc061b347bb25d48e51a8285025287d95bd5f90d6c57a410987054902bdda8d5032dcdfa1ef8ad268d88fa14997ce20d560759e140ee5dff134b69df205f02d72893cac6f454fbab3ba484dd2b0650622115860b72798a4bf443aba5940d63852fc74f64da881c0f20153d055ce968ae69f0040faaa2851800c4bc793329ccbe204849709009175cc71e390eac49b459da5cdcd035bb621c53c353f964bbdd217c00d1e6b57e9721df2c3775b0c01bdb358c3051e50c0b46492296b14395668ee39234a9c3415ed95a059b1c931e8ad5054de9bf5b76412e3ebd0a9c4213cfd76cc0ae01d6d8a0446116abfc44f30916d00c8e41535c25fde333fa0aef41fd6c7ddc651c78df83a910efe5a6cca4126432ae7c442cc444b6e0ac7d3da48c357050837352cf27d78712357aae13e466b46668ee2b56bbfbfc0ed377b26c7a7bf7bb1dbc55f269137050defb06364edfc2317163c943b3a2d13d07e7ceb883c4051cf1291be66ba089fe7"}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="28100000", @ANYRES16=0x0, @ANYBLOB="000226bd7000ffdbdf255500000099f603eb", @ANYRES32=0x0, @ANYBLOB="0c009900ff7f00004c000000"], 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x804) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000001180)={0xa}) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r1, 0x3309) 04:59:44 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) 04:59:44 executing program 5: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) read$snapshot(r2, &(0x7f0000000280)=""/117, 0x75) ioctl$SNAPSHOT_CREATE_IMAGE(r2, 0x40043311, &(0x7f0000000300)) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r2, 0x330f, 0x3) socketpair(0x9, 0x2, 0x2, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) read$snapshot(r2, &(0x7f00000004c0)=""/79, 0x4f) r4 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r4, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r4) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), r2) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f00000001c0)={0x54, r6, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'ip6tnl0\x00'}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x21}}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0xc000) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r5, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x4}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'wg2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) 04:59:44 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x19) ioctl$VT_ACTIVATE(r0, 0x5606, 0xfffffffffffff93b) r1 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) r2 = syz_open_dev$vcsn(&(0x7f0000000100), 0x5, 0x7390c0) epoll_wait(r2, &(0x7f0000000500)=[{}], 0x1, 0x0) epoll_pwait(r2, &(0x7f0000000040)=[{}, {}], 0x2, 0xca07, &(0x7f0000000080)={[0x5]}, 0x8) epoll_wait(r1, &(0x7f0000000500)=[{}], 0x1, 0x0) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f00000000c0)) syz_open_pts(r0, 0x44440) r3 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r3, &(0x7f0000000500)=[{}], 0x1, 0x0) 04:59:44 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) 04:59:44 executing program 4: r0 = epoll_create1(0x0) (async) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)={0x70000004}) 04:59:44 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000400)={0x1c9, 0x20, &(0x7f0000000000)="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"}) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="28100000", @ANYRES16=0x0, @ANYBLOB="000226bd7000ffdbdf255500000099f603eb", @ANYRES32=0x0, @ANYBLOB="0c009900ff7f00004c000000"], 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x804) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000001180)={0xa}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r0, 0x3309) 04:59:44 executing program 4: r0 = epoll_create1(0x0) (async) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)={0x70000004}) 04:59:44 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000400)={0x1c9, 0x20, &(0x7f0000000000)="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"}) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="28100000", @ANYRES16=0x0, @ANYBLOB="000226bd7000ffdbdf255500000099f603eb", @ANYRES32=0x0, @ANYBLOB="0c009900ff7f00004c000000"], 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x804) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000001180)={0xa}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r0, 0x3309) 04:59:44 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x19) ioctl$VT_ACTIVATE(r0, 0x5606, 0xfffffffffffff93b) r1 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) r2 = syz_open_dev$vcsn(&(0x7f0000000100), 0x5, 0x7390c0) epoll_wait(r2, &(0x7f0000000500)=[{}], 0x1, 0x0) epoll_pwait(r2, &(0x7f0000000040)=[{}, {}], 0x2, 0xca07, &(0x7f0000000080)={[0x5]}, 0x8) epoll_wait(r1, &(0x7f0000000500)=[{}], 0x1, 0x0) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f00000000c0)) syz_open_pts(r0, 0x44440) syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) 04:59:45 executing program 1: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000040)={0x0, 0x3, r1, 0x5}) r2 = socket$l2tp6(0xa, 0x2, 0x73) r3 = epoll_create1(0x0) socketpair(0x22, 0x2, 0x692c1549, &(0x7f0000000080)={0xffffffffffffffff}) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r1, &(0x7f00000000c0)={r3, r4, 0x40}) r5 = epoll_create1(0x0) epoll_wait(r5, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0xfffffffd) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000001180)) r6 = syz_open_dev$vcsn(&(0x7f0000000100), 0xfffffffffffffffb, 0x20000) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = epoll_create(0x400) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0xffffffffffffffff, 0x7, r7, &(0x7f0000000140)={r3, r8, 0x2}) 04:59:45 executing program 5: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) read$snapshot(r2, &(0x7f0000000280)=""/117, 0x75) ioctl$SNAPSHOT_CREATE_IMAGE(r2, 0x40043311, &(0x7f0000000300)) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r2, 0x330f, 0x3) socketpair(0x9, 0x2, 0x2, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) read$snapshot(r2, &(0x7f00000004c0)=""/79, 0x4f) r4 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r4, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r4) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), r2) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f00000001c0)={0x54, r6, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'ip6tnl0\x00'}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x21}}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0xc000) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r5, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x4}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'wg2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) 04:59:45 executing program 4: r0 = epoll_create1(0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=@dstopts={0x3c, 0x4, '\x00', [@ra={0x5, 0x2, 0x9}, @ra={0x5, 0x2, 0x8}, @jumbo={0xc2, 0x4, 0x1000}, @enc_lim={0x4, 0x1, 0x2a}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x26}}]}, 0x30) r2 = socket$l2tp6(0xa, 0x2, 0x73) r3 = syz_open_dev$vcsn(&(0x7f0000000040), 0x7, 0x401) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000080)=0x5, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000001180)) 04:59:45 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) 04:59:45 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x19) ioctl$VT_ACTIVATE(r0, 0x5606, 0xfffffffffffff93b) r1 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) r2 = syz_open_dev$vcsn(&(0x7f0000000100), 0x5, 0x7390c0) epoll_wait(r2, &(0x7f0000000500)=[{}], 0x1, 0x0) epoll_pwait(r2, &(0x7f0000000040)=[{}, {}], 0x2, 0xca07, &(0x7f0000000080)={[0x5]}, 0x8) epoll_wait(r1, &(0x7f0000000500)=[{}], 0x1, 0x0) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f00000000c0)) syz_open_pts(r0, 0x44440) 04:59:45 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="28100000", @ANYRES16=0x0, @ANYBLOB="000226bd7000ffdbdf255500000099f603eb", @ANYRES32=0x0, @ANYBLOB="0c009900ff7f00004c000000"], 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x804) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000001180)={0xa}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r0, 0x3309) 04:59:45 executing program 4: r0 = epoll_create1(0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=@dstopts={0x3c, 0x4, '\x00', [@ra={0x5, 0x2, 0x9}, @ra={0x5, 0x2, 0x8}, @jumbo={0xc2, 0x4, 0x1000}, @enc_lim={0x4, 0x1, 0x2a}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x26}}]}, 0x30) r2 = socket$l2tp6(0xa, 0x2, 0x73) r3 = syz_open_dev$vcsn(&(0x7f0000000040), 0x7, 0x401) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000080)=0x5, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000001180)) epoll_create1(0x0) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=@dstopts={0x3c, 0x4, '\x00', [@ra={0x5, 0x2, 0x9}, @ra={0x5, 0x2, 0x8}, @jumbo={0xc2, 0x4, 0x1000}, @enc_lim={0x4, 0x1, 0x2a}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x26}}]}, 0x30) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) syz_open_dev$vcsn(&(0x7f0000000040), 0x7, 0x401) (async) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000080)=0x5, 0x4) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000001180)) (async) 04:59:45 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) (async, rerun: 32) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) (rerun: 32) 04:59:45 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x19) ioctl$VT_ACTIVATE(r0, 0x5606, 0xfffffffffffff93b) r1 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) r2 = syz_open_dev$vcsn(&(0x7f0000000100), 0x5, 0x7390c0) epoll_wait(r2, &(0x7f0000000500)=[{}], 0x1, 0x0) epoll_pwait(r2, &(0x7f0000000040)=[{}, {}], 0x2, 0xca07, &(0x7f0000000080)={[0x5]}, 0x8) epoll_wait(r1, &(0x7f0000000500)=[{}], 0x1, 0x0) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f00000000c0)) 04:59:45 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000400)={0x1c9, 0x20, &(0x7f0000000000)="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"}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10e5864299b5eb31}, 0xc, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="14000000582f9cae7372c08cf7c7642d8f7b98ec8e27a7a492c76347b2e818fb7fff3793f0beb9bb6178b62e8f15ecdafdc18f8625a9ebe48439a13dc56249bf6b6e186796ab5e174aed2b19075ecc7807b1fd1921393cb04dac99849bb7ee2566e3a7a89f61c4d8846925c64004617384d8aae404d2abe602d4ef596f90dd58ce635e9629", @ANYRES16=0x0, @ANYBLOB="0000000000000000000002000000"], 0x14}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="28100000", @ANYRES16=0x0, @ANYBLOB="000226bd7000ffdbdf255500000099f603eb", @ANYRES32=0x0, @ANYBLOB="0c009900ff7f00004c000000"], 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x804) r1 = epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f0000001180)={0xa}) socketpair(0x2b, 0x80000, 0x9, &(0x7f0000000540)) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r2, 0x3309) 04:59:45 executing program 0: sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="28100000", @ANYRES16=0x0, @ANYBLOB="000226bd7000ffdbdf255500000099f603eb", @ANYRES32=0x0, @ANYBLOB="0c009900ff7f00004c000000"], 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x804) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000001180)={0xa}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r0, 0x3309) 04:59:45 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) (async) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) (async) 04:59:45 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x19) ioctl$VT_ACTIVATE(r0, 0x5606, 0xfffffffffffff93b) r1 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) r2 = syz_open_dev$vcsn(&(0x7f0000000100), 0x5, 0x7390c0) epoll_wait(r2, &(0x7f0000000500)=[{}], 0x1, 0x0) epoll_pwait(r2, &(0x7f0000000040)=[{}, {}], 0x2, 0xca07, &(0x7f0000000080)={[0x5]}, 0x8) epoll_wait(r1, &(0x7f0000000500)=[{}], 0x1, 0x0) 04:59:46 executing program 1: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000040)={0x0, 0x3, r1, 0x5}) r2 = socket$l2tp6(0xa, 0x2, 0x73) r3 = epoll_create1(0x0) socketpair(0x22, 0x2, 0x692c1549, &(0x7f0000000080)={0xffffffffffffffff}) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r1, &(0x7f00000000c0)={r3, r4, 0x40}) r5 = epoll_create1(0x0) epoll_wait(r5, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0xfffffffd) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000001180)) r6 = syz_open_dev$vcsn(&(0x7f0000000100), 0xfffffffffffffffb, 0x20000) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) epoll_create(0x400) 04:59:46 executing program 4: r0 = epoll_create1(0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=@dstopts={0x3c, 0x4, '\x00', [@ra={0x5, 0x2, 0x9}, @ra={0x5, 0x2, 0x8}, @jumbo={0xc2, 0x4, 0x1000}, @enc_lim={0x4, 0x1, 0x2a}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x26}}]}, 0x30) r2 = socket$l2tp6(0xa, 0x2, 0x73) r3 = syz_open_dev$vcsn(&(0x7f0000000040), 0x7, 0x401) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000080)=0x5, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000001180)) 04:59:46 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x42000, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCEXCL(r1, 0x540c) 04:59:46 executing program 0: sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="28100000", @ANYRES16=0x0, @ANYBLOB="000226bd7000ffdbdf255500000099f603eb", @ANYRES32=0x0, @ANYBLOB="0c009900ff7f00004c000000"], 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x804) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000001180)={0xa}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r0, 0x3309) 04:59:46 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x19) ioctl$VT_ACTIVATE(r0, 0x5606, 0xfffffffffffff93b) syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000100), 0x5, 0x7390c0) epoll_wait(r1, &(0x7f0000000500)=[{}], 0x1, 0x0) epoll_pwait(r1, &(0x7f0000000040)=[{}, {}], 0x2, 0xca07, &(0x7f0000000080)={[0x5]}, 0x8) 04:59:46 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) epoll_create1(0x0) 04:59:46 executing program 4: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x200000000005, 0x2080) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000040)={0x8}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) 04:59:46 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x19) ioctl$VT_ACTIVATE(r0, 0x5606, 0xfffffffffffff93b) syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000100), 0x5, 0x7390c0) epoll_wait(r1, &(0x7f0000000500)=[{}], 0x1, 0x0) 04:59:46 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x4, 0x730, 0xffffffff, 0x360, 0x590, 0x590, 0xffffffff, 0xffffffff, 0x660, 0x660, 0x660, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x320, 0x360, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x8, 0x0, 0x200, 0x2, 0x8, 0x1, 0x9, 0xa8be, 0xffff, 0x80, 0xd5d, 0xffff, 0x7, 0x6], 0x2}}, @common=@unspec=@bpf0={{0x230}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xffb, 0xbe, 0x1, 0xf890, 0x200, 0x7, 0x655b036b, 0xa56]}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'geneve0\x00', 'tunl0\x00'}, 0x0, 0x208, 0x230, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@private2, @ipv4={'\x00', '\xff\xff', @private}, @empty, @private1, @remote, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, @private0, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, @mcast1, @rand_addr=' \x01\x00']}}, @common=@mh={{0x28}, {'q<'}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x790) 04:59:46 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) (async) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x42000, 0x0) (async) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCEXCL(r1, 0x540c) 04:59:46 executing program 0: sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, 0x0, 0x804) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000001180)={0xa}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r0, 0x3309) 04:59:46 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x19) ioctl$VT_ACTIVATE(r0, 0x5606, 0xfffffffffffff93b) syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) syz_open_dev$vcsn(&(0x7f0000000100), 0x5, 0x7390c0) [ 565.216631] bpf: check failed: parse error 04:59:47 executing program 1: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000040)={0x0, 0x3, r1, 0x5}) r2 = socket$l2tp6(0xa, 0x2, 0x73) r3 = epoll_create1(0x0) socketpair(0x22, 0x2, 0x692c1549, &(0x7f0000000080)={0xffffffffffffffff}) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r1, &(0x7f00000000c0)={r3, r4, 0x40}) r5 = epoll_create1(0x0) epoll_wait(r5, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0xfffffffd) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000001180)) r6 = syz_open_dev$vcsn(&(0x7f0000000100), 0xfffffffffffffffb, 0x20000) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) 04:59:47 executing program 4: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x200000000005, 0x2080) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000040)={0x8}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) epoll_create1(0x0) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) syz_open_dev$vcsn(&(0x7f0000000080), 0x200000000005, 0x2080) (async) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000040)={0x8}) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) (async) 04:59:47 executing program 5: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x200000000005, 0x2080) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000040)={0x8}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) 04:59:47 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) (async) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x42000, 0x0) (async) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCEXCL(r1, 0x540c) 04:59:47 executing program 0: sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000001180)={0xa}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r0, 0x3309) 04:59:47 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x19) ioctl$VT_ACTIVATE(r0, 0x5606, 0xfffffffffffff93b) syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) 04:59:47 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x19) ioctl$VT_ACTIVATE(r0, 0x5606, 0xfffffffffffff93b) syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) 04:59:47 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x19) ioctl$VT_ACTIVATE(r0, 0x5606, 0xfffffffffffff93b) 04:59:47 executing program 4: r0 = epoll_create1(0x0) (async, rerun: 64) r1 = socket$l2tp6(0xa, 0x2, 0x73) (async, rerun: 64) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x200000000005, 0x2080) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000040)={0x8}) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) 04:59:47 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) r2 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r2, &(0x7f0000000500)=[{}], 0x1, 0x0) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f0000000240)={0x0, &(0x7f0000000200)}) epoll_wait(r1, &(0x7f0000000500)=[{}], 0x1, 0x0) r3 = syz_open_pts(r0, 0x8cc01) ioctl$TCSETS(r3, 0x5402, &(0x7f00000001c0)={0x80000001, 0x7ff, 0x1ff, 0x5, 0xc, "0df8caf587f2ffe5f6bc0923b13e032b5fb624"}) ioctl$TIOCGSERIAL(r1, 0x541e, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/92}) socketpair(0x2b, 0x800, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$l2tp(r4, &(0x7f0000000040)={0x2, 0x0, @rand_addr=0x64010101}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x1d) r5 = syz_open_dev$vcsn(&(0x7f0000000200), 0x2, 0x232d00) setsockopt$MISDN_TIME_STAMP(r5, 0x0, 0x1, &(0x7f0000000280), 0x4) 04:59:47 executing program 5: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040000) r2 = getpgid(0x0) kcmp$KCMP_EPOLL_TFD(r2, 0x0, 0x7, 0xffffffffffffffff, 0x0) r3 = getpgid(0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r4, &(0x7f0000000140)={r0, 0xffffffffffffffff, 0x3ff}) 04:59:47 executing program 0: sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000001180)={0xa}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r0, 0x3309) 04:59:47 executing program 1: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000040)={0x0, 0x3, r1, 0x5}) r2 = socket$l2tp6(0xa, 0x2, 0x73) r3 = epoll_create1(0x0) socketpair(0x22, 0x2, 0x692c1549, &(0x7f0000000080)={0xffffffffffffffff}) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r1, &(0x7f00000000c0)={r3, r4, 0x40}) r5 = epoll_create1(0x0) epoll_wait(r5, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0xfffffffd) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000001180)) syz_open_dev$vcsn(&(0x7f0000000100), 0xfffffffffffffffb, 0x20000) 04:59:47 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x19) 04:59:47 executing program 4: r0 = epoll_create1(0x80000) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) read$snapshot(r2, &(0x7f0000000280)=""/117, 0x75) ioctl$SNAPSHOT_CREATE_IMAGE(r2, 0x40043311, &(0x7f0000000300)) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r2, 0x330f, 0x3) socketpair(0x9, 0x2, 0x2, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) read$snapshot(r2, &(0x7f00000004c0)=""/79, 0x4f) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), r2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x38, r5, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x100}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010100}]}, 0x38}}, 0xc000) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, r5, 0x65d28663a0b93fa6, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xa5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) 04:59:47 executing program 5: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040000) r2 = getpgid(0x0) kcmp$KCMP_EPOLL_TFD(r2, 0x0, 0x7, 0xffffffffffffffff, 0x0) r3 = getpgid(0x0) kcmp$KCMP_EPOLL_TFD(r3, 0x0, 0x7, 0xffffffffffffffff, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r4, &(0x7f0000000140)={r0, 0xffffffffffffffff, 0x3ff}) 04:59:47 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) (async) r1 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) (async) r2 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r2, &(0x7f0000000500)=[{}], 0x1, 0x0) (async) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f0000000240)={0x0, &(0x7f0000000200)}) (async) epoll_wait(r1, &(0x7f0000000500)=[{}], 0x1, 0x0) (async) r3 = syz_open_pts(r0, 0x8cc01) ioctl$TCSETS(r3, 0x5402, &(0x7f00000001c0)={0x80000001, 0x7ff, 0x1ff, 0x5, 0xc, "0df8caf587f2ffe5f6bc0923b13e032b5fb624"}) ioctl$TIOCGSERIAL(r1, 0x541e, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/92}) socketpair(0x2b, 0x800, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$l2tp(r4, &(0x7f0000000040)={0x2, 0x0, @rand_addr=0x64010101}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x1d) (async) r5 = syz_open_dev$vcsn(&(0x7f0000000200), 0x2, 0x232d00) setsockopt$MISDN_TIME_STAMP(r5, 0x0, 0x1, &(0x7f0000000280), 0x4) 04:59:47 executing program 0: sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r0, 0x3309) 04:59:47 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x19) 04:59:47 executing program 5: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040000) r2 = getpgid(0x0) kcmp$KCMP_EPOLL_TFD(r2, 0x0, 0x7, 0xffffffffffffffff, 0x0) r3 = getpgid(0x0) kcmp$KCMP_EPOLL_TFD(r3, 0x0, 0x7, 0xffffffffffffffff, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r4, &(0x7f0000000140)={r0, 0xffffffffffffffff, 0x3ff}) 04:59:47 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) r2 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r2, &(0x7f0000000500)=[{}], 0x1, 0x0) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f0000000240)={0x0, &(0x7f0000000200)}) epoll_wait(r1, &(0x7f0000000500)=[{}], 0x1, 0x0) r3 = syz_open_pts(r0, 0x8cc01) ioctl$TCSETS(r3, 0x5402, &(0x7f00000001c0)={0x80000001, 0x7ff, 0x1ff, 0x5, 0xc, "0df8caf587f2ffe5f6bc0923b13e032b5fb624"}) ioctl$TIOCGSERIAL(r1, 0x541e, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/92}) socketpair(0x2b, 0x800, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$l2tp(r4, &(0x7f0000000040)={0x2, 0x0, @rand_addr=0x64010101}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x1d) r5 = syz_open_dev$vcsn(&(0x7f0000000200), 0x2, 0x232d00) setsockopt$MISDN_TIME_STAMP(r5, 0x0, 0x1, &(0x7f0000000280), 0x4) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) (async) syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) (async) epoll_wait(r2, &(0x7f0000000500)=[{}], 0x1, 0x0) (async) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f0000000240)={0x0, &(0x7f0000000200)}) (async) epoll_wait(r1, &(0x7f0000000500)=[{}], 0x1, 0x0) (async) syz_open_pts(r0, 0x8cc01) (async) ioctl$TCSETS(r3, 0x5402, &(0x7f00000001c0)={0x80000001, 0x7ff, 0x1ff, 0x5, 0xc, "0df8caf587f2ffe5f6bc0923b13e032b5fb624"}) (async) ioctl$TIOCGSERIAL(r1, 0x541e, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/92}) (async) socketpair(0x2b, 0x800, 0x0, &(0x7f0000000000)) (async) connect$l2tp(r4, &(0x7f0000000040)={0x2, 0x0, @rand_addr=0x64010101}, 0x10) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x1d) (async) syz_open_dev$vcsn(&(0x7f0000000200), 0x2, 0x232d00) (async) setsockopt$MISDN_TIME_STAMP(r5, 0x0, 0x1, &(0x7f0000000280), 0x4) (async) 04:59:48 executing program 4: r0 = epoll_create1(0x80000) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) read$snapshot(r2, &(0x7f0000000280)=""/117, 0x75) ioctl$SNAPSHOT_CREATE_IMAGE(r2, 0x40043311, &(0x7f0000000300)) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r2, 0x330f, 0x3) socketpair(0x9, 0x2, 0x2, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) read$snapshot(r2, &(0x7f00000004c0)=""/79, 0x4f) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), r2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x38, r5, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x100}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010100}]}, 0x38}}, 0xc000) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, r5, 0x65d28663a0b93fa6, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xa5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) epoll_create1(0x80000) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) (async) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) (async) read$snapshot(r2, &(0x7f0000000280)=""/117, 0x75) (async) ioctl$SNAPSHOT_CREATE_IMAGE(r2, 0x40043311, &(0x7f0000000300)) (async) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r2, 0x330f, 0x3) (async) socketpair(0x9, 0x2, 0x2, &(0x7f0000000380)) (async) read$snapshot(r2, &(0x7f00000004c0)=""/79, 0x4f) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), r2) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) (async) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x38, r5, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x100}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010100}]}, 0x38}}, 0xc000) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, r5, 0x65d28663a0b93fa6, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xa5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) (async) 04:59:48 executing program 5: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040000) r2 = getpgid(0x0) kcmp$KCMP_EPOLL_TFD(r2, 0x0, 0x7, 0xffffffffffffffff, 0x0) r3 = getpgid(0x0) kcmp$KCMP_EPOLL_TFD(r3, 0x0, 0x7, 0xffffffffffffffff, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r4, &(0x7f0000000140)={r0, 0xffffffffffffffff, 0x3ff}) 04:59:48 executing program 0: sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r0, 0x3309) 04:59:48 executing program 5: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040000) r2 = getpgid(0x0) kcmp$KCMP_EPOLL_TFD(r2, 0x0, 0x7, 0xffffffffffffffff, 0x0) r3 = getpgid(0x0) kcmp$KCMP_EPOLL_TFD(r3, 0x0, 0x7, 0xffffffffffffffff, 0x0) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, 0xffffffffffffffff, &(0x7f0000000140)={r0, 0xffffffffffffffff, 0x3ff}) 04:59:48 executing program 1: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000040)={0x0, 0x3, r1, 0x5}) r2 = socket$l2tp6(0xa, 0x2, 0x73) r3 = epoll_create1(0x0) socketpair(0x22, 0x2, 0x692c1549, &(0x7f0000000080)={0xffffffffffffffff}) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r1, &(0x7f00000000c0)={r3, r4, 0x40}) r5 = epoll_create1(0x0) epoll_wait(r5, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0xfffffffd) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000001180)) 04:59:48 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x19) 04:59:48 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x1) 04:59:48 executing program 0: sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r0, 0x3309) 04:59:48 executing program 4: r0 = epoll_create1(0x80000) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) read$snapshot(r2, &(0x7f0000000280)=""/117, 0x75) ioctl$SNAPSHOT_CREATE_IMAGE(r2, 0x40043311, &(0x7f0000000300)) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r2, 0x330f, 0x3) socketpair(0x9, 0x2, 0x2, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) (async) read$snapshot(r2, &(0x7f00000004c0)=""/79, 0x4f) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), r2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) (async) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x38, r5, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x100}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010100}]}, 0x38}}, 0xc000) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, r5, 0x65d28663a0b93fa6, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xa5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) 04:59:48 executing program 0: sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r0, 0x3309) 04:59:48 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x19) 04:59:48 executing program 5: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040000) r2 = getpgid(0x0) kcmp$KCMP_EPOLL_TFD(r2, 0x0, 0x7, 0xffffffffffffffff, 0x0) r3 = getpgid(0x0) kcmp$KCMP_EPOLL_TFD(r3, 0x0, 0x7, 0xffffffffffffffff, 0x0) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, 0xffffffffffffffff, &(0x7f0000000140)={r0, 0xffffffffffffffff, 0x3ff}) 04:59:48 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x1) 04:59:48 executing program 3: r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x19) 04:59:48 executing program 0: sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r0, 0x3309) 04:59:48 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) 04:59:49 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000040)={0x40000004}) 04:59:49 executing program 1: epoll_create1(0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000040)={0x0, 0x3, r0, 0x5}) socket$l2tp6(0xa, 0x2, 0x73) r1 = epoll_create1(0x0) socketpair(0x22, 0x2, 0x692c1549, &(0x7f0000000080)={0xffffffffffffffff}) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r0, &(0x7f00000000c0)={r1, r2, 0x40}) r3 = epoll_create1(0x0) epoll_wait(r3, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0xfffffffd) 04:59:49 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000000)={0x2, 0x7, 0x81f8, 0xd5, 0x6, "ecbb7dfbd61ddf77fdd83f7f7f1e2043f5e82c", 0xfff, 0x532a}) 04:59:49 executing program 3: r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x19) 04:59:49 executing program 0: sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(0xffffffffffffffff, 0x3309) 04:59:49 executing program 5: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040000) r2 = getpgid(0x0) kcmp$KCMP_EPOLL_TFD(r2, 0x0, 0x7, 0xffffffffffffffff, 0x0) r3 = getpgid(0x0) kcmp$KCMP_EPOLL_TFD(r3, 0x0, 0x7, 0xffffffffffffffff, 0x0) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, 0xffffffffffffffff, &(0x7f0000000140)={r0, 0xffffffffffffffff, 0x3ff}) 04:59:49 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) (async) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000000)={0x2, 0x7, 0x81f8, 0xd5, 0x6, "ecbb7dfbd61ddf77fdd83f7f7f1e2043f5e82c", 0xfff, 0x532a}) 04:59:49 executing program 3: r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x19) 04:59:49 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000040)={0x40000004}) socket$l2tp6(0xa, 0x2, 0x73) (async) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000040)={0x40000004}) (async) 04:59:49 executing program 0: sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(0xffffffffffffffff, 0x3309) 04:59:49 executing program 5: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040000) r2 = getpgid(0x0) kcmp$KCMP_EPOLL_TFD(r2, 0x0, 0x7, 0xffffffffffffffff, 0x0) r3 = getpgid(0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r4, &(0x7f0000000140)={r0, 0xffffffffffffffff, 0x3ff}) 04:59:49 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000000)={0x2, 0x7, 0x81f8, 0xd5, 0x6, "ecbb7dfbd61ddf77fdd83f7f7f1e2043f5e82c", 0xfff, 0x532a}) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) (async) syz_open_dev$ptys(0xc, 0x3, 0x1) (async) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000000)={0x2, 0x7, 0x81f8, 0xd5, 0x6, "ecbb7dfbd61ddf77fdd83f7f7f1e2043f5e82c", 0xfff, 0x532a}) (async) 04:59:49 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x19) 04:59:49 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000040)={0x40000004}) 04:59:50 executing program 1: epoll_create1(0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000040)={0x0, 0x3, r0, 0x5}) socket$l2tp6(0xa, 0x2, 0x73) r1 = epoll_create1(0x0) socketpair(0x22, 0x2, 0x692c1549, &(0x7f0000000080)={0xffffffffffffffff}) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r0, &(0x7f00000000c0)={r1, r2, 0x40}) epoll_wait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0xfffffffd) 04:59:50 executing program 0: sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(0xffffffffffffffff, 0x3309) 04:59:50 executing program 5: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040000) r2 = getpgid(0x0) kcmp$KCMP_EPOLL_TFD(r2, 0x0, 0x7, 0xffffffffffffffff, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) kcmp$KCMP_EPOLL_TFD(r2, 0x0, 0x7, r3, &(0x7f0000000140)={r0, 0xffffffffffffffff, 0x3ff}) 04:59:50 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x19) 04:59:50 executing program 4: epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) r2 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x3, 0x202101) ioctl$SNDCTL_SEQ_THRESHOLD(r3, 0x4004510d, &(0x7f0000000080)=0xfffffff7) r4 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r4, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [0xff, 0xff000000, 0xff, 0xff000000], [0xffffffff, 0xff000000, 0xffffffff, 0xffffffff], 'veth1_virt_wifi\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x33, 0xe6, 0x0, 0x1}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x0, 0x1, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}, @common=@ipv6header={{0x28}, {0x0, 0x56, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [0xff000000, 0xff0000ff, 0x0, 0xff], [0xff000000, 0xff, 0xffffffff, 0xff000000], 'syz_tun\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}, 0x2, 0xfb, 0x5}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}, {0x3, 0xff}}, @common=@icmp6={{0x28}, {0x11, '`\f'}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xe0000002}) r5 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r5, &(0x7f0000000500)=[{}], 0x1, 0x0) ioctl$SNAPSHOT_S2RAM(r5, 0x330b) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r4, &(0x7f0000000600)={0x12}) 04:59:50 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) 04:59:50 executing program 0: epoll_create1(0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000040)={0x0, 0x3, r0, 0x5}) socket$l2tp6(0xa, 0x2, 0x73) r1 = epoll_create1(0x0) socketpair(0x22, 0x2, 0x692c1549, &(0x7f0000000080)={0xffffffffffffffff}) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r0, &(0x7f00000000c0)={r1, r2, 0x40}) r3 = epoll_create1(0x0) epoll_wait(r3, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0xfffffffd) 04:59:50 executing program 5: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040000) r2 = getpgid(0x0) kcmp$KCMP_EPOLL_TFD(r2, 0x0, 0x7, 0xffffffffffffffff, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) kcmp$KCMP_EPOLL_TFD(r2, 0x0, 0x7, r3, &(0x7f0000000140)={r0, 0xffffffffffffffff, 0x3ff}) 04:59:50 executing program 1: epoll_create1(0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000040)={0x0, 0x3, r0, 0x5}) socket$l2tp6(0xa, 0x2, 0x73) r1 = epoll_create1(0x0) socketpair(0x22, 0x2, 0x692c1549, &(0x7f0000000080)={0xffffffffffffffff}) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r0, &(0x7f00000000c0)={r1, r2, 0x40}) epoll_wait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0xfffffffd) 04:59:50 executing program 4: epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) r2 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) (async, rerun: 32) r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x3, 0x202101) (rerun: 32) ioctl$SNDCTL_SEQ_THRESHOLD(r3, 0x4004510d, &(0x7f0000000080)=0xfffffff7) (async, rerun: 64) r4 = socket$l2tp6(0xa, 0x2, 0x73) (rerun: 64) setsockopt$inet6_mreq(r4, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) (async) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [0xff, 0xff000000, 0xff, 0xff000000], [0xffffffff, 0xff000000, 0xffffffff, 0xffffffff], 'veth1_virt_wifi\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x33, 0xe6, 0x0, 0x1}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x0, 0x1, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}, @common=@ipv6header={{0x28}, {0x0, 0x56, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [0xff000000, 0xff0000ff, 0x0, 0xff], [0xff000000, 0xff, 0xffffffff, 0xff000000], 'syz_tun\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}, 0x2, 0xfb, 0x5}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}, {0x3, 0xff}}, @common=@icmp6={{0x28}, {0x11, '`\f'}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xe0000002}) r5 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r5, &(0x7f0000000500)=[{}], 0x1, 0x0) (async) ioctl$SNAPSHOT_S2RAM(r5, 0x330b) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r4, &(0x7f0000000600)={0x12}) [ 569.450671] x_tables: ip6_tables: mh match: only valid for protocol 135 04:59:50 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x19) 04:59:50 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) 04:59:50 executing program 5: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040000) r2 = getpgid(0x0) kcmp$KCMP_EPOLL_TFD(r2, 0x0, 0x7, 0xffffffffffffffff, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) kcmp$KCMP_EPOLL_TFD(r2, 0x0, 0x7, r3, &(0x7f0000000140)={r0, 0xffffffffffffffff, 0x3ff}) 04:59:50 executing program 1: epoll_create1(0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000040)={0x0, 0x3, r0, 0x5}) socket$l2tp6(0xa, 0x2, 0x73) r1 = epoll_create1(0x0) socketpair(0x22, 0x2, 0x692c1549, &(0x7f0000000080)={0xffffffffffffffff}) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r0, &(0x7f00000000c0)={r1, r2, 0x40}) epoll_wait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0xfffffffd) 04:59:50 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) 04:59:50 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) (async) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) 04:59:50 executing program 5: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040000) r2 = getpgid(0x0) r3 = getpgid(0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r4, &(0x7f0000000140)={r0, 0xffffffffffffffff, 0x3ff}) 04:59:50 executing program 1: epoll_create1(0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000040)={0x0, 0x3, r0, 0x5}) socket$l2tp6(0xa, 0x2, 0x73) epoll_create1(0x0) socketpair(0x22, 0x2, 0x692c1549, &(0x7f0000000080)) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0xfffffffd) [ 569.576493] x_tables: ip6_tables: mh match: only valid for protocol 135 04:59:51 executing program 0: epoll_create1(0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000040)={0x0, 0x3, r0, 0x5}) socket$l2tp6(0xa, 0x2, 0x73) r1 = epoll_create1(0x0) socketpair(0x22, 0x2, 0x692c1549, &(0x7f0000000080)={0xffffffffffffffff}) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r0, &(0x7f00000000c0)={r1, r2, 0x40}) r3 = epoll_create1(0x0) epoll_wait(r3, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0xfffffffd) 04:59:51 executing program 4: epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) r2 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x3, 0x202101) ioctl$SNDCTL_SEQ_THRESHOLD(r3, 0x4004510d, &(0x7f0000000080)=0xfffffff7) r4 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r4, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [0xff, 0xff000000, 0xff, 0xff000000], [0xffffffff, 0xff000000, 0xffffffff, 0xffffffff], 'veth1_virt_wifi\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x33, 0xe6, 0x0, 0x1}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x0, 0x1, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}, @common=@ipv6header={{0x28}, {0x0, 0x56, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [0xff000000, 0xff0000ff, 0x0, 0xff], [0xff000000, 0xff, 0xffffffff, 0xff000000], 'syz_tun\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}, 0x2, 0xfb, 0x5}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}, {0x3, 0xff}}, @common=@icmp6={{0x28}, {0x11, '`\f'}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xe0000002}) r5 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r5, &(0x7f0000000500)=[{}], 0x1, 0x0) ioctl$SNAPSHOT_S2RAM(r5, 0x330b) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r4, &(0x7f0000000600)={0x12}) epoll_create1(0x0) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) (async) epoll_create(0x9) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) (async) syz_open_dev$vcsn(&(0x7f0000000000), 0x3, 0x202101) (async) ioctl$SNDCTL_SEQ_THRESHOLD(r3, 0x4004510d, &(0x7f0000000080)=0xfffffff7) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) setsockopt$inet6_mreq(r4, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) (async) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [0xff, 0xff000000, 0xff, 0xff000000], [0xffffffff, 0xff000000, 0xffffffff, 0xffffffff], 'veth1_virt_wifi\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x33, 0xe6, 0x0, 0x1}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x0, 0x1, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}, @common=@ipv6header={{0x28}, {0x0, 0x56, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [0xff000000, 0xff0000ff, 0x0, 0xff], [0xff000000, 0xff, 0xffffffff, 0xff000000], 'syz_tun\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}, 0x2, 0xfb, 0x5}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}, {0x3, 0xff}}, @common=@icmp6={{0x28}, {0x11, '`\f'}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xe0000002}) (async) syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) (async) epoll_wait(r5, &(0x7f0000000500)=[{}], 0x1, 0x0) (async) ioctl$SNAPSHOT_S2RAM(r5, 0x330b) (async) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r4, &(0x7f0000000600)={0x12}) (async) 04:59:51 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) 04:59:51 executing program 5: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040000) r2 = getpgid(0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) kcmp$KCMP_EPOLL_TFD(0x0, r2, 0x7, r3, &(0x7f0000000140)={r0, 0xffffffffffffffff, 0x3ff}) 04:59:51 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{0x1}, {0xfff9, 0x8}, {0x97, 0x8}, {0x5, 0xfff}, {0xd7c9, 0xaeee}, {0xfffc, 0xfffd}, {0x4, 0x81}]}) 04:59:51 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) 04:59:51 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) (async) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{0x1}, {0xfff9, 0x8}, {0x97, 0x8}, {0x5, 0xfff}, {0xd7c9, 0xaeee}, {0xfffc, 0xfffd}, {0x4, 0x81}]}) 04:59:51 executing program 5: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040000) r2 = getpgid(0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) kcmp$KCMP_EPOLL_TFD(0x0, r2, 0x7, r3, &(0x7f0000000140)={r0, 0xffffffffffffffff, 0x3ff}) 04:59:51 executing program 4: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x6, 0x2, 0x40, 0x800}, {0x81, 0x9, 0x81, 0x9}, {0x6, 0x1, 0x0, 0x2}, {0x7ff, 0x2, 0x81, 0xfc}]}) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r2) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) 04:59:51 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) (async) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{0x1}, {0xfff9, 0x8}, {0x97, 0x8}, {0x5, 0xfff}, {0xd7c9, 0xaeee}, {0xfffc, 0xfffd}, {0x4, 0x81}]}) [ 570.394460] x_tables: ip6_tables: mh match: only valid for protocol 135 04:59:51 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)) 04:59:51 executing program 1: epoll_create1(0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000040)={0x0, 0x3, r0, 0x5}) socket$l2tp6(0xa, 0x2, 0x73) epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0xfffffffd) 04:59:52 executing program 0: epoll_create1(0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000040)={0x0, 0x3, r0, 0x5}) socket$l2tp6(0xa, 0x2, 0x73) r1 = epoll_create1(0x0) socketpair(0x22, 0x2, 0x692c1549, &(0x7f0000000080)={0xffffffffffffffff}) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r0, &(0x7f00000000c0)={r1, r2, 0x40}) r3 = epoll_create1(0x0) epoll_wait(r3, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0xfffffffd) 04:59:52 executing program 5: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040000) r2 = getpgid(0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) kcmp$KCMP_EPOLL_TFD(0x0, r2, 0x7, r3, &(0x7f0000000140)={r0, 0xffffffffffffffff, 0x3ff}) 04:59:52 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) r1 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r1, &(0x7f0000000500)=[{}], 0x1, 0x0) ioctl$TIOCEXCL(r1, 0x540c) r2 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r2, &(0x7f0000000500)=[{}], 0x1, 0x0) ioctl$TIOCEXCL(r2, 0x540c) r3 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r3, &(0x7f0000000500)=[{}], 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x9, 0x5, 0x0, 0x1, 0xffffffffffffffff, 0x1000, '\x00', 0x0, r3, 0x2, 0x0, 0x3}, 0x48) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="d97423ba", @ANYRES16=0x0, @ANYBLOB="00022dbd7000fbdbdf250600000006000e000e0000000500140007000000060003008300000008000900030000000c000f000500000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x40005}, 0x4040) 04:59:52 executing program 4: r0 = epoll_create1(0x0) (async) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x6, 0x2, 0x40, 0x800}, {0x81, 0x9, 0x81, 0x9}, {0x6, 0x1, 0x0, 0x2}, {0x7ff, 0x2, 0x81, 0xfc}]}) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r2) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) 04:59:52 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)) 04:59:52 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) r1 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r1, &(0x7f0000000500)=[{}], 0x1, 0x0) (async, rerun: 64) ioctl$TIOCEXCL(r1, 0x540c) (rerun: 64) r2 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r2, &(0x7f0000000500)=[{}], 0x1, 0x0) (async) ioctl$TIOCEXCL(r2, 0x540c) (async, rerun: 32) r3 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) (rerun: 32) epoll_wait(r3, &(0x7f0000000500)=[{}], 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x9, 0x5, 0x0, 0x1, 0xffffffffffffffff, 0x1000, '\x00', 0x0, r3, 0x2, 0x0, 0x3}, 0x48) (async) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="d97423ba", @ANYRES16=0x0, @ANYBLOB="00022dbd7000fbdbdf250600000006000e000e0000000500140007000000060003008300000008000900030000000c000f000500000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x40005}, 0x4040) 04:59:52 executing program 4: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x6, 0x2, 0x40, 0x800}, {0x81, 0x9, 0x81, 0x9}, {0x6, 0x1, 0x0, 0x2}, {0x7ff, 0x2, 0x81, 0xfc}]}) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r2) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) 04:59:52 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)) 04:59:52 executing program 5: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) r2 = getpgid(0x0) r3 = getpgid(0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r4, &(0x7f0000000140)={r0, 0xffffffffffffffff, 0x3ff}) 04:59:52 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) r1 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r1, &(0x7f0000000500)=[{}], 0x1, 0x0) ioctl$TIOCEXCL(r1, 0x540c) r2 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r2, &(0x7f0000000500)=[{}], 0x1, 0x0) ioctl$TIOCEXCL(r2, 0x540c) r3 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r3, &(0x7f0000000500)=[{}], 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x9, 0x5, 0x0, 0x1, 0xffffffffffffffff, 0x1000, '\x00', 0x0, r3, 0x2, 0x0, 0x3}, 0x48) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="d97423ba", @ANYRES16=0x0, @ANYBLOB="00022dbd7000fbdbdf250600000006000e000e0000000500140007000000060003008300000008000900030000000c000f000500000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x40005}, 0x4040) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) (async) syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) (async) epoll_wait(r1, &(0x7f0000000500)=[{}], 0x1, 0x0) (async) ioctl$TIOCEXCL(r1, 0x540c) (async) syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) (async) epoll_wait(r2, &(0x7f0000000500)=[{}], 0x1, 0x0) (async) ioctl$TIOCEXCL(r2, 0x540c) (async) syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) (async) epoll_wait(r3, &(0x7f0000000500)=[{}], 0x1, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x9, 0x5, 0x0, 0x1, 0xffffffffffffffff, 0x1000, '\x00', 0x0, r3, 0x2, 0x0, 0x3}, 0x48) (async) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="d97423ba", @ANYRES16=0x0, @ANYBLOB="00022dbd7000fbdbdf250600000006000e000e0000000500140007000000060003008300000008000900030000000c000f000500000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x40005}, 0x4040) (async) 04:59:52 executing program 4: r0 = epoll_create1(0x80000) r1 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r1, &(0x7f0000000500)=[{}], 0x1, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000008c0)={@mcast1}, 0x14) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x20000003}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0x4}) socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000001180)={0x1}) 04:59:52 executing program 1: epoll_create1(0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000040)={0x0, 0x3, r0, 0x5}) socket$l2tp6(0xa, 0x2, 0x73) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0xfffffffd) 04:59:53 executing program 5: r0 = epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) r1 = getpgid(0x0) r2 = getpgid(0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r3, &(0x7f0000000140)={r0, 0xffffffffffffffff, 0x3ff}) 04:59:53 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x19) 04:59:53 executing program 4: r0 = epoll_create1(0x80000) r1 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r1, &(0x7f0000000500)=[{}], 0x1, 0x0) (async) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000008c0)={@mcast1}, 0x14) (async) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x20000003}) (async) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0x4}) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000001180)={0x1}) 04:59:53 executing program 0: epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) r2 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x3, 0x202101) ioctl$SNDCTL_SEQ_THRESHOLD(r3, 0x4004510d, &(0x7f0000000080)=0xfffffff7) r4 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r4, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [0xff, 0xff000000, 0xff, 0xff000000], [0xffffffff, 0xff000000, 0xffffffff, 0xffffffff], 'veth1_virt_wifi\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x33, 0xe6, 0x0, 0x1}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x0, 0x1, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}, @common=@ipv6header={{0x28}, {0x0, 0x56, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [0xff000000, 0xff0000ff, 0x0, 0xff], [0xff000000, 0xff, 0xffffffff, 0xff000000], 'syz_tun\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}, 0x2, 0xfb, 0x5}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}, {0x3, 0xff}}, @common=@icmp6={{0x28}, {0x11, '`\f'}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xe0000002}) r5 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r5, &(0x7f0000000500)=[{}], 0x1, 0x0) ioctl$SNAPSHOT_S2RAM(r5, 0x330b) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r4, &(0x7f0000000600)={0x12}) 04:59:53 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) ioctl$KDMKTONE(r0, 0x4b30, 0x8d) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x7) ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f0000000000)) 04:59:53 executing program 5: r0 = epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) r1 = getpgid(0x0) r2 = getpgid(0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r3, &(0x7f0000000140)={r0, 0xffffffffffffffff, 0x3ff}) 04:59:53 executing program 4: r0 = epoll_create1(0x80000) (async) r1 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r1, &(0x7f0000000500)=[{}], 0x1, 0x0) (async) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000008c0)={@mcast1}, 0x14) (async) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x20000003}) (async) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0x4}) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000001180)={0x1}) 04:59:53 executing program 0: epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) r2 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x3, 0x202101) ioctl$SNDCTL_SEQ_THRESHOLD(r3, 0x4004510d, &(0x7f0000000080)=0xfffffff7) r4 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r4, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [0xff, 0xff000000, 0xff, 0xff000000], [0xffffffff, 0xff000000, 0xffffffff, 0xffffffff], 'veth1_virt_wifi\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x33, 0xe6, 0x0, 0x1}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x0, 0x1, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}, @common=@ipv6header={{0x28}, {0x0, 0x56, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [0xff000000, 0xff0000ff, 0x0, 0xff], [0xff000000, 0xff, 0xffffffff, 0xff000000], 'syz_tun\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}, 0x2, 0xfb, 0x5}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}, {0x3, 0xff}}, @common=@icmp6={{0x28}, {0x11, '`\f'}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xe0000002}) r5 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r5, &(0x7f0000000500)=[{}], 0x1, 0x0) ioctl$SNAPSHOT_S2RAM(r5, 0x330b) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r4, &(0x7f0000000600)={0x12}) 04:59:53 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) ioctl$KDMKTONE(r0, 0x4b30, 0x8d) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x7) ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f0000000000)) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) (async) ioctl$KDMKTONE(r0, 0x4b30, 0x8d) (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x7) (async) ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f0000000000)) (async) 04:59:53 executing program 3: epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) r2 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x3, 0x202101) ioctl$SNDCTL_SEQ_THRESHOLD(r3, 0x4004510d, &(0x7f0000000080)=0xfffffff7) r4 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r4, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [0xff, 0xff000000, 0xff, 0xff000000], [0xffffffff, 0xff000000, 0xffffffff, 0xffffffff], 'veth1_virt_wifi\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x33, 0xe6, 0x0, 0x1}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x0, 0x1, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}, @common=@ipv6header={{0x28}, {0x0, 0x56, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [0xff000000, 0xff0000ff, 0x0, 0xff], [0xff000000, 0xff, 0xffffffff, 0xff000000], 'syz_tun\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}, 0x2, 0xfb, 0x5}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}, {0x3, 0xff}}, @common=@icmp6={{0x28}, {0x11, '`\f'}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xe0000002}) r5 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r5, &(0x7f0000000500)=[{}], 0x1, 0x0) ioctl$SNAPSHOT_S2RAM(r5, 0x330b) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r4, &(0x7f0000000600)={0x12}) [ 572.158897] x_tables: ip6_tables: mh match: only valid for protocol 135 04:59:53 executing program 5: r0 = epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) r1 = getpgid(0x0) r2 = getpgid(0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r3, &(0x7f0000000140)={r0, 0xffffffffffffffff, 0x3ff}) 04:59:53 executing program 1: epoll_create1(0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000040)={0x0, 0x3, r0, 0x5}) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0xfffffffd) 04:59:53 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) (async) ioctl$KDMKTONE(r0, 0x4b30, 0x8d) (async) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x7) ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f0000000000)) 04:59:53 executing program 4: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6(0xa, 0x1, 0x5) getsockopt$inet6_int(r2, 0x29, 0x3c, &(0x7f0000000000), &(0x7f0000000080)=0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) 04:59:53 executing program 0: epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) r2 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x3, 0x202101) ioctl$SNDCTL_SEQ_THRESHOLD(r3, 0x4004510d, &(0x7f0000000080)=0xfffffff7) r4 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r4, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [0xff, 0xff000000, 0xff, 0xff000000], [0xffffffff, 0xff000000, 0xffffffff, 0xffffffff], 'veth1_virt_wifi\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x33, 0xe6, 0x0, 0x1}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x0, 0x1, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}, @common=@ipv6header={{0x28}, {0x0, 0x56, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [0xff000000, 0xff0000ff, 0x0, 0xff], [0xff000000, 0xff, 0xffffffff, 0xff000000], 'syz_tun\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}, 0x2, 0xfb, 0x5}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}, {0x3, 0xff}}, @common=@icmp6={{0x28}, {0x11, '`\f'}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xe0000002}) r5 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r5, &(0x7f0000000500)=[{}], 0x1, 0x0) ioctl$SNAPSHOT_S2RAM(r5, 0x330b) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r4, &(0x7f0000000600)={0x12}) 04:59:53 executing program 3: epoll_create1(0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000040)={0x0, 0x3, r0, 0x5}) socket$l2tp6(0xa, 0x2, 0x73) r1 = epoll_create1(0x0) socketpair(0x22, 0x2, 0x692c1549, &(0x7f0000000080)={0xffffffffffffffff}) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r0, &(0x7f00000000c0)={r1, r2, 0x40}) epoll_wait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0xfffffffd) 04:59:53 executing program 5: r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000001180)) r1 = getpgid(0x0) r2 = getpgid(0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r3, &(0x7f0000000140)={r0, 0xffffffffffffffff, 0x3ff}) [ 572.258069] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 572.295883] x_tables: ip6_tables: mh match: only valid for protocol 135 04:59:53 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCCONS(r0, 0x541d) r1 = syz_open_pts(r0, 0x81) syz_open_pts(r1, 0x80000) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0xd) 04:59:53 executing program 3: epoll_create1(0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000040)={0x0, 0x3, r0, 0x5}) socket$l2tp6(0xa, 0x2, 0x73) r1 = epoll_create1(0x0) socketpair(0x22, 0x2, 0x692c1549, &(0x7f0000000080)={0xffffffffffffffff}) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r0, &(0x7f00000000c0)={r1, r2, 0x40}) epoll_wait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0xfffffffd) 04:59:53 executing program 5: r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000001180)) r1 = getpgid(0x0) r2 = getpgid(0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r3, &(0x7f0000000140)={r0, 0xffffffffffffffff, 0x3ff}) 04:59:53 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCCONS(r0, 0x541d) (async) r1 = syz_open_pts(r0, 0x81) syz_open_pts(r1, 0x80000) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0xd) [ 572.379521] x_tables: ip6_tables: mh match: only valid for protocol 135 04:59:53 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCCONS(r0, 0x541d) r1 = syz_open_pts(r0, 0x81) syz_open_pts(r1, 0x80000) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0xd) 04:59:53 executing program 0: epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) r2 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x3, 0x202101) ioctl$SNDCTL_SEQ_THRESHOLD(r3, 0x4004510d, &(0x7f0000000080)=0xfffffff7) r4 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r4, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [0xff, 0xff000000, 0xff, 0xff000000], [0xffffffff, 0xff000000, 0xffffffff, 0xffffffff], 'veth1_virt_wifi\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x33, 0xe6, 0x0, 0x1}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x0, 0x1, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}, @common=@ipv6header={{0x28}, {0x0, 0x56, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [0xff000000, 0xff0000ff, 0x0, 0xff], [0xff000000, 0xff, 0xffffffff, 0xff000000], 'syz_tun\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}, 0x2, 0xfb, 0x5}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}, {0x3, 0xff}}, @common=@icmp6={{0x28}, {0x11, '`\f'}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xe0000002}) r5 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r5, &(0x7f0000000500)=[{}], 0x1, 0x0) ioctl$SNAPSHOT_S2RAM(r5, 0x330b) [ 572.480293] x_tables: ip6_tables: mh match: only valid for protocol 135 04:59:54 executing program 1: epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) r0 = epoll_create1(0x0) epoll_wait(r0, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0xfffffffd) 04:59:54 executing program 4: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6(0xa, 0x1, 0x5) getsockopt$inet6_int(r2, 0x29, 0x3c, &(0x7f0000000000), &(0x7f0000000080)=0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) epoll_create1(0x0) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket$inet6(0xa, 0x1, 0x5) (async) getsockopt$inet6_int(r2, 0x29, 0x3c, &(0x7f0000000000), &(0x7f0000000080)=0x4) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) (async) 04:59:54 executing program 5: r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000001180)) r1 = getpgid(0x0) r2 = getpgid(0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r3, &(0x7f0000000140)={r0, 0xffffffffffffffff, 0x3ff}) 04:59:54 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCCONS(r0, 0x541d) r1 = syz_open_pts(r0, 0x81) syz_open_pts(r1, 0x80000) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0xd) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$TIOCCONS(r0, 0x541d) (async) syz_open_pts(r0, 0x81) (async) syz_open_pts(r1, 0x80000) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0xd) (async) 04:59:54 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCCONS(r0, 0x541d) r1 = syz_open_pts(r0, 0x81) syz_open_pts(r1, 0x80000) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0xd) 04:59:54 executing program 0: epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) r2 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x3, 0x202101) ioctl$SNDCTL_SEQ_THRESHOLD(r3, 0x4004510d, &(0x7f0000000080)=0xfffffff7) r4 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r4, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [0xff, 0xff000000, 0xff, 0xff000000], [0xffffffff, 0xff000000, 0xffffffff, 0xffffffff], 'veth1_virt_wifi\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x33, 0xe6, 0x0, 0x1}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x0, 0x1, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}, @common=@ipv6header={{0x28}, {0x0, 0x56, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [0xff000000, 0xff0000ff, 0x0, 0xff], [0xff000000, 0xff, 0xffffffff, 0xff000000], 'syz_tun\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}, 0x2, 0xfb, 0x5}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}, {0x3, 0xff}}, @common=@icmp6={{0x28}, {0x11, '`\f'}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xe0000002}) r5 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r5, &(0x7f0000000500)=[{}], 0x1, 0x0) 04:59:54 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000001180)) r1 = getpgid(0x0) r2 = getpgid(0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r3, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x3ff}) 04:59:54 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f00000002c0)={0x5, &(0x7f00000001c0)=[{0x3, 0x7f, 0x40, 0x7}, {0xc5, 0x4, 0x1, 0x101}, {0x2, 0xe0, 0xaf, 0x5}, {0x1, 0x20, 0x3, 0xff}, {0x800, 0x7, 0x1f, 0x8}]}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10e5864299b5eb31}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r1, &(0x7f0000000500)=[{}], 0x1, 0x0) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x81}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8001}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x240a0040) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000280)=0x1b) 04:59:54 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCCONS(r0, 0x541d) r1 = syz_open_pts(r0, 0x81) syz_open_pts(r1, 0x80000) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0xd) 04:59:54 executing program 0: epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) r2 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x3, 0x202101) ioctl$SNDCTL_SEQ_THRESHOLD(r3, 0x4004510d, &(0x7f0000000080)=0xfffffff7) r4 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r4, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [0xff, 0xff000000, 0xff, 0xff000000], [0xffffffff, 0xff000000, 0xffffffff, 0xffffffff], 'veth1_virt_wifi\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x33, 0xe6, 0x0, 0x1}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x0, 0x1, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}, @common=@ipv6header={{0x28}, {0x0, 0x56, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [0xff000000, 0xff0000ff, 0x0, 0xff], [0xff000000, 0xff, 0xffffffff, 0xff000000], 'syz_tun\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}, 0x2, 0xfb, 0x5}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}, {0x3, 0xff}}, @common=@icmp6={{0x28}, {0x11, '`\f'}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xe0000002}) syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) [ 573.190454] x_tables: ip6_tables: mh match: only valid for protocol 135 04:59:54 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000001180)) r1 = getpgid(0x0) r2 = getpgid(0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r3, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x3ff}) 04:59:54 executing program 4: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6(0xa, 0x1, 0x5) getsockopt$inet6_int(r2, 0x29, 0x3c, &(0x7f0000000000), &(0x7f0000000080)=0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) epoll_create1(0x0) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket$inet6(0xa, 0x1, 0x5) (async) getsockopt$inet6_int(r2, 0x29, 0x3c, &(0x7f0000000000), &(0x7f0000000080)=0x4) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) (async) [ 573.281041] x_tables: ip6_tables: mh match: only valid for protocol 135 04:59:55 executing program 1: epoll_create1(0x0) r0 = epoll_create1(0x0) epoll_wait(r0, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0xfffffffd) 04:59:55 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCCONS(r0, 0x541d) syz_open_pts(r0, 0x81) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0xd) 04:59:55 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f00000002c0)={0x5, &(0x7f00000001c0)=[{0x3, 0x7f, 0x40, 0x7}, {0xc5, 0x4, 0x1, 0x101}, {0x2, 0xe0, 0xaf, 0x5}, {0x1, 0x20, 0x3, 0xff}, {0x800, 0x7, 0x1f, 0x8}]}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10e5864299b5eb31}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) (async, rerun: 32) r1 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) (rerun: 32) epoll_wait(r1, &(0x7f0000000500)=[{}], 0x1, 0x0) (async) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x81}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8001}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x240a0040) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000280)=0x1b) 04:59:55 executing program 0: epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) r2 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x3, 0x202101) ioctl$SNDCTL_SEQ_THRESHOLD(r3, 0x4004510d, &(0x7f0000000080)=0xfffffff7) r4 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r4, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [0xff, 0xff000000, 0xff, 0xff000000], [0xffffffff, 0xff000000, 0xffffffff, 0xffffffff], 'veth1_virt_wifi\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x33, 0xe6, 0x0, 0x1}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x0, 0x1, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}, @common=@ipv6header={{0x28}, {0x0, 0x56, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [0xff000000, 0xff0000ff, 0x0, 0xff], [0xff000000, 0xff, 0xffffffff, 0xff000000], 'syz_tun\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}, 0x2, 0xfb, 0x5}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}, {0x3, 0xff}}, @common=@icmp6={{0x28}, {0x11, '`\f'}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xe0000002}) 04:59:55 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000001180)) r1 = getpgid(0x0) r2 = getpgid(0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r3, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x3ff}) 04:59:55 executing program 4: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)={0x80000000}) 04:59:55 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCCONS(r0, 0x541d) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0xd) 04:59:55 executing program 5: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000001180)) r2 = getpgid(0x0) r3 = getpgid(0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r4, &(0x7f0000000140)={r0, 0xffffffffffffffff, 0x3ff}) 04:59:55 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f00000002c0)={0x5, &(0x7f00000001c0)=[{0x3, 0x7f, 0x40, 0x7}, {0xc5, 0x4, 0x1, 0x101}, {0x2, 0xe0, 0xaf, 0x5}, {0x1, 0x20, 0x3, 0xff}, {0x800, 0x7, 0x1f, 0x8}]}) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10e5864299b5eb31}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) (async) r1 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r1, &(0x7f0000000500)=[{}], 0x1, 0x0) (async) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x81}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8001}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x240a0040) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000280)=0x1b) 04:59:55 executing program 0: epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) r2 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x3, 0x202101) ioctl$SNDCTL_SEQ_THRESHOLD(r3, 0x4004510d, &(0x7f0000000080)=0xfffffff7) r4 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r4, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [0xff, 0xff000000, 0xff, 0xff000000], [0xffffffff, 0xff000000, 0xffffffff, 0xffffffff], 'veth1_virt_wifi\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x33, 0xe6, 0x0, 0x1}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x0, 0x1, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}, @common=@ipv6header={{0x28}, {0x0, 0x56, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [0xff000000, 0xff0000ff, 0x0, 0xff], [0xff000000, 0xff, 0xffffffff, 0xff000000], 'syz_tun\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}, 0x2, 0xfb, 0x5}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}, {0x3, 0xff}}, @common=@icmp6={{0x28}, {0x11, '`\f'}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) 04:59:55 executing program 4: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)={0x80000000}) epoll_create1(0x0) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)={0x80000000}) (async) 04:59:55 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0xd) [ 574.101181] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 574.188830] x_tables: ip6_tables: mh match: only valid for protocol 135 04:59:56 executing program 1: r0 = epoll_create1(0x0) epoll_wait(r0, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0xfffffffd) 04:59:56 executing program 5: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000001180)) r2 = getpgid(0x0) r3 = getpgid(0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r4, &(0x7f0000000140)={r0, 0xffffffffffffffff, 0x3ff}) 04:59:56 executing program 4: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)={0x80000000}) 04:59:56 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) r1 = epoll_create1(0x80000) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x4000) syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_create(0xc21) epoll_wait(r0, &(0x7f0000000500), 0x0, 0x2) epoll_wait(r1, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x811) 04:59:56 executing program 3: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0xd) 04:59:56 executing program 0: epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) r2 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x3, 0x202101) ioctl$SNDCTL_SEQ_THRESHOLD(r3, 0x4004510d, &(0x7f0000000080)=0xfffffff7) r4 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [0xff, 0xff000000, 0xff, 0xff000000], [0xffffffff, 0xff000000, 0xffffffff, 0xffffffff], 'veth1_virt_wifi\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x33, 0xe6, 0x0, 0x1}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x0, 0x1, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}, @common=@ipv6header={{0x28}, {0x0, 0x56, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [0xff000000, 0xff0000ff, 0x0, 0xff], [0xff000000, 0xff, 0xffffffff, 0xff000000], 'syz_tun\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}, 0x2, 0xfb, 0x5}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}, {0x3, 0xff}}, @common=@icmp6={{0x28}, {0x11, '`\f'}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) 04:59:56 executing program 3: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0xd) 04:59:56 executing program 4: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000000040)=""/127) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) r2 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r2, &(0x7f0000000500)=[{}], 0x1, 0x0) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0xffffffffffffffff, 0x7, r1, &(0x7f0000000000)={r2, r0, 0x44}) 04:59:56 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x1) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async, rerun: 64) r0 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) (rerun: 64) r1 = epoll_create1(0x80000) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x4000) (async) syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) (async) epoll_create(0xc21) (async, rerun: 64) epoll_wait(r0, &(0x7f0000000500), 0x0, 0x2) (async, rerun: 64) epoll_wait(r1, &(0x7f0000000040), 0x0, 0x0) (async, rerun: 32) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x811) (rerun: 32) 04:59:56 executing program 5: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000001180)) r2 = getpgid(0x0) r3 = getpgid(0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r4, &(0x7f0000000140)={r0, 0xffffffffffffffff, 0x3ff}) 04:59:56 executing program 0: epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) r2 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x3, 0x202101) ioctl$SNDCTL_SEQ_THRESHOLD(r3, 0x4004510d, &(0x7f0000000080)=0xfffffff7) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [0xff, 0xff000000, 0xff, 0xff000000], [0xffffffff, 0xff000000, 0xffffffff, 0xffffffff], 'veth1_virt_wifi\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x33, 0xe6, 0x0, 0x1}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x0, 0x1, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}, @common=@ipv6header={{0x28}, {0x0, 0x56, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [0xff000000, 0xff0000ff, 0x0, 0xff], [0xff000000, 0xff, 0xffffffff, 0xff000000], 'syz_tun\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}, 0x2, 0xfb, 0x5}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}, {0x3, 0xff}}, @common=@icmp6={{0x28}, {0x11, '`\f'}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) [ 574.999358] x_tables: ip6_tables: mh match: only valid for protocol 135 04:59:56 executing program 4: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000000040)=""/127) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) r2 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r2, &(0x7f0000000500)=[{}], 0x1, 0x0) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0xffffffffffffffff, 0x7, r1, &(0x7f0000000000)={r2, r0, 0x44}) epoll_create1(0x0) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000000040)=""/127) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) (async) syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) (async) epoll_wait(r2, &(0x7f0000000500)=[{}], 0x1, 0x0) (async) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0xffffffffffffffff, 0x7, r1, &(0x7f0000000000)={r2, r0, 0x44}) (async) 04:59:56 executing program 1: epoll_create1(0x0) epoll_wait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0xfffffffd) 04:59:56 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) r1 = epoll_create1(0x80000) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x4000) syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_create(0xc21) epoll_wait(r0, &(0x7f0000000500), 0x0, 0x2) epoll_wait(r1, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x811) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) (async) epoll_create1(0x80000) (async) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x4000) (async) syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) (async) epoll_create(0xc21) (async) epoll_wait(r0, &(0x7f0000000500), 0x0, 0x2) (async) epoll_wait(r1, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x811) (async) 04:59:56 executing program 5: r0 = epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000001180)) r1 = getpgid(0x0) r2 = getpgid(0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r3, &(0x7f0000000140)={r0, 0xffffffffffffffff, 0x3ff}) 04:59:56 executing program 3: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0xd) 04:59:56 executing program 4: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000000040)=""/127) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) r2 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r2, &(0x7f0000000500)=[{}], 0x1, 0x0) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0xffffffffffffffff, 0x7, r1, &(0x7f0000000000)={r2, r0, 0x44}) epoll_create1(0x0) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000000040)=""/127) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) (async) syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) (async) epoll_wait(r2, &(0x7f0000000500)=[{}], 0x1, 0x0) (async) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0xffffffffffffffff, 0x7, r1, &(0x7f0000000000)={r2, r0, 0x44}) (async) 04:59:56 executing program 0: epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) r2 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x3, 0x202101) ioctl$SNDCTL_SEQ_THRESHOLD(r3, 0x4004510d, &(0x7f0000000080)=0xfffffff7) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [0xff, 0xff000000, 0xff, 0xff000000], [0xffffffff, 0xff000000, 0xffffffff, 0xffffffff], 'veth1_virt_wifi\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x33, 0xe6, 0x0, 0x1}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x0, 0x1, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}, @common=@ipv6header={{0x28}, {0x0, 0x56, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [0xff000000, 0xff0000ff, 0x0, 0xff], [0xff000000, 0xff, 0xffffffff, 0xff000000], 'syz_tun\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}, 0x2, 0xfb, 0x5}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}, {0x3, 0xff}}, @common=@icmp6={{0x28}, {0x11, '`\f'}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) 04:59:56 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0xd) 04:59:57 executing program 1: epoll_create1(0x0) epoll_wait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0xfffffffd) 04:59:57 executing program 0: epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) r2 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x3, 0x202101) ioctl$SNDCTL_SEQ_THRESHOLD(r3, 0x4004510d, &(0x7f0000000080)=0xfffffff7) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [0xff, 0xff000000, 0xff, 0xff000000], [0xffffffff, 0xff000000, 0xffffffff, 0xffffffff], 'veth1_virt_wifi\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x33, 0xe6, 0x0, 0x1}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x0, 0x1, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}, @common=@ipv6header={{0x28}, {0x0, 0x56, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [0xff000000, 0xff0000ff, 0x0, 0xff], [0xff000000, 0xff, 0xffffffff, 0xff000000], 'syz_tun\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}, 0x2, 0xfb, 0x5}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}, {0x3, 0xff}}, @common=@icmp6={{0x28}, {0x11, '`\f'}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) 04:59:57 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="00f5ff001504a58ca732e6b6362d6aeb7b240e956cea98208defea9b0183370adc06fa0d141a6d637b5889e55a5d3d09ddb6c69b0341630351071c7614abb6b5bea734ac0c7962b9b2c435732d960f2df93cac748d8709566dce95ccb8a8956f9ce360e12a4eafb21d8b442778fa5fc6f1aec24f36d184425f25316376b9c7be4449200063f8c800f2b59dc6cd7205573b5e908f4750e7a51e99a473f7", @ANYRES16=0x0, @ANYBLOB="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"], 0x150}, 0x1, 0x0, 0x0, 0x8000}, 0x800) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)=0x1b) 04:59:57 executing program 4: r0 = epoll_create1(0x80000) socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) r2 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) r3 = socket$inet6(0xa, 0x80000, 0x8) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000700)={0x1870, {{0xa, 0x4e23, 0x1ff, @empty, 0x9}}}, 0x88) epoll_wait(r2, &(0x7f0000000500)=[{}], 0x1, 0x0) r4 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0x1, 0x58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in6=@empty, 0x4e21, 0x0, 0x4e22, 0x800, 0x0, 0x0, 0xc0, 0x89, r5, 0xffffffffffffffff}, {0x0, 0x0, 0x6, 0x8, 0x9, 0x4, 0x6}, {0xec, 0x0, 0x5, 0x8}, 0x0, 0x6e6bbc}, {{@in=@empty, 0x0, 0x32}, 0x2, @in=@empty, 0x0, 0x2, 0x2, 0x73, 0x0, 0x401}}, 0xe8) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x13, 0x9, &(0x7f0000000180)=@raw=[@call={0x85, 0x0, 0x0, 0x9}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x6}, @jmp={0x5, 0x1, 0x1, 0x0, 0xb, 0x0, 0x1}, @ldst={0x1, 0x0, 0x6, 0xb, 0x6, 0xfffffffffffffff0, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x401}, @map_idx={0x18, 0x6, 0x5, 0x0, 0xc}], &(0x7f0000000200)='GPL\x00', 0xe9a, 0x9b, &(0x7f0000000240)=""/155, 0x41100, 0x8, '\x00', 0x0, 0x14, r4, 0x8, &(0x7f0000000300)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000340)={0x2, 0xb, 0x9, 0x800}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000380)=[r4]}, 0x80) r7 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r7, &(0x7f0000000500)=[{}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xd, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0xa3400, 0x13, '\x00', r5, 0x6, r4, 0x8, &(0x7f0000000100)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000140)={0x2, 0x10, 0x1, 0x1}, 0x10, 0xffffffffffffffff, r6, 0x0, &(0x7f0000000440)=[r7]}, 0x80) epoll_wait(r4, &(0x7f0000000500)=[{}], 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000080)={0xe0000001}) epoll_wait(0xffffffffffffffff, &(0x7f0000000500)=[{}], 0x1, 0x0) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000040)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000000)={0x0, 0x2, r0, 0x4, 0x80000}) 04:59:57 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0xd) 04:59:57 executing program 5: r0 = epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000001180)) r1 = getpgid(0x0) r2 = getpgid(0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r3, &(0x7f0000000140)={r0, 0xffffffffffffffff, 0x3ff}) 04:59:57 executing program 1: epoll_create1(0x0) epoll_wait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0xfffffffd) 04:59:57 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="00f5ff001504a58ca732e6b6362d6aeb7b240e956cea98208defea9b0183370adc06fa0d141a6d637b5889e55a5d3d09ddb6c69b0341630351071c7614abb6b5bea734ac0c7962b9b2c435732d960f2df93cac748d8709566dce95ccb8a8956f9ce360e12a4eafb21d8b442778fa5fc6f1aec24f36d184425f25316376b9c7be4449200063f8c800f2b59dc6cd7205573b5e908f4750e7a51e99a473f7", @ANYRES16=0x0, @ANYBLOB="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"], 0x150}, 0x1, 0x0, 0x0, 0x8000}, 0x800) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)=0x1b) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="00f5ff001504a58ca732e6b6362d6aeb7b240e956cea98208defea9b0183370adc06fa0d141a6d637b5889e55a5d3d09ddb6c69b0341630351071c7614abb6b5bea734ac0c7962b9b2c435732d960f2df93cac748d8709566dce95ccb8a8956f9ce360e12a4eafb21d8b442778fa5fc6f1aec24f36d184425f25316376b9c7be4449200063f8c800f2b59dc6cd7205573b5e908f4750e7a51e99a473f7", @ANYRES16=0x0, @ANYBLOB="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"], 0x150}, 0x1, 0x0, 0x0, 0x8000}, 0x800) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)=0x1b) (async) 04:59:57 executing program 0: epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) r2 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) syz_open_dev$vcsn(&(0x7f0000000000), 0x3, 0x202101) r3 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [0xff, 0xff000000, 0xff, 0xff000000], [0xffffffff, 0xff000000, 0xffffffff, 0xffffffff], 'veth1_virt_wifi\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x33, 0xe6, 0x0, 0x1}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x0, 0x1, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}, @common=@ipv6header={{0x28}, {0x0, 0x56, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [0xff000000, 0xff0000ff, 0x0, 0xff], [0xff000000, 0xff, 0xffffffff, 0xff000000], 'syz_tun\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}, 0x2, 0xfb, 0x5}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}, {0x3, 0xff}}, @common=@icmp6={{0x28}, {0x11, '`\f'}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) 04:59:57 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0xd) 04:59:57 executing program 5: r0 = epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000001180)) r1 = getpgid(0x0) r2 = getpgid(0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r3, &(0x7f0000000140)={r0, 0xffffffffffffffff, 0x3ff}) 04:59:57 executing program 4: r0 = epoll_create1(0x80000) socket$l2tp6(0xa, 0x2, 0x73) (async) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) r2 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) (async) r3 = socket$inet6(0xa, 0x80000, 0x8) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000700)={0x1870, {{0xa, 0x4e23, 0x1ff, @empty, 0x9}}}, 0x88) (async) epoll_wait(r2, &(0x7f0000000500)=[{}], 0x1, 0x0) r4 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0x1, 0x58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in6=@empty, 0x4e21, 0x0, 0x4e22, 0x800, 0x0, 0x0, 0xc0, 0x89, r5, 0xffffffffffffffff}, {0x0, 0x0, 0x6, 0x8, 0x9, 0x4, 0x6}, {0xec, 0x0, 0x5, 0x8}, 0x0, 0x6e6bbc}, {{@in=@empty, 0x0, 0x32}, 0x2, @in=@empty, 0x0, 0x2, 0x2, 0x73, 0x0, 0x401}}, 0xe8) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x13, 0x9, &(0x7f0000000180)=@raw=[@call={0x85, 0x0, 0x0, 0x9}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x6}, @jmp={0x5, 0x1, 0x1, 0x0, 0xb, 0x0, 0x1}, @ldst={0x1, 0x0, 0x6, 0xb, 0x6, 0xfffffffffffffff0, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x401}, @map_idx={0x18, 0x6, 0x5, 0x0, 0xc}], &(0x7f0000000200)='GPL\x00', 0xe9a, 0x9b, &(0x7f0000000240)=""/155, 0x41100, 0x8, '\x00', 0x0, 0x14, r4, 0x8, &(0x7f0000000300)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000340)={0x2, 0xb, 0x9, 0x800}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000380)=[r4]}, 0x80) r7 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r7, &(0x7f0000000500)=[{}], 0x1, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xd, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0xa3400, 0x13, '\x00', r5, 0x6, r4, 0x8, &(0x7f0000000100)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000140)={0x2, 0x10, 0x1, 0x1}, 0x10, 0xffffffffffffffff, r6, 0x0, &(0x7f0000000440)=[r7]}, 0x80) (async) epoll_wait(r4, &(0x7f0000000500)=[{}], 0x1, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000080)={0xe0000001}) epoll_wait(0xffffffffffffffff, &(0x7f0000000500)=[{}], 0x1, 0x0) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000040)) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000000)={0x0, 0x2, r0, 0x4, 0x80000}) 04:59:57 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="00f5ff001504a58ca732e6b6362d6aeb7b240e956cea98208defea9b0183370adc06fa0d141a6d637b5889e55a5d3d09ddb6c69b0341630351071c7614abb6b5bea734ac0c7962b9b2c435732d960f2df93cac748d8709566dce95ccb8a8956f9ce360e12a4eafb21d8b442778fa5fc6f1aec24f36d184425f25316376b9c7be4449200063f8c800f2b59dc6cd7205573b5e908f4750e7a51e99a473f7", @ANYRES16=0x0, @ANYBLOB="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"], 0x150}, 0x1, 0x0, 0x0, 0x8000}, 0x800) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)=0x1b) 04:59:57 executing program 1: r0 = epoll_create1(0x0) epoll_wait(r0, 0x0, 0x0, 0xfffffffd) 04:59:57 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) 04:59:57 executing program 0: epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) r2 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) r3 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [0xff, 0xff000000, 0xff, 0xff000000], [0xffffffff, 0xff000000, 0xffffffff, 0xffffffff], 'veth1_virt_wifi\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x33, 0xe6, 0x0, 0x1}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x0, 0x1, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}, @common=@ipv6header={{0x28}, {0x0, 0x56, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [0xff000000, 0xff0000ff, 0x0, 0xff], [0xff000000, 0xff, 0xffffffff, 0xff000000], 'syz_tun\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}, 0x2, 0xfb, 0x5}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}, {0x3, 0xff}}, @common=@icmp6={{0x28}, {0x11, '`\f'}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) [ 576.096508] x_tables: ip6_tables: mh match: only valid for protocol 135 04:59:57 executing program 5: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, 0x0) r2 = getpgid(0x0) r3 = getpgid(0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r4, &(0x7f0000000140)={r0, 0xffffffffffffffff, 0x3ff}) 04:59:57 executing program 1: r0 = epoll_create1(0x0) epoll_wait(r0, 0x0, 0x0, 0xfffffffd) 04:59:57 executing program 2: ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000040)) syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) 04:59:57 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) 04:59:57 executing program 4: r0 = epoll_create1(0x80000) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) (async) r2 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) (async) r3 = socket$inet6(0xa, 0x80000, 0x8) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000700)={0x1870, {{0xa, 0x4e23, 0x1ff, @empty, 0x9}}}, 0x88) (async) epoll_wait(r2, &(0x7f0000000500)=[{}], 0x1, 0x0) (async) r4 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0x1, 0x58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in6=@empty, 0x4e21, 0x0, 0x4e22, 0x800, 0x0, 0x0, 0xc0, 0x89, r5, 0xffffffffffffffff}, {0x0, 0x0, 0x6, 0x8, 0x9, 0x4, 0x6}, {0xec, 0x0, 0x5, 0x8}, 0x0, 0x6e6bbc}, {{@in=@empty, 0x0, 0x32}, 0x2, @in=@empty, 0x0, 0x2, 0x2, 0x73, 0x0, 0x401}}, 0xe8) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x13, 0x9, &(0x7f0000000180)=@raw=[@call={0x85, 0x0, 0x0, 0x9}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x6}, @jmp={0x5, 0x1, 0x1, 0x0, 0xb, 0x0, 0x1}, @ldst={0x1, 0x0, 0x6, 0xb, 0x6, 0xfffffffffffffff0, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x401}, @map_idx={0x18, 0x6, 0x5, 0x0, 0xc}], &(0x7f0000000200)='GPL\x00', 0xe9a, 0x9b, &(0x7f0000000240)=""/155, 0x41100, 0x8, '\x00', 0x0, 0x14, r4, 0x8, &(0x7f0000000300)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000340)={0x2, 0xb, 0x9, 0x800}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000380)=[r4]}, 0x80) (async) r7 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r7, &(0x7f0000000500)=[{}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xd, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0xa3400, 0x13, '\x00', r5, 0x6, r4, 0x8, &(0x7f0000000100)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000140)={0x2, 0x10, 0x1, 0x1}, 0x10, 0xffffffffffffffff, r6, 0x0, &(0x7f0000000440)=[r7]}, 0x80) (async) epoll_wait(r4, &(0x7f0000000500)=[{}], 0x1, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000080)={0xe0000001}) (async) epoll_wait(0xffffffffffffffff, &(0x7f0000000500)=[{}], 0x1, 0x0) (async) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000040)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000000)={0x0, 0x2, r0, 0x4, 0x80000}) 04:59:57 executing program 0: epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) epoll_create(0x9) r2 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [0xff, 0xff000000, 0xff, 0xff000000], [0xffffffff, 0xff000000, 0xffffffff, 0xffffffff], 'veth1_virt_wifi\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x33, 0xe6, 0x0, 0x1}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x0, 0x1, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}, @common=@ipv6header={{0x28}, {0x0, 0x56, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [0xff000000, 0xff0000ff, 0x0, 0xff], [0xff000000, 0xff, 0xffffffff, 0xff000000], 'syz_tun\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}, 0x2, 0xfb, 0x5}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}, {0x3, 0xff}}, @common=@icmp6={{0x28}, {0x11, '`\f'}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) 04:59:57 executing program 1: r0 = epoll_create1(0x0) epoll_wait(r0, 0x0, 0x0, 0xfffffffd) [ 576.216402] x_tables: ip6_tables: mh match: only valid for protocol 135 04:59:57 executing program 5: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, 0x0) r2 = getpgid(0x0) r3 = getpgid(0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r4, &(0x7f0000000140)={r0, 0xffffffffffffffff, 0x3ff}) 04:59:57 executing program 2: ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000040)) syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) 04:59:57 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) 04:59:57 executing program 0: epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) r2 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [0xff, 0xff000000, 0xff, 0xff000000], [0xffffffff, 0xff000000, 0xffffffff, 0xffffffff], 'veth1_virt_wifi\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x33, 0xe6, 0x0, 0x1}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x0, 0x1, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}, @common=@ipv6header={{0x28}, {0x0, 0x56, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [0xff000000, 0xff0000ff, 0x0, 0xff], [0xff000000, 0xff, 0xffffffff, 0xff000000], 'syz_tun\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}, 0x2, 0xfb, 0x5}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}, {0x3, 0xff}}, @common=@icmp6={{0x28}, {0x11, '`\f'}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) 04:59:57 executing program 1: r0 = epoll_create1(0x0) epoll_wait(r0, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}], 0x6, 0xfffffffd) [ 576.301459] x_tables: ip6_tables: mh match: only valid for protocol 135 04:59:57 executing program 5: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, 0x0) r2 = getpgid(0x0) r3 = getpgid(0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r4, &(0x7f0000000140)={r0, 0xffffffffffffffff, 0x3ff}) 04:59:57 executing program 2: ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000040)) syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000040)) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) 04:59:57 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)) 04:59:57 executing program 4: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="680000005c8d113ac12325daab7b08c9e323d40e6432ed8eeb0133d520ebf78fc228a36f365280127309efcdee18e5bac898304337b47512ea81559de92f474d62a243d47d25c4b64d137aa2e97d7b36ed144024e4524e64bfbe1b7c3cc1ac93d0203b978523ca5a5ac841daba752d33e065c46b00f96fb3d24d7f42520e1935b6dbc1cc44029d0adfe9a7437f79e4", @ANYRES16=0x0, @ANYBLOB="010025bd7000fcdbdf250100000014000800766c616e30000000000000000000000014002000fc0100000000000000000000000000010800090000000000050004001500000014001f00fe8000000000000000000000000000aa0500040073000000"], 0x68}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 04:59:57 executing program 0: epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [0xff, 0xff000000, 0xff, 0xff000000], [0xffffffff, 0xff000000, 0xffffffff, 0xffffffff], 'veth1_virt_wifi\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x33, 0xe6, 0x0, 0x1}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x0, 0x1, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}, @common=@ipv6header={{0x28}, {0x0, 0x56, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [0xff000000, 0xff0000ff, 0x0, 0xff], [0xff000000, 0xff, 0xffffffff, 0xff000000], 'syz_tun\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}, 0x2, 0xfb, 0x5}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}, {0x3, 0xff}}, @common=@icmp6={{0x28}, {0x11, '`\f'}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) [ 576.405977] x_tables: ip6_tables: mh match: only valid for protocol 135 04:59:57 executing program 5: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) r2 = getpgid(0x0) r3 = getpgid(0x0) r4 = socket$inet_sctp(0x2, 0x0, 0x84) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r4, &(0x7f0000000140)={r0, 0xffffffffffffffff, 0x3ff}) 04:59:57 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)) 04:59:57 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r1, &(0x7f0000000500)=[{}], 0x1, 0x0) ioctl$IMDELTIMER(r1, 0x80044941, &(0x7f0000000000)=0x325967e20ebb8b67) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) r2 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r2, &(0x7f0000000500)=[{}], 0x1, 0x0) syz_open_pts(r2, 0xc0000) 04:59:57 executing program 4: r0 = epoll_create1(0x0) (async) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="680000005c8d113ac12325daab7b08c9e323d40e6432ed8eeb0133d520ebf78fc228a36f365280127309efcdee18e5bac898304337b47512ea81559de92f474d62a243d47d25c4b64d137aa2e97d7b36ed144024e4524e64bfbe1b7c3cc1ac93d0203b978523ca5a5ac841daba752d33e065c46b00f96fb3d24d7f42520e1935b6dbc1cc44029d0adfe9a7437f79e4", @ANYRES16=0x0, @ANYBLOB="010025bd7000fcdbdf250100000014000800766c616e30000000000000000000000014002000fc0100000000000000000000000000010800090000000000050004001500000014001f00fe8000000000000000000000000000aa0500040073000000"], 0x68}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 04:59:57 executing program 0: epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [0xff, 0xff000000, 0xff, 0xff000000], [0xffffffff, 0xff000000, 0xffffffff, 0xffffffff], 'veth1_virt_wifi\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x33, 0xe6, 0x0, 0x1}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x0, 0x1, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}, @common=@ipv6header={{0x28}, {0x0, 0x56, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [0xff000000, 0xff0000ff, 0x0, 0xff], [0xff000000, 0xff, 0xffffffff, 0xff000000], 'syz_tun\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}, 0x2, 0xfb, 0x5}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}, {0x3, 0xff}}, @common=@icmp6={{0x28}, {0x11, '`\f'}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) 04:59:57 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)) [ 576.508009] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 576.599399] x_tables: ip6_tables: mh match: only valid for protocol 135 04:59:58 executing program 1: r0 = epoll_create1(0x0) epoll_wait(r0, &(0x7f0000000180)=[{}, {}, {}, {}, {}], 0x5, 0xfffffffd) 04:59:58 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) (async) r1 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r1, &(0x7f0000000500)=[{}], 0x1, 0x0) (async) ioctl$IMDELTIMER(r1, 0x80044941, &(0x7f0000000000)=0x325967e20ebb8b67) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) (async) r2 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r2, &(0x7f0000000500)=[{}], 0x1, 0x0) syz_open_pts(r2, 0xc0000) 04:59:58 executing program 4: r0 = epoll_create1(0x0) (async) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="680000005c8d113ac12325daab7b08c9e323d40e6432ed8eeb0133d520ebf78fc228a36f365280127309efcdee18e5bac898304337b47512ea81559de92f474d62a243d47d25c4b64d137aa2e97d7b36ed144024e4524e64bfbe1b7c3cc1ac93d0203b978523ca5a5ac841daba752d33e065c46b00f96fb3d24d7f42520e1935b6dbc1cc44029d0adfe9a7437f79e4", @ANYRES16=0x0, @ANYBLOB="010025bd7000fcdbdf250100000014000800766c616e30000000000000000000000014002000fc0100000000000000000000000000010800090000000000050004001500000014001f00fe8000000000000000000000000000aa0500040073000000"], 0x68}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 04:59:58 executing program 5: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) r2 = getpgid(0x0) r3 = getpgid(0x0) r4 = socket$inet_sctp(0x2, 0x0, 0x84) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r4, &(0x7f0000000140)={r0, 0xffffffffffffffff, 0x3ff}) 04:59:58 executing program 0: epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [0xff, 0xff000000, 0xff, 0xff000000], [0xffffffff, 0xff000000, 0xffffffff, 0xffffffff], 'veth1_virt_wifi\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x33, 0xe6, 0x0, 0x1}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x0, 0x1, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}, @common=@ipv6header={{0x28}, {0x0, 0x56, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [0xff000000, 0xff0000ff, 0x0, 0xff], [0xff000000, 0xff, 0xffffffff, 0xff000000], 'syz_tun\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}, 0x2, 0xfb, 0x5}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}, {0x3, 0xff}}, @common=@icmp6={{0x28}, {0x11, '`\f'}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) 04:59:58 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)) 04:59:58 executing program 0: epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [0xff, 0xff000000, 0xff, 0xff000000], [0xffffffff, 0xff000000, 0xffffffff, 0xffffffff], 'veth1_virt_wifi\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x33, 0xe6, 0x0, 0x1}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x0, 0x1, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}, @common=@ipv6header={{0x28}, {0x0, 0x56, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [0xff000000, 0xff0000ff, 0x0, 0xff], [0xff000000, 0xff, 0xffffffff, 0xff000000], 'syz_tun\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}, 0x2, 0xfb, 0x5}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}, {0x3, 0xff}}, @common=@icmp6={{0x28}, {0x11, '`\f'}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) 04:59:58 executing program 3: epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) r2 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x3, 0x202101) ioctl$SNDCTL_SEQ_THRESHOLD(r3, 0x4004510d, &(0x7f0000000080)=0xfffffff7) r4 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [0xff, 0xff000000, 0xff, 0xff000000], [0xffffffff, 0xff000000, 0xffffffff, 0xffffffff], 'veth1_virt_wifi\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x33, 0xe6, 0x0, 0x1}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x0, 0x1, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}, @common=@ipv6header={{0x28}, {0x0, 0x56, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [0xff000000, 0xff0000ff, 0x0, 0xff], [0xff000000, 0xff, 0xffffffff, 0xff000000], 'syz_tun\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}, 0x2, 0xfb, 0x5}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}, {0x3, 0xff}}, @common=@icmp6={{0x28}, {0x11, '`\f'}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) 04:59:58 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r1, &(0x7f0000000500)=[{}], 0x1, 0x0) (async) ioctl$IMDELTIMER(r1, 0x80044941, &(0x7f0000000000)=0x325967e20ebb8b67) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) (async) r2 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r2, &(0x7f0000000500)=[{}], 0x1, 0x0) syz_open_pts(r2, 0xc0000) 04:59:58 executing program 4: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000040)={@remote}, &(0x7f0000000080)=0x14) [ 577.268947] x_tables: ip6_tables: mh match: only valid for protocol 135 04:59:58 executing program 5: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) r2 = getpgid(0x0) r3 = getpgid(0x0) r4 = socket$inet_sctp(0x2, 0x0, 0x84) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r4, &(0x7f0000000140)={r0, 0xffffffffffffffff, 0x3ff}) 04:59:58 executing program 0: epoll_create1(0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [0xff, 0xff000000, 0xff, 0xff000000], [0xffffffff, 0xff000000, 0xffffffff, 0xffffffff], 'veth1_virt_wifi\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x33, 0xe6, 0x0, 0x1}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x0, 0x1, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}, @common=@ipv6header={{0x28}, {0x0, 0x56, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [0xff000000, 0xff0000ff, 0x0, 0xff], [0xff000000, 0xff, 0xffffffff, 0xff000000], 'syz_tun\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}, 0x2, 0xfb, 0x5}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}, {0x3, 0xff}}, @common=@icmp6={{0x28}, {0x11, '`\f'}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) [ 577.357850] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 577.375542] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 577.434936] x_tables: ip6_tables: mh match: only valid for protocol 135 04:59:59 executing program 1: r0 = epoll_create1(0x0) epoll_wait(r0, &(0x7f0000000180)=[{}, {}, {}, {}], 0x4, 0xfffffffd) 04:59:59 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) syz_open_dev$tty20(0xc, 0x4, 0x1) 04:59:59 executing program 4: r0 = epoll_create1(0x0) (async) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000040)={@remote}, &(0x7f0000000080)=0x14) 04:59:59 executing program 3: epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) r2 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x3, 0x202101) ioctl$SNDCTL_SEQ_THRESHOLD(r3, 0x4004510d, &(0x7f0000000080)=0xfffffff7) r4 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [0xff, 0xff000000, 0xff, 0xff000000], [0xffffffff, 0xff000000, 0xffffffff, 0xffffffff], 'veth1_virt_wifi\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x33, 0xe6, 0x0, 0x1}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x0, 0x1, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}, @common=@ipv6header={{0x28}, {0x0, 0x56, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [0xff000000, 0xff0000ff, 0x0, 0xff], [0xff000000, 0xff, 0xffffffff, 0xff000000], 'syz_tun\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}, 0x2, 0xfb, 0x5}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}, {0x3, 0xff}}, @common=@icmp6={{0x28}, {0x11, '`\f'}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) 04:59:59 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [0xff, 0xff000000, 0xff, 0xff000000], [0xffffffff, 0xff000000, 0xffffffff, 0xffffffff], 'veth1_virt_wifi\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x33, 0xe6, 0x0, 0x1}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x0, 0x1, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}, @common=@ipv6header={{0x28}, {0x0, 0x56, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [0xff000000, 0xff0000ff, 0x0, 0xff], [0xff000000, 0xff, 0xffffffff, 0xff000000], 'syz_tun\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}, 0x2, 0xfb, 0x5}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}, {0x3, 0xff}}, @common=@icmp6={{0x28}, {0x11, '`\f'}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) 04:59:59 executing program 5: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) getpgid(0x0) r2 = getpgid(0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) kcmp$KCMP_EPOLL_TFD(0x0, r2, 0x7, r3, &(0x7f0000000140)={r0, 0xffffffffffffffff, 0x3ff}) 04:59:59 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) 04:59:59 executing program 5: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) getpgid(0x0) r2 = getpgid(0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) kcmp$KCMP_EPOLL_TFD(0x0, r2, 0x7, r3, &(0x7f0000000140)={r0, 0xffffffffffffffff, 0x3ff}) 04:59:59 executing program 0: socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [0xff, 0xff000000, 0xff, 0xff000000], [0xffffffff, 0xff000000, 0xffffffff, 0xffffffff], 'veth1_virt_wifi\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x33, 0xe6, 0x0, 0x1}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x0, 0x1, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}, @common=@ipv6header={{0x28}, {0x0, 0x56, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [0xff000000, 0xff0000ff, 0x0, 0xff], [0xff000000, 0xff, 0xffffffff, 0xff000000], 'syz_tun\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}, 0x2, 0xfb, 0x5}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}, {0x3, 0xff}}, @common=@icmp6={{0x28}, {0x11, '`\f'}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) 04:59:59 executing program 4: r0 = epoll_create1(0x0) (async) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000040)={@remote}, &(0x7f0000000080)=0x14) 04:59:59 executing program 3: epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) r2 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x3, 0x202101) ioctl$SNDCTL_SEQ_THRESHOLD(r3, 0x4004510d, &(0x7f0000000080)=0xfffffff7) r4 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [0xff, 0xff000000, 0xff, 0xff000000], [0xffffffff, 0xff000000, 0xffffffff, 0xffffffff], 'veth1_virt_wifi\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x33, 0xe6, 0x0, 0x1}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x0, 0x1, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}, @common=@ipv6header={{0x28}, {0x0, 0x56, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [0xff000000, 0xff0000ff, 0x0, 0xff], [0xff000000, 0xff, 0xffffffff, 0xff000000], 'syz_tun\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}, 0x2, 0xfb, 0x5}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}, {0x3, 0xff}}, @common=@icmp6={{0x28}, {0x11, '`\f'}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) [ 578.172491] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 578.205243] x_tables: ip6_tables: mh match: only valid for protocol 135 04:59:59 executing program 0: socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [0xff, 0xff000000, 0xff, 0xff000000], [0xffffffff, 0xff000000, 0xffffffff, 0xffffffff], 'veth1_virt_wifi\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x33, 0xe6, 0x0, 0x1}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x0, 0x1, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}, @common=@ipv6header={{0x28}, {0x0, 0x56, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [0xff000000, 0xff0000ff, 0x0, 0xff], [0xff000000, 0xff, 0xffffffff, 0xff000000], 'syz_tun\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}, 0x2, 0xfb, 0x5}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}, {0x3, 0xff}}, @common=@icmp6={{0x28}, {0x11, '`\f'}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) [ 578.295851] x_tables: ip6_tables: mh match: only valid for protocol 135 05:00:00 executing program 1: r0 = epoll_create1(0x0) epoll_wait(r0, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xfffffffd) 05:00:00 executing program 4: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) r2 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r2, &(0x7f0000000500)=[{}], 0x1, 0x0) write$6lowpan_enable(r2, &(0x7f0000000000)='1', 0x1) 05:00:00 executing program 5: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) getpgid(0x0) r2 = getpgid(0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) kcmp$KCMP_EPOLL_TFD(0x0, r2, 0x7, r3, &(0x7f0000000140)={r0, 0xffffffffffffffff, 0x3ff}) 05:00:00 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) 05:00:00 executing program 3: epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) r2 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x3, 0x202101) ioctl$SNDCTL_SEQ_THRESHOLD(r3, 0x4004510d, &(0x7f0000000080)=0xfffffff7) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [0xff, 0xff000000, 0xff, 0xff000000], [0xffffffff, 0xff000000, 0xffffffff, 0xffffffff], 'veth1_virt_wifi\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x33, 0xe6, 0x0, 0x1}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x0, 0x1, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}, @common=@ipv6header={{0x28}, {0x0, 0x56, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [0xff000000, 0xff0000ff, 0x0, 0xff], [0xff000000, 0xff, 0xffffffff, 0xff000000], 'syz_tun\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}, 0x2, 0xfb, 0x5}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}, {0x3, 0xff}}, @common=@icmp6={{0x28}, {0x11, '`\f'}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) 05:00:00 executing program 0: socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [0xff, 0xff000000, 0xff, 0xff000000], [0xffffffff, 0xff000000, 0xffffffff, 0xffffffff], 'veth1_virt_wifi\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x33, 0xe6, 0x0, 0x1}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x0, 0x1, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}, @common=@ipv6header={{0x28}, {0x0, 0x56, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [0xff000000, 0xff0000ff, 0x0, 0xff], [0xff000000, 0xff, 0xffffffff, 0xff000000], 'syz_tun\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}, 0x2, 0xfb, 0x5}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}, {0x3, 0xff}}, @common=@icmp6={{0x28}, {0x11, '`\f'}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) 05:00:00 executing program 4: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) r2 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r2, &(0x7f0000000500)=[{}], 0x1, 0x0) write$6lowpan_enable(r2, &(0x7f0000000000)='1', 0x1) epoll_create1(0x0) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) (async) syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) (async) epoll_wait(r2, &(0x7f0000000500)=[{}], 0x1, 0x0) (async) write$6lowpan_enable(r2, &(0x7f0000000000)='1', 0x1) (async) 05:00:00 executing program 5: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) r2 = getpgid(0x0) getpgid(0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) kcmp$KCMP_EPOLL_TFD(r2, 0x0, 0x7, r3, &(0x7f0000000140)={r0, 0xffffffffffffffff, 0x3ff}) 05:00:00 executing program 3: epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) r2 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x3, 0x202101) ioctl$SNDCTL_SEQ_THRESHOLD(r3, 0x4004510d, &(0x7f0000000080)=0xfffffff7) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [0xff, 0xff000000, 0xff, 0xff000000], [0xffffffff, 0xff000000, 0xffffffff, 0xffffffff], 'veth1_virt_wifi\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x33, 0xe6, 0x0, 0x1}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x0, 0x1, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}, @common=@ipv6header={{0x28}, {0x0, 0x56, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [0xff000000, 0xff0000ff, 0x0, 0xff], [0xff000000, 0xff, 0xffffffff, 0xff000000], 'syz_tun\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}, 0x2, 0xfb, 0x5}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}, {0x3, 0xff}}, @common=@icmp6={{0x28}, {0x11, '`\f'}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) 05:00:00 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) 05:00:00 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$VT_WAITACTIVE(r1, 0x5607) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) 05:00:00 executing program 5: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) r2 = getpgid(0x0) getpgid(0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) kcmp$KCMP_EPOLL_TFD(r2, 0x0, 0x7, r3, &(0x7f0000000140)={r0, 0xffffffffffffffff, 0x3ff}) 05:00:01 executing program 1: r0 = epoll_create1(0x0) epoll_wait(r0, &(0x7f0000000180)=[{}, {}], 0x2, 0xfffffffd) 05:00:01 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) 05:00:01 executing program 4: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) r2 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r2, &(0x7f0000000500)=[{}], 0x1, 0x0) write$6lowpan_enable(r2, &(0x7f0000000000)='1', 0x1) epoll_create1(0x0) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) (async) syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) (async) epoll_wait(r2, &(0x7f0000000500)=[{}], 0x1, 0x0) (async) write$6lowpan_enable(r2, &(0x7f0000000000)='1', 0x1) (async) 05:00:01 executing program 5: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) r2 = getpgid(0x0) getpgid(0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) kcmp$KCMP_EPOLL_TFD(r2, 0x0, 0x7, r3, &(0x7f0000000140)={r0, 0xffffffffffffffff, 0x3ff}) 05:00:01 executing program 3: epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) r2 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x3, 0x202101) ioctl$SNDCTL_SEQ_THRESHOLD(r3, 0x4004510d, &(0x7f0000000080)=0xfffffff7) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [0xff, 0xff000000, 0xff, 0xff000000], [0xffffffff, 0xff000000, 0xffffffff, 0xffffffff], 'veth1_virt_wifi\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x33, 0xe6, 0x0, 0x1}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x0, 0x1, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}, @common=@ipv6header={{0x28}, {0x0, 0x56, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [0xff000000, 0xff0000ff, 0x0, 0xff], [0xff000000, 0xff, 0xffffffff, 0xff000000], 'syz_tun\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}, 0x2, 0xfb, 0x5}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}, {0x3, 0xff}}, @common=@icmp6={{0x28}, {0x11, '`\f'}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) 05:00:01 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) (async) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$VT_WAITACTIVE(r1, 0x5607) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) 05:00:01 executing program 3: epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) r2 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) syz_open_dev$vcsn(&(0x7f0000000000), 0x3, 0x202101) r3 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [0xff, 0xff000000, 0xff, 0xff000000], [0xffffffff, 0xff000000, 0xffffffff, 0xffffffff], 'veth1_virt_wifi\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x33, 0xe6, 0x0, 0x1}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x0, 0x1, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}, @common=@ipv6header={{0x28}, {0x0, 0x56, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [0xff000000, 0xff0000ff, 0x0, 0xff], [0xff000000, 0xff, 0xffffffff, 0xff000000], 'syz_tun\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}, 0x2, 0xfb, 0x5}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}, {0x3, 0xff}}, @common=@icmp6={{0x28}, {0x11, '`\f'}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) 05:00:01 executing program 5: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) r2 = getpgid(0x0) r3 = getpgid(0x0) socket$inet_sctp(0x2, 0x1, 0x84) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, 0xffffffffffffffff, &(0x7f0000000140)={r0, 0xffffffffffffffff, 0x3ff}) 05:00:01 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$VT_WAITACTIVE(r1, 0x5607) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) (async) ioctl$VT_WAITACTIVE(r1, 0x5607) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) (async) 05:00:01 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) 05:00:01 executing program 5: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) r2 = getpgid(0x0) r3 = getpgid(0x0) socket$inet_sctp(0x2, 0x1, 0x84) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, 0xffffffffffffffff, &(0x7f0000000140)={r0, 0xffffffffffffffff, 0x3ff}) 05:00:01 executing program 3: epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) r2 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) r3 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [0xff, 0xff000000, 0xff, 0xff000000], [0xffffffff, 0xff000000, 0xffffffff, 0xffffffff], 'veth1_virt_wifi\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x33, 0xe6, 0x0, 0x1}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x0, 0x1, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}, @common=@ipv6header={{0x28}, {0x0, 0x56, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [0xff000000, 0xff0000ff, 0x0, 0xff], [0xff000000, 0xff, 0xffffffff, 0xff000000], 'syz_tun\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}, 0x2, 0xfb, 0x5}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}, {0x3, 0xff}}, @common=@icmp6={{0x28}, {0x11, '`\f'}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) [ 579.979996] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 580.068453] x_tables: ip6_tables: mh match: only valid for protocol 135 05:00:01 executing program 1: r0 = epoll_create1(0x0) epoll_wait(r0, &(0x7f0000000180)=[{}], 0x1, 0xfffffffd) 05:00:01 executing program 4: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)={0x50000000}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)={0x2010}) 05:00:01 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x1a) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000080)={0x6, 0x8, 0x6, 0xff, 0xf311, 0xff6f}) syz_open_dev$ptys(0xc, 0x3, 0x0) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f0000000000)) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x11) 05:00:01 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [0xff, 0xff000000, 0xff, 0xff000000], [0xffffffff, 0xff000000, 0xffffffff, 0xffffffff], 'veth1_virt_wifi\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x33, 0xe6, 0x0, 0x1}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x0, 0x1, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}, @common=@ipv6header={{0x28}, {0x0, 0x56, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [0xff000000, 0xff0000ff, 0x0, 0xff], [0xff000000, 0xff, 0xffffffff, 0xff000000], 'syz_tun\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}, 0x2, 0xfb, 0x5}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}, {0x3, 0xff}}, @common=@icmp6={{0x28}, {0x11, '`\f'}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) 05:00:01 executing program 5: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) r2 = getpgid(0x0) r3 = getpgid(0x0) socket$inet_sctp(0x2, 0x1, 0x84) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, 0xffffffffffffffff, &(0x7f0000000140)={r0, 0xffffffffffffffff, 0x3ff}) 05:00:01 executing program 3: epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) epoll_create(0x9) r2 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [0xff, 0xff000000, 0xff, 0xff000000], [0xffffffff, 0xff000000, 0xffffffff, 0xffffffff], 'veth1_virt_wifi\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x33, 0xe6, 0x0, 0x1}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x0, 0x1, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}, @common=@ipv6header={{0x28}, {0x0, 0x56, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [0xff000000, 0xff0000ff, 0x0, 0xff], [0xff000000, 0xff, 0xffffffff, 0xff000000], 'syz_tun\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}, 0x2, 0xfb, 0x5}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}, {0x3, 0xff}}, @common=@icmp6={{0x28}, {0x11, '`\f'}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) 05:00:01 executing program 4: r0 = epoll_create1(0x0) (async) r1 = socket$l2tp6(0xa, 0x2, 0x73) (async) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)={0x50000000}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)={0x2010}) 05:00:01 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x1a) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000080)={0x6, 0x8, 0x6, 0xff, 0xf311, 0xff6f}) syz_open_dev$ptys(0xc, 0x3, 0x0) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f0000000000)) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x11) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x1a) (async) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000080)={0x6, 0x8, 0x6, 0xff, 0xf311, 0xff6f}) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) (async) ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f0000000000)) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x11) (async) 05:00:01 executing program 5: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) r2 = getpgid(0x0) r3 = getpgid(0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r4, 0x0) 05:00:01 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [0xff, 0xff000000, 0xff, 0xff000000], [0xffffffff, 0xff000000, 0xffffffff, 0xffffffff], 'veth1_virt_wifi\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x33, 0xe6, 0x0, 0x1}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x0, 0x1, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}, @common=@ipv6header={{0x28}, {0x0, 0x56, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [0xff000000, 0xff0000ff], [0xff000000, 0xff, 0xffffffff, 0xff000000], 'syz_tun\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}, 0x2, 0xfb, 0x5}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}, {0x3, 0xff}}, @common=@icmp6={{0x28}, {0x11, '`\f'}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) 05:00:02 executing program 3: epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) r2 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [0xff, 0xff000000, 0xff, 0xff000000], [0xffffffff, 0xff000000, 0xffffffff, 0xffffffff], 'veth1_virt_wifi\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x33, 0xe6, 0x0, 0x1}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x0, 0x1, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}, @common=@ipv6header={{0x28}, {0x0, 0x56, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [0xff000000, 0xff0000ff, 0x0, 0xff], [0xff000000, 0xff, 0xffffffff, 0xff000000], 'syz_tun\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}, 0x2, 0xfb, 0x5}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}, {0x3, 0xff}}, @common=@icmp6={{0x28}, {0x11, '`\f'}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) [ 580.832861] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 580.845083] x_tables: ip6_tables: mh match: only valid for protocol 135 05:00:02 executing program 4: r0 = epoll_create1(0x0) (async) r1 = socket$l2tp6(0xa, 0x2, 0x73) (async) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)={0x50000000}) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)={0x2010}) [ 580.922599] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 580.931874] x_tables: ip6_tables: mh match: only valid for protocol 135 05:00:02 executing program 1: r0 = epoll_create1(0x0) epoll_wait(r0, &(0x7f0000000180), 0x0, 0xfffffffd) 05:00:02 executing program 3: epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [0xff, 0xff000000, 0xff, 0xff000000], [0xffffffff, 0xff000000, 0xffffffff, 0xffffffff], 'veth1_virt_wifi\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x33, 0xe6, 0x0, 0x1}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x0, 0x1, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}, @common=@ipv6header={{0x28}, {0x0, 0x56, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [0xff000000, 0xff0000ff, 0x0, 0xff], [0xff000000, 0xff, 0xffffffff, 0xff000000], 'syz_tun\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}, 0x2, 0xfb, 0x5}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}, {0x3, 0xff}}, @common=@icmp6={{0x28}, {0x11, '`\f'}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) 05:00:02 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [0xff, 0xff000000, 0xff, 0xff000000], [0xffffffff, 0xff000000, 0xffffffff, 0xffffffff], 'veth1_virt_wifi\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x33, 0xe6, 0x0, 0x1}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x0, 0x1, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}, @common=@ipv6header={{0x28}, {0x0, 0x56, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [0xff000000], [0xff000000, 0xff, 0xffffffff, 0xff000000], 'syz_tun\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}, 0x2, 0xfb, 0x5}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}, {0x3, 0xff}}, @common=@icmp6={{0x28}, {0x11, '`\f'}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) 05:00:02 executing program 5: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) r2 = getpgid(0x0) r3 = getpgid(0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r4, 0x0) 05:00:02 executing program 4: r0 = epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) r2 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r2, &(0x7f0000000500)=[{}], 0x1, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000000)={0x0, 0x1, r3, 0xe9, 0x80000}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)={0x80000000}) 05:00:02 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x1a) (async) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000080)={0x6, 0x8, 0x6, 0xff, 0xf311, 0xff6f}) syz_open_dev$ptys(0xc, 0x3, 0x0) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f0000000000)) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x11) 05:00:02 executing program 4: r0 = epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) r2 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r2, &(0x7f0000000500)=[{}], 0x1, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000000)={0x0, 0x1, r3, 0xe9, 0x80000}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)={0x80000000}) epoll_create1(0x0) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) (async) syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) (async) epoll_wait(r2, &(0x7f0000000500)=[{}], 0x1, 0x0) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) setsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000000)={0x0, 0x1, r3, 0xe9, 0x80000}) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)={0x80000000}) (async) 05:00:02 executing program 1: r0 = epoll_create1(0x0) epoll_wait(r0, &(0x7f0000000180), 0x0, 0xfffffffd) 05:00:02 executing program 5: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) r2 = getpgid(0x0) r3 = getpgid(0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r4, 0x0) 05:00:02 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [0xff, 0xff000000, 0xff, 0xff000000], [0xffffffff, 0xff000000, 0xffffffff, 0xffffffff], 'veth1_virt_wifi\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x33, 0xe6, 0x0, 0x1}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x0, 0x1, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}, @common=@ipv6header={{0x28}, {0x0, 0x56, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [], [0xff000000, 0xff, 0xffffffff, 0xff000000], 'syz_tun\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}, 0x2, 0xfb, 0x5}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}, {0x3, 0xff}}, @common=@icmp6={{0x28}, {0x11, '`\f'}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) 05:00:02 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$SNDCTL_MIDI_INFO(r0, 0xc074510c, &(0x7f0000000040)={"aa7069b8e09b0571a99747a96e04ba884aefd56de789e7e27beef4882312", 0xfa4, 0xfffffff8, 0x47d50fd7, [0x3, 0x400, 0xfffffffd, 0x9, 0x5, 0x202c, 0x5, 0x3, 0x5, 0x2, 0x5b, 0x9, 0x1, 0x81, 0x3, 0xf6b1, 0xffffff7f, 0x6f5]}) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)=0x1b) [ 581.737633] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 581.769414] x_tables: ip6_tables: mh match: only valid for protocol 135 05:00:02 executing program 3: epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [0xff, 0xff000000, 0xff, 0xff000000], [0xffffffff, 0xff000000, 0xffffffff, 0xffffffff], 'veth1_virt_wifi\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x33, 0xe6, 0x0, 0x1}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x0, 0x1, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}, @common=@ipv6header={{0x28}, {0x0, 0x56, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [0xff000000, 0xff0000ff, 0x0, 0xff], [0xff000000, 0xff, 0xffffffff, 0xff000000], 'syz_tun\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}, 0x2, 0xfb, 0x5}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}, {0x3, 0xff}}, @common=@icmp6={{0x28}, {0x11, '`\f'}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) 05:00:02 executing program 4: r0 = epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) r2 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r2, &(0x7f0000000500)=[{}], 0x1, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000000)={0x0, 0x1, r3, 0xe9, 0x80000}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)={0x80000000}) epoll_create1(0x0) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) (async) syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) (async) epoll_wait(r2, &(0x7f0000000500)=[{}], 0x1, 0x0) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) setsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000000)={0x0, 0x1, r3, 0xe9, 0x80000}) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)={0x80000000}) (async) 05:00:02 executing program 1: r0 = epoll_create1(0x0) epoll_wait(r0, &(0x7f0000000180), 0x0, 0xfffffffd) 05:00:03 executing program 5: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) r2 = getpgid(0x0) r3 = getpgid(0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r4, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x3ff}) 05:00:03 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$SNDCTL_MIDI_INFO(r0, 0xc074510c, &(0x7f0000000040)={"aa7069b8e09b0571a99747a96e04ba884aefd56de789e7e27beef4882312", 0xfa4, 0xfffffff8, 0x47d50fd7, [0x3, 0x400, 0xfffffffd, 0x9, 0x5, 0x202c, 0x5, 0x3, 0x5, 0x2, 0x5b, 0x9, 0x1, 0x81, 0x3, 0xf6b1, 0xffffff7f, 0x6f5]}) (async) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)=0x1b) 05:00:03 executing program 1: r0 = epoll_create1(0x0) epoll_wait(r0, &(0x7f0000000180)=[{}], 0x1, 0x0) 05:00:03 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [0xff, 0xff000000, 0xff, 0xff000000], [0xffffffff, 0xff000000, 0xffffffff, 0xffffffff], 'veth1_virt_wifi\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x33, 0xe6, 0x0, 0x1}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x0, 0x1, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}, @common=@ipv6header={{0x28}, {0x0, 0x56, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [], [0xff000000, 0xff, 0xffffffff], 'syz_tun\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}, 0x2, 0xfb, 0x5}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}, {0x3, 0xff}}, @common=@icmp6={{0x28}, {0x11, '`\f'}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) 05:00:03 executing program 3: epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [0xff, 0xff000000, 0xff, 0xff000000], [0xffffffff, 0xff000000, 0xffffffff, 0xffffffff], 'veth1_virt_wifi\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x33, 0xe6, 0x0, 0x1}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x0, 0x1, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}, @common=@ipv6header={{0x28}, {0x0, 0x56, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [0xff000000, 0xff0000ff, 0x0, 0xff], [0xff000000, 0xff, 0xffffffff, 0xff000000], 'syz_tun\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}, 0x2, 0xfb, 0x5}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}, {0x3, 0xff}}, @common=@icmp6={{0x28}, {0x11, '`\f'}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) [ 581.884028] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 581.904752] x_tables: ip6_tables: mh match: only valid for protocol 135 05:00:03 executing program 5: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) r2 = getpgid(0x0) r3 = getpgid(0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r4, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x3ff}) 05:00:03 executing program 4: r0 = epoll_create1(0x0) r1 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f0000000000)={0x3, 0x0, [{0x80000001, 0x2a3, 0x30fd, 0x971, 0x7fff}, {0x80000000, 0x3cb0e1a, 0xfffffe00, 0x6, 0x1499}, {0x7, 0x1, 0xfff, 0x5, 0x2}]}) recvfrom$l2tp(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000001180)) 05:00:03 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$SNDCTL_MIDI_INFO(r0, 0xc074510c, &(0x7f0000000040)={"aa7069b8e09b0571a99747a96e04ba884aefd56de789e7e27beef4882312", 0xfa4, 0xfffffff8, 0x47d50fd7, [0x3, 0x400, 0xfffffffd, 0x9, 0x5, 0x202c, 0x5, 0x3, 0x5, 0x2, 0x5b, 0x9, 0x1, 0x81, 0x3, 0xf6b1, 0xffffff7f, 0x6f5]}) (async) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)=0x1b) 05:00:03 executing program 1: r0 = epoll_create1(0x0) epoll_wait(r0, &(0x7f0000000180)=[{}], 0x1, 0x0) 05:00:03 executing program 3: epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [0xff, 0xff000000, 0xff, 0xff000000], [0xffffffff, 0xff000000, 0xffffffff, 0xffffffff], 'veth1_virt_wifi\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x33, 0xe6, 0x0, 0x1}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x0, 0x1, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}, @common=@ipv6header={{0x28}, {0x0, 0x56, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [0xff000000, 0xff0000ff, 0x0, 0xff], [0xff000000, 0xff, 0xffffffff, 0xff000000], 'syz_tun\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}, 0x2, 0xfb, 0x5}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}, {0x3, 0xff}}, @common=@icmp6={{0x28}, {0x11, '`\f'}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) 05:00:03 executing program 4: r0 = epoll_create1(0x0) r1 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f0000000000)={0x3, 0x0, [{0x80000001, 0x2a3, 0x30fd, 0x971, 0x7fff}, {0x80000000, 0x3cb0e1a, 0xfffffe00, 0x6, 0x1499}, {0x7, 0x1, 0xfff, 0x5, 0x2}]}) recvfrom$l2tp(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000001180)) epoll_create1(0x0) (async) syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) (async) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f0000000000)={0x3, 0x0, [{0x80000001, 0x2a3, 0x30fd, 0x971, 0x7fff}, {0x80000000, 0x3cb0e1a, 0xfffffe00, 0x6, 0x1499}, {0x7, 0x1, 0xfff, 0x5, 0x2}]}) (async) recvfrom$l2tp(r1, 0x0, 0x0, 0x0, 0x0, 0x0) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000001180)) (async) 05:00:03 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000000)) [ 582.023093] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 582.027147] x_tables: ip6_tables: mh match: only valid for protocol 135 05:00:03 executing program 5: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) r2 = getpgid(0x0) r3 = getpgid(0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r4, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x3ff}) 05:00:03 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [0xff, 0xff000000, 0xff, 0xff000000], [0xffffffff, 0xff000000, 0xffffffff, 0xffffffff], 'veth1_virt_wifi\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x33, 0xe6, 0x0, 0x1}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x0, 0x1, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}, @common=@ipv6header={{0x28}, {0x0, 0x56, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [], [0xff000000, 0xff], 'syz_tun\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}, 0x2, 0xfb, 0x5}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}, {0x3, 0xff}}, @common=@icmp6={{0x28}, {0x11, '`\f'}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) 05:00:03 executing program 1: r0 = epoll_create1(0x0) epoll_wait(r0, &(0x7f0000000180)=[{}], 0x1, 0x0) 05:00:03 executing program 5: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) r2 = getpgid(0x0) r3 = getpgid(0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r4, &(0x7f0000000140)={r0}) 05:00:03 executing program 3: epoll_create1(0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [0xff, 0xff000000, 0xff, 0xff000000], [0xffffffff, 0xff000000, 0xffffffff, 0xffffffff], 'veth1_virt_wifi\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x33, 0xe6, 0x0, 0x1}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x0, 0x1, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}, @common=@ipv6header={{0x28}, {0x0, 0x56, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [0xff000000, 0xff0000ff, 0x0, 0xff], [0xff000000, 0xff, 0xffffffff, 0xff000000], 'syz_tun\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}, 0x2, 0xfb, 0x5}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}, {0x3, 0xff}}, @common=@icmp6={{0x28}, {0x11, '`\f'}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) 05:00:03 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000000)) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) (async) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000000)) (async) 05:00:03 executing program 4: r0 = epoll_create1(0x0) r1 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f0000000000)={0x3, 0x0, [{0x80000001, 0x2a3, 0x30fd, 0x971, 0x7fff}, {0x80000000, 0x3cb0e1a, 0xfffffe00, 0x6, 0x1499}, {0x7, 0x1, 0xfff, 0x5, 0x2}]}) (async) recvfrom$l2tp(r1, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r2 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000001180)) [ 582.133856] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 582.173949] x_tables: ip6_tables: mh match: only valid for protocol 135 05:00:03 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [0xff, 0xff000000, 0xff, 0xff000000], [0xffffffff, 0xff000000, 0xffffffff, 0xffffffff], 'veth1_virt_wifi\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x33, 0xe6, 0x0, 0x1}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x0, 0x1, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}, @common=@ipv6header={{0x28}, {0x0, 0x56, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [], [0xff000000], 'syz_tun\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}, 0x2, 0xfb, 0x5}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}, {0x3, 0xff}}, @common=@icmp6={{0x28}, {0x11, '`\f'}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) 05:00:03 executing program 1: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)={0x50000000}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)={0x2010}) 05:00:03 executing program 5: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) r2 = getpgid(0x0) r3 = getpgid(0x0) r4 = socket$inet_sctp(0x2, 0x0, 0x84) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r4, &(0x7f0000000140)={r0, 0xffffffffffffffff, 0x3ff}) 05:00:03 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000000)) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) (async) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000000)) (async) 05:00:03 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [0xff, 0xff000000, 0xff, 0xff000000], [0xffffffff, 0xff000000, 0xffffffff, 0xffffffff], 'veth1_virt_wifi\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x33, 0xe6, 0x0, 0x1}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x0, 0x1, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}, @common=@ipv6header={{0x28}, {0x0, 0x56, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [0xff000000, 0xff0000ff, 0x0, 0xff], [0xff000000, 0xff, 0xffffffff, 0xff000000], 'syz_tun\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}, 0x2, 0xfb, 0x5}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}, {0x3, 0xff}}, @common=@icmp6={{0x28}, {0x11, '`\f'}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) 05:00:03 executing program 1: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)={0x50000000}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)={0x2010}) 05:00:03 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/160}) r1 = epoll_create1(0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000001180)={0xc0002004}) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x37f}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r3 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)={0x20000006}) [ 582.262497] x_tables: ip6_tables: mh match: only valid for protocol 135 05:00:03 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [0xff, 0xff000000, 0xff, 0xff000000], [0xffffffff, 0xff000000, 0xffffffff, 0xffffffff], 'veth1_virt_wifi\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x33, 0xe6, 0x0, 0x1}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x0, 0x1, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}, @common=@ipv6header={{0x28}, {0x0, 0x56, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}, 0x2, 0xfb, 0x5}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}, {0x3, 0xff}}, @common=@icmp6={{0x28}, {0x11, '`\f'}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) 05:00:03 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) 05:00:03 executing program 3: socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [0xff, 0xff000000, 0xff, 0xff000000], [0xffffffff, 0xff000000, 0xffffffff, 0xffffffff], 'veth1_virt_wifi\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x33, 0xe6, 0x0, 0x1}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x0, 0x1, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}, @common=@ipv6header={{0x28}, {0x0, 0x56, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [0xff000000, 0xff0000ff, 0x0, 0xff], [0xff000000, 0xff, 0xffffffff, 0xff000000], 'syz_tun\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}, 0x2, 0xfb, 0x5}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}, {0x3, 0xff}}, @common=@icmp6={{0x28}, {0x11, '`\f'}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) [ 582.319967] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 582.355271] x_tables: ip6_tables: mh match: only valid for protocol 135 05:00:03 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) r1 = epoll_create1(0x80000) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x4000) syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_create(0xc21) epoll_wait(r0, &(0x7f0000000500), 0x0, 0x2) epoll_wait(r1, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x811) 05:00:03 executing program 1: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)={0x50000000}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)={0x2010}) 05:00:03 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) 05:00:03 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [0xff, 0xff000000, 0xff, 0xff000000], [0xffffffff, 0xff000000, 0xffffffff, 0xffffffff], 'veth1_virt_wifi\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x33, 0xe6, 0x0, 0x1}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x0, 0x1, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}, @common=@ipv6header={{0x28}, {0x0, 0x56, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00', {}, {0xff}, 0x2, 0xfb, 0x5}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}, {0x3, 0xff}}, @common=@icmp6={{0x28}, {0x11, '`\f'}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) 05:00:03 executing program 3: socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [0xff, 0xff000000, 0xff, 0xff000000], [0xffffffff, 0xff000000, 0xffffffff, 0xffffffff], 'veth1_virt_wifi\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x33, 0xe6, 0x0, 0x1}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x0, 0x1, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}, @common=@ipv6header={{0x28}, {0x0, 0x56, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [0xff000000, 0xff0000ff, 0x0, 0xff], [0xff000000, 0xff, 0xffffffff, 0xff000000], 'syz_tun\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}, 0x2, 0xfb, 0x5}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}, {0x3, 0xff}}, @common=@icmp6={{0x28}, {0x11, '`\f'}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) 05:00:03 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/160}) r1 = epoll_create1(0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000001180)={0xc0002004}) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x37f}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) (async, rerun: 64) r3 = epoll_create(0x9) (rerun: 64) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)={0x20000006}) [ 582.405860] x_tables: ip6_tables: mh match: only valid for protocol 135 05:00:03 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/160}) r1 = epoll_create1(0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000001180)={0xc0002004}) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x37f}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r3 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)={0x20000006}) 05:00:03 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) 05:00:03 executing program 3: socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [0xff, 0xff000000, 0xff, 0xff000000], [0xffffffff, 0xff000000, 0xffffffff, 0xffffffff], 'veth1_virt_wifi\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x33, 0xe6, 0x0, 0x1}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x0, 0x1, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}, @common=@ipv6header={{0x28}, {0x0, 0x56, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [0xff000000, 0xff0000ff, 0x0, 0xff], [0xff000000, 0xff, 0xffffffff, 0xff000000], 'syz_tun\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}, 0x2, 0xfb, 0x5}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}, {0x3, 0xff}}, @common=@icmp6={{0x28}, {0x11, '`\f'}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) 05:00:03 executing program 1: r0 = epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x50000000}) 05:00:03 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [0xff, 0xff000000, 0xff, 0xff000000], [0xffffffff, 0xff000000, 0xffffffff, 0xffffffff], 'veth1_virt_wifi\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x33, 0xe6, 0x0, 0x1}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x0, 0x1, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}, @common=@ipv6header={{0x28}, {0x0, 0x56, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00', {}, {}, 0x2, 0xfb, 0x5}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}, {0x3, 0xff}}, @common=@icmp6={{0x28}, {0x11, '`\f'}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) 05:00:03 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/160}) r1 = epoll_create1(0x0) (async) r2 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000001180)={0xc0002004}) (async) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x37f}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r3 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)={0x20000006}) [ 582.522492] x_tables: ip6_tables: mh match: only valid for protocol 135 05:00:03 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/160}) r1 = epoll_create1(0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000001180)={0xc0002004}) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x37f}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r3 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)={0x20000006}) 05:00:03 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r0, &(0x7f0000000500)=[{}], 0x1, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x8) 05:00:03 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) 05:00:03 executing program 1: r0 = epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000000)={0x50000000}) 05:00:03 executing program 4: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) socketpair(0x26, 0x800, 0x9, &(0x7f0000000000)) 05:00:03 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) 05:00:03 executing program 1: r0 = epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000000)={0x50000000}) 05:00:03 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r0, &(0x7f0000000500)=[{}], 0x1, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x8) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) (async) epoll_wait(r0, &(0x7f0000000500)=[{}], 0x1, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x8) (async) [ 582.649560] x_tables: ip6_tables: mh match: only valid for protocol 135 05:00:03 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [0xff, 0xff000000, 0xff, 0xff000000], [0xffffffff, 0xff000000, 0xffffffff, 0xffffffff], 'veth1_virt_wifi\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x33, 0xe6, 0x0, 0x1}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x0, 0x1, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}, @common=@ipv6header={{0x28}, {0x0, 0x56, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00', {}, {}, 0x0, 0xfb, 0x5}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}, {0x3, 0xff}}, @common=@icmp6={{0x28}, {0x11, '`\f'}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) 05:00:03 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/160}) r1 = epoll_create1(0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000001180)={0xc0002004}) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x37f}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r3 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)={0x20000006}) 05:00:03 executing program 4: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) socketpair(0x26, 0x800, 0x9, &(0x7f0000000000)) epoll_create1(0x0) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) (async) socketpair(0x26, 0x800, 0x9, &(0x7f0000000000)) (async) 05:00:03 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r0, &(0x7f0000000500)=[{}], 0x1, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x8) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) (async) epoll_wait(r0, &(0x7f0000000500)=[{}], 0x1, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x8) (async) 05:00:03 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [0xff, 0xff000000, 0xff, 0xff000000], [0xffffffff, 0xff000000, 0xffffffff, 0xffffffff], 'veth1_virt_wifi\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x33, 0xe6, 0x0, 0x1}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x0, 0x1, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}, @common=@ipv6header={{0x28}, {0x0, 0x56, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00', {}, {}, 0x0, 0x0, 0x5}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}, {0x3, 0xff}}, @common=@icmp6={{0x28}, {0x11, '`\f'}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) [ 582.761923] x_tables: ip6_tables: mh match: only valid for protocol 135 05:00:03 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x1, 0x7f, 0x3f, 0x5}, {0x39, 0x8, 0x2, 0x4}, {0x1, 0xfa, 0x9, 0x3}, {0x9, 0x8, 0x2, 0x80000000}, {0x8f, 0x20, 0x0, 0x3}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000100)={r2, 0x399b223082dcb712, r0, 0x81, 0x80000}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) 05:00:03 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) 05:00:03 executing program 1: r0 = epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000000)={0x50000000}) 05:00:03 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/160}) r1 = epoll_create1(0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000001180)={0xc0002004}) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x37f}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000140)={0x20000006}) [ 582.819922] x_tables: ip6_tables: mh match: only valid for protocol 135 05:00:03 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [0xff, 0xff000000, 0xff, 0xff000000], [0xffffffff, 0xff000000, 0xffffffff, 0xffffffff], 'veth1_virt_wifi\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x33, 0xe6, 0x0, 0x1}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x0, 0x1, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}, @common=@ipv6header={{0x28}, {0x0, 0x56, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}, {0x3, 0xff}}, @common=@icmp6={{0x28}, {0x11, '`\f'}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) 05:00:04 executing program 4: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) socketpair(0x26, 0x800, 0x9, &(0x7f0000000000)) 05:00:04 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x1, 0x7f, 0x3f, 0x5}, {0x39, 0x8, 0x2, 0x4}, {0x1, 0xfa, 0x9, 0x3}, {0x9, 0x8, 0x2, 0x80000000}, {0x8f, 0x20, 0x0, 0x3}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000100)={r2, 0x399b223082dcb712, r0, 0x81, 0x80000}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x1, 0x7f, 0x3f, 0x5}, {0x39, 0x8, 0x2, 0x4}, {0x1, 0xfa, 0x9, 0x3}, {0x9, 0x8, 0x2, 0x80000000}, {0x8f, 0x20, 0x0, 0x3}]}) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000100)={r2, 0x399b223082dcb712, r0, 0x81, 0x80000}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) (async) 05:00:04 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [0xff, 0xff000000, 0xff, 0xff000000], [0xffffffff, 0xff000000, 0xffffffff, 0xffffffff], 'veth1_virt_wifi\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x33, 0xe6, 0x0, 0x1}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x0, 0x1, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}, @common=@ipv6header={{0x28}, {0x0, 0x56, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [0xff000000, 0xff0000ff, 0x0, 0xff], [0xff000000, 0xff, 0xffffffff, 0xff000000], 'syz_tun\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}, 0x2, 0xfb, 0x5}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}, {0x3, 0xff}}, @common=@icmp6={{0x28}, {0x11, '`\f'}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) 05:00:04 executing program 1: r0 = epoll_create1(0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x50000000}) 05:00:04 executing program 4: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) r2 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r2, &(0x7f0000000080)=[{}, {}, {}, {}, {}], 0x5, 0x0) r3 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000040)={0x20000005}) 05:00:04 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/160}) r1 = epoll_create1(0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000001180)={0xc0002004}) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x37f}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000140)={0x20000006}) 05:00:04 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x400, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [0xff, 0xff000000, 0xff, 0xff000000], [0xffffffff, 0xff000000, 0xffffffff, 0xffffffff], 'veth1_virt_wifi\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x33, 0xe6, 0x0, 0x1}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x0, 0x1, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}, @common=@ipv6header={{0x28}, {0x0, 0x56, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@hl={{0x28}, {0x3, 0xff}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) 05:00:04 executing program 1: r0 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x50000000}) 05:00:04 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [0xff, 0xff000000, 0xff, 0xff000000], [0xffffffff, 0xff000000, 0xffffffff, 0xffffffff], 'veth1_virt_wifi\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x33, 0xe6, 0x0, 0x1}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x0, 0x1, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}, @common=@ipv6header={{0x28}, {0x0, 0x56, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [0xff000000, 0xff0000ff], [0xff000000, 0xff, 0xffffffff, 0xff000000], 'syz_tun\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}, 0x2, 0xfb, 0x5}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}, {0x3, 0xff}}, @common=@icmp6={{0x28}, {0x11, '`\f'}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) 05:00:04 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x1, 0x7f, 0x3f, 0x5}, {0x39, 0x8, 0x2, 0x4}, {0x1, 0xfa, 0x9, 0x3}, {0x9, 0x8, 0x2, 0x80000000}, {0x8f, 0x20, 0x0, 0x3}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000100)={r2, 0x399b223082dcb712, r0, 0x81, 0x80000}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x1, 0x7f, 0x3f, 0x5}, {0x39, 0x8, 0x2, 0x4}, {0x1, 0xfa, 0x9, 0x3}, {0x9, 0x8, 0x2, 0x80000000}, {0x8f, 0x20, 0x0, 0x3}]}) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000100)={r2, 0x399b223082dcb712, r0, 0x81, 0x80000}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) (async) [ 582.965475] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 582.986859] x_tables: ip6_tables: mh match: only valid for protocol 135 05:00:04 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/160}) r1 = epoll_create1(0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000001180)={0xc0002004}) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x37f}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000140)={0x20000006}) 05:00:04 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x400, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [0xff, 0xff000000, 0xff, 0xff000000], [0xffffffff, 0xff000000, 0xffffffff, 0xffffffff], 'veth1_virt_wifi\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x33, 0xe6, 0x0, 0x1}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x0, 0x1, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}, @common=@ipv6header={{0x28}, {0x0, 0x56, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@hl={{0x28}, {0x3, 0xff}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) 05:00:04 executing program 4: r0 = epoll_create1(0x0) (async) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) (async) r2 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r2, &(0x7f0000000080)=[{}, {}, {}, {}, {}], 0x5, 0x0) r3 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000040)={0x20000005}) 05:00:04 executing program 1: r0 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x50000000}) 05:00:04 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x29, 0x20, 0x9, 0x1, 0x40, @mcast2, @empty, 0x1, 0x8, 0x6, 0x401}}) 05:00:04 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [0xff, 0xff000000, 0xff, 0xff000000], [0xffffffff, 0xff000000, 0xffffffff, 0xffffffff], 'veth1_virt_wifi\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x33, 0xe6, 0x0, 0x1}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x0, 0x1, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}, @common=@ipv6header={{0x28}, {0x0, 0x56, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [0xff000000], [0xff000000, 0xff, 0xffffffff, 0xff000000], 'syz_tun\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}, 0x2, 0xfb, 0x5}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}, {0x3, 0xff}}, @common=@icmp6={{0x28}, {0x11, '`\f'}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) 05:00:04 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/160}) r1 = epoll_create1(0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000001180)={0xc0002004}) r3 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)={0x20000006}) [ 583.125888] x_tables: ip6_tables: mh match: only valid for protocol 135 05:00:04 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x400, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [0xff, 0xff000000, 0xff, 0xff000000], [0xffffffff, 0xff000000, 0xffffffff, 0xffffffff], 'veth1_virt_wifi\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x33, 0xe6, 0x0, 0x1}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x0, 0x1, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}, @common=@ipv6header={{0x28}, {0x0, 0x56, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@hl={{0x28}, {0x3, 0xff}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) 05:00:04 executing program 1: r0 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x50000000}) 05:00:04 executing program 4: r0 = epoll_create1(0x0) (async) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) r2 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r2, &(0x7f0000000080)=[{}, {}, {}, {}, {}], 0x5, 0x0) r3 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) (async) openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000040)={0x20000005}) 05:00:04 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x29, 0x20, 0x9, 0x1, 0x40, @mcast2, @empty, 0x1, 0x8, 0x6, 0x401}}) 05:00:04 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/160}) epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000140)={0x20000006}) 05:00:04 executing program 1: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x50000000}) 05:00:04 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [0xff, 0xff000000, 0xff, 0xff000000], [0xffffffff, 0xff000000, 0xffffffff, 0xffffffff], 'veth1_virt_wifi\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x33, 0xe6, 0x0, 0x1}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x0, 0x1, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}, @common=@ipv6header={{0x28}, {0x0, 0x56, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}, {0x3, 0xff}}, @common=@icmp6={{0x28}, {0x0, '`\f'}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) 05:00:04 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [0xff, 0xff000000, 0xff, 0xff000000], [0xffffffff, 0xff000000, 0xffffffff, 0xffffffff], 'veth1_virt_wifi\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x33, 0xe6, 0x0, 0x1}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x0, 0x1, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}, @common=@ipv6header={{0x28}, {0x0, 0x56, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [], [0xff000000, 0xff, 0xffffffff, 0xff000000], 'syz_tun\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}, 0x2, 0xfb, 0x5}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}, {0x3, 0xff}}, @common=@icmp6={{0x28}, {0x11, '`\f'}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) [ 583.246971] x_tables: ip6_tables: mh match: only valid for protocol 135 05:00:04 executing program 4: r0 = epoll_create1(0x0) epoll_wait(r0, &(0x7f0000000000)=[{}], 0x1, 0x6) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) 05:00:04 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x29, 0x20, 0x9, 0x1, 0x40, @mcast2, @empty, 0x1, 0x8, 0x6, 0x401}}) 05:00:04 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/160}) epoll_create1(0x0) r1 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000140)={0x20000006}) 05:00:04 executing program 4: r0 = epoll_create1(0x0) epoll_wait(r0, &(0x7f0000000000)=[{}], 0x1, 0x6) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) 05:00:04 executing program 1: r0 = epoll_create1(0x0) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000000)={0x50000000}) 05:00:04 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x400, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [0xff, 0xff000000, 0xff, 0xff000000], [0xffffffff, 0xff000000, 0xffffffff, 0xffffffff], 'veth1_virt_wifi\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x33, 0xe6, 0x0, 0x1}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x0, 0x1, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}, @common=@ipv6header={{0x28}, {0x0, 0x56, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28}, {0x0, '`\f'}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) [ 583.358271] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 583.359731] x_tables: ip6_tables: mh match: only valid for protocol 135 05:00:04 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [0xff, 0xff000000, 0xff, 0xff000000], [0xffffffff, 0xff000000, 0xffffffff, 0xffffffff], 'veth1_virt_wifi\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x33, 0xe6, 0x0, 0x1}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x0, 0x1, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}, @common=@ipv6header={{0x28}, {0x0, 0x56, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [], [0xff000000, 0xff, 0xffffffff], 'syz_tun\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}, 0x2, 0xfb, 0x5}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}, {0x3, 0xff}}, @common=@icmp6={{0x28}, {0x11, '`\f'}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) 05:00:04 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) ioctl$TIOCGICOUNT(r0, 0x545d, 0x0) 05:00:04 executing program 4: r0 = epoll_create1(0x0) epoll_wait(r0, &(0x7f0000000000)=[{}], 0x1, 0x6) (async) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) 05:00:04 executing program 1: r0 = epoll_create1(0x0) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000000)={0x50000000}) 05:00:04 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x400, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [0xff, 0xff000000, 0xff, 0xff000000], [0xffffffff, 0xff000000, 0xffffffff, 0xffffffff], 'veth1_virt_wifi\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x33, 0xe6, 0x0, 0x1}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x0, 0x1, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}, @common=@ipv6header={{0x28}, {0x0, 0x56, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28}, {0x0, '`\f'}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) 05:00:04 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/160}) epoll_create1(0x0) r1 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000140)={0x20000006}) 05:00:04 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) ioctl$TIOCGICOUNT(r0, 0x545d, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) (async) ioctl$TIOCGICOUNT(r0, 0x545d, 0x0) (async) 05:00:04 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [0xff, 0xff000000, 0xff, 0xff000000], [0xffffffff, 0xff000000, 0xffffffff, 0xffffffff], 'veth1_virt_wifi\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x33, 0xe6, 0x0, 0x1}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x0, 0x1, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}, @common=@ipv6header={{0x28}, {0x0, 0x56, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [], [0xff000000, 0xff], 'syz_tun\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}, 0x2, 0xfb, 0x5}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}, {0x3, 0xff}}, @common=@icmp6={{0x28}, {0x11, '`\f'}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) 05:00:04 executing program 4: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = socket$inet_sctp(0x2, 0x1, 0x84) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000001180)={0x80000018}) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r1, &(0x7f00000000c0)={0x20000003}) r4 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r4, &(0x7f0000000500)=[{}], 0x1, 0x0) ioctl$TIOCL_SELLOADLUT(r4, 0x541c, &(0x7f0000000080)={0x5, 0x81, 0x7fffffffffffffff, 0x414, 0x800}) getpeername$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000040)=0x1c) 05:00:04 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x400, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [0xff, 0xff000000, 0xff, 0xff000000], [0xffffffff, 0xff000000, 0xffffffff, 0xffffffff], 'veth1_virt_wifi\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x33, 0xe6, 0x0, 0x1}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x0, 0x1, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}, @common=@ipv6header={{0x28}, {0x0, 0x56, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28}, {0x0, '`\f'}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) 05:00:04 executing program 1: r0 = epoll_create1(0x0) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000000)={0x50000000}) [ 583.531267] x_tables: ip6_tables: mh match: only valid for protocol 135 05:00:04 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/160}) epoll_create1(0x0) r1 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000140)={0x20000006}) 05:00:04 executing program 1: epoll_create1(0x0) r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x50000000}) 05:00:04 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [0xff, 0xff000000, 0xff, 0xff000000], [0xffffffff, 0xff000000, 0xffffffff, 0xffffffff], 'veth1_virt_wifi\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x33, 0xe6, 0x0, 0x1}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x0, 0x1, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}, @common=@ipv6header={{0x28}, {0x0, 0x56, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}, {0x0, 0xff}}, @common=@icmp6={{0x28}, {0x0, '`\f'}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) 05:00:04 executing program 4: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = socket$inet_sctp(0x2, 0x1, 0x84) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000001180)={0x80000018}) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r1, &(0x7f00000000c0)={0x20000003}) r4 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r4, &(0x7f0000000500)=[{}], 0x1, 0x0) ioctl$TIOCL_SELLOADLUT(r4, 0x541c, &(0x7f0000000080)={0x5, 0x81, 0x7fffffffffffffff, 0x414, 0x800}) getpeername$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000040)=0x1c) epoll_create1(0x0) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000001180)={0x80000018}) (async) epoll_create1(0x0) (async) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r1, &(0x7f00000000c0)={0x20000003}) (async) syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) (async) epoll_wait(r4, &(0x7f0000000500)=[{}], 0x1, 0x0) (async) ioctl$TIOCL_SELLOADLUT(r4, 0x541c, &(0x7f0000000080)={0x5, 0x81, 0x7fffffffffffffff, 0x414, 0x800}) (async) getpeername$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000040)=0x1c) (async) 05:00:04 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) ioctl$TIOCGICOUNT(r0, 0x545d, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) (async) ioctl$TIOCGICOUNT(r0, 0x545d, 0x0) (async) 05:00:04 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/160}) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000140)={0x20000006}) 05:00:04 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [0xff, 0xff000000, 0xff, 0xff000000], [0xffffffff, 0xff000000, 0xffffffff, 0xffffffff], 'veth1_virt_wifi\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x33, 0xe6, 0x0, 0x1}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x0, 0x1, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}, @common=@ipv6header={{0x28}, {0x0, 0x56, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [], [0xff000000], 'syz_tun\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}, 0x2, 0xfb, 0x5}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}, {0x3, 0xff}}, @common=@icmp6={{0x28}, {0x11, '`\f'}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) [ 583.649974] x_tables: ip6_tables: mh match: only valid for protocol 135 05:00:04 executing program 1: epoll_create1(0x0) r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x50000000}) 05:00:04 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [0xff, 0xff000000, 0xff, 0xff000000], [0xffffffff, 0xff000000, 0xffffffff, 0xffffffff], 'veth1_virt_wifi\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x33, 0xe6, 0x0, 0x1}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x0, 0x1, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}, @common=@ipv6header={{0x28}, {0x0, 0x56, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}}, @common=@icmp6={{0x28}, {0x0, '`\f'}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) 05:00:04 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r1, &(0x7f0000000500)=[{}], 0x1, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000000)={0x1, 0x3, 0x0, 0x0, 0x14, "391907c6b91691c7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) 05:00:04 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)={0x20000006}) [ 583.743419] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 583.760847] x_tables: ip6_tables: mh match: only valid for protocol 135 05:00:04 executing program 4: r0 = epoll_create1(0x0) (async) r1 = socket$l2tp6(0xa, 0x2, 0x73) (async) r2 = socket$inet_sctp(0x2, 0x1, 0x84) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000001180)={0x80000018}) (async) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r1, &(0x7f00000000c0)={0x20000003}) (async) r4 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r4, &(0x7f0000000500)=[{}], 0x1, 0x0) (async) ioctl$TIOCL_SELLOADLUT(r4, 0x541c, &(0x7f0000000080)={0x5, 0x81, 0x7fffffffffffffff, 0x414, 0x800}) (async, rerun: 32) getpeername$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000040)=0x1c) (rerun: 32) 05:00:04 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [0xff, 0xff000000, 0xff, 0xff000000], [0xffffffff, 0xff000000, 0xffffffff, 0xffffffff], 'veth1_virt_wifi\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x33, 0xe6, 0x0, 0x1}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x0, 0x1, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}, @common=@ipv6header={{0x28}, {0x0, 0x56, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}, 0x2, 0xfb, 0x5}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}, {0x3, 0xff}}, @common=@icmp6={{0x28}, {0x11, '`\f'}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) 05:00:04 executing program 1: epoll_create1(0x0) r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x50000000}) 05:00:05 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)={0x20000006}) 05:00:05 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [0xff, 0xff000000, 0xff, 0xff000000], [0xffffffff, 0xff000000, 0xffffffff, 0xffffffff], 'veth1_virt_wifi\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x33, 0xe6, 0x0, 0x1}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x0, 0x1, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}, @common=@ipv6header={{0x28}, {0x0, 0x56, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}}, @common=@icmp6={{0x28}, {0x0, '`\f'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) 05:00:05 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r1, &(0x7f0000000500)=[{}], 0x1, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000000)={0x1, 0x3, 0x0, 0x0, 0x14, "391907c6b91691c7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) (async) epoll_wait(r1, &(0x7f0000000500)=[{}], 0x1, 0x0) (async) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000000)={0x1, 0x3, 0x0, 0x0, 0x14, "391907c6b91691c7"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) (async) 05:00:05 executing program 4: r0 = epoll_create1(0x0) epoll_wait(r0, &(0x7f0000000000)=[{}], 0x1, 0x2) socket$l2tp6(0xa, 0x2, 0x73) [ 583.856641] x_tables: ip6_tables: mh match: only valid for protocol 135 05:00:05 executing program 1: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0) 05:00:05 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [0xff, 0xff000000, 0xff, 0xff000000], [0xffffffff, 0xff000000, 0xffffffff, 0xffffffff], 'veth1_virt_wifi\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x33, 0xe6, 0x0, 0x1}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x0, 0x1, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}, @common=@ipv6header={{0x28}, {0x0, 0x56, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00', {}, {0xff}, 0x2, 0xfb, 0x5}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}, {0x3, 0xff}}, @common=@icmp6={{0x28}, {0x11, '`\f'}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) [ 583.914990] x_tables: ip6_tables: mh match: only valid for protocol 135 05:00:05 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = epoll_create(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)={0x20000006}) 05:00:05 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r1, &(0x7f0000000500)=[{}], 0x1, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000000)={0x1, 0x3, 0x0, 0x0, 0x14, "391907c6b91691c7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) (async) epoll_wait(r1, &(0x7f0000000500)=[{}], 0x1, 0x0) (async) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000000)={0x1, 0x3, 0x0, 0x0, 0x14, "391907c6b91691c7"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) (async) 05:00:05 executing program 4: r0 = epoll_create1(0x0) epoll_wait(r0, &(0x7f0000000000)=[{}], 0x1, 0x2) socket$l2tp6(0xa, 0x2, 0x73) epoll_create1(0x0) (async) epoll_wait(r0, &(0x7f0000000000)=[{}], 0x1, 0x2) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) 05:00:05 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [0xff, 0xff000000, 0xff], [0xffffffff, 0xff000000, 0xffffffff, 0xffffffff], 'veth1_virt_wifi\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x33, 0xe6, 0x0, 0x1}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x0, 0x1, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}, @common=@ipv6header={{0x28}, {0x0, 0x56, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}}, @common=@icmp6={{0x28}, {0x0, '`\f'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) 05:00:05 executing program 1: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0) [ 583.981636] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 584.015126] x_tables: ip6_tables: mh match: only valid for protocol 135 05:00:05 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [0xff, 0xff000000, 0xff, 0xff000000], [0xffffffff, 0xff000000, 0xffffffff, 0xffffffff], 'veth1_virt_wifi\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x33, 0xe6, 0x0, 0x1}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x0, 0x1, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}, @common=@ipv6header={{0x28}, {0x0, 0x56, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00', {}, {}, 0x2, 0xfb, 0x5}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}, {0x3, 0xff}}, @common=@icmp6={{0x28}, {0x11, '`\f'}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) 05:00:05 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000080), &(0x7f00000000c0)) epoll_wait(r1, &(0x7f0000000500)=[{}], 0x1, 0x0) r2 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x80) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000040)={0x6, 0x8, 0x3, 0x3, 0x3, "9e8e34fafdec77fe"}) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x9, 0x9, 0x3, 0x5, 0x11, "3f81a0809aa08d56dcc3797c36a3908ff03e4e"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) 05:00:05 executing program 4: r0 = epoll_create1(0x0) epoll_wait(r0, &(0x7f0000000000)=[{}], 0x1, 0x2) socket$l2tp6(0xa, 0x2, 0x73) epoll_create1(0x0) (async) epoll_wait(r0, &(0x7f0000000000)=[{}], 0x1, 0x2) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) 05:00:05 executing program 1: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0) 05:00:05 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = epoll_create(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)={0x20000006}) 05:00:05 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [0xff, 0xff000000], [0xffffffff, 0xff000000, 0xffffffff, 0xffffffff], 'veth1_virt_wifi\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x33, 0xe6, 0x0, 0x1}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x0, 0x1, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}, @common=@ipv6header={{0x28}, {0x0, 0x56, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}}, @common=@icmp6={{0x28}, {0x0, '`\f'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) [ 584.097319] x_tables: ip6_tables: mh match: only valid for protocol 135 05:00:05 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000080), &(0x7f00000000c0)) (async) epoll_wait(r1, &(0x7f0000000500)=[{}], 0x1, 0x0) (async) r2 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x80) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000040)={0x6, 0x8, 0x3, 0x3, 0x3, "9e8e34fafdec77fe"}) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x9, 0x9, 0x3, 0x5, 0x11, "3f81a0809aa08d56dcc3797c36a3908ff03e4e"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) 05:00:05 executing program 1: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) 05:00:05 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = epoll_create(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)={0x20000006}) [ 584.169034] x_tables: ip6_tables: mh match: only valid for protocol 135 05:00:05 executing program 4: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_wait(r0, &(0x7f0000000000), 0x3c, 0x100) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_GET_FPU(r2, 0x81a0ae8c, &(0x7f00000001c0)) r3 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r3, &(0x7f0000000500)=[{}], 0x1, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) 05:00:05 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [0xff, 0xff000000, 0xff, 0xff000000], [0xffffffff, 0xff000000, 0xffffffff, 0xffffffff], 'veth1_virt_wifi\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x33, 0xe6, 0x0, 0x1}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x0, 0x1, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}, @common=@ipv6header={{0x28}, {0x0, 0x56, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00', {}, {}, 0x0, 0xfb, 0x5}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}, {0x3, 0xff}}, @common=@icmp6={{0x28}, {0x11, '`\f'}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) 05:00:05 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [0xff], [0xffffffff, 0xff000000, 0xffffffff, 0xffffffff], 'veth1_virt_wifi\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x33, 0xe6, 0x0, 0x1}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x0, 0x1, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}, @common=@ipv6header={{0x28}, {0x0, 0x56, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}}, @common=@icmp6={{0x28}, {0x0, '`\f'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) [ 584.211206] x_tables: ip6_tables: mh match: only valid for protocol 135 05:00:05 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000140)={0x20000006}) 05:00:05 executing program 1: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) 05:00:05 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000080), &(0x7f00000000c0)) (async) epoll_wait(r1, &(0x7f0000000500)=[{}], 0x1, 0x0) (async) r2 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x80) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000040)={0x6, 0x8, 0x3, 0x3, 0x3, "9e8e34fafdec77fe"}) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x9, 0x9, 0x3, 0x5, 0x11, "3f81a0809aa08d56dcc3797c36a3908ff03e4e"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) 05:00:05 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [0xff, 0xff000000, 0xff, 0xff000000], [0xffffffff, 0xff000000, 0xffffffff, 0xffffffff], 'veth1_virt_wifi\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x33, 0xe6, 0x0, 0x1}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x0, 0x1, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}, @common=@ipv6header={{0x28}, {0x0, 0x56, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00', {}, {}, 0x0, 0x0, 0x5}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}, {0x3, 0xff}}, @common=@icmp6={{0x28}, {0x11, '`\f'}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) 05:00:05 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [], [0xffffffff, 0xff000000, 0xffffffff, 0xffffffff], 'veth1_virt_wifi\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x33, 0xe6, 0x0, 0x1}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x0, 0x1, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}, @common=@ipv6header={{0x28}, {0x0, 0x56, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}}, @common=@icmp6={{0x28}, {0x0, '`\f'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) 05:00:05 executing program 1: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) [ 584.298035] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 584.321932] x_tables: ip6_tables: mh match: only valid for protocol 135 05:00:05 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000140)={0x20000006}) 05:00:05 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_dev$ptys(0xc, 0x3, 0x1) syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) 05:00:05 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [0xff, 0xff000000, 0xff, 0xff000000], [0xffffffff, 0xff000000, 0xffffffff, 0xffffffff], 'veth1_virt_wifi\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x33, 0xe6, 0x0, 0x1}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x0, 0x1, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}, @common=@ipv6header={{0x28}, {0x0, 0x56, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}, {0x3, 0xff}}, @common=@icmp6={{0x28}, {0x11, '`\f'}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) [ 584.385376] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 584.414322] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 584.452536] x_tables: ip6_tables: mh match: only valid for protocol 135 05:00:05 executing program 4: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_wait(r0, &(0x7f0000000000), 0x3c, 0x100) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) (async) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_GET_FPU(r2, 0x81a0ae8c, &(0x7f00000001c0)) (async) r3 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r3, &(0x7f0000000500)=[{}], 0x1, 0x0) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) 05:00:05 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [], [0xffffffff, 0xff000000, 0xffffffff], 'veth1_virt_wifi\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x33, 0xe6, 0x0, 0x1}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x0, 0x1, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}, @common=@ipv6header={{0x28}, {0x0, 0x56, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}}, @common=@icmp6={{0x28}, {0x0, '`\f'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) 05:00:05 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x400, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [0xff, 0xff000000, 0xff, 0xff000000], [0xffffffff, 0xff000000, 0xffffffff, 0xffffffff], 'veth1_virt_wifi\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x33, 0xe6, 0x0, 0x1}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x0, 0x1, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}, @common=@ipv6header={{0x28}, {0x0, 0x56, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@hl={{0x28}, {0x3, 0xff}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) 05:00:05 executing program 1: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) 05:00:05 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000140)={0x20000006}) 05:00:05 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) (async) syz_open_dev$ptys(0xc, 0x3, 0x1) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) 05:00:05 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x400, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [0xff, 0xff000000, 0xff, 0xff000000], [0xffffffff, 0xff000000, 0xffffffff, 0xffffffff], 'veth1_virt_wifi\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x33, 0xe6, 0x0, 0x1}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x0, 0x1, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}, @common=@ipv6header={{0x28}, {0x0, 0x56, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@hl={{0x28}, {0x3, 0xff}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) 05:00:05 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_dev$ptys(0xc, 0x3, 0x1) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) 05:00:05 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [], [0xffffffff, 0xff000000], 'veth1_virt_wifi\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x33, 0xe6, 0x0, 0x1}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x0, 0x1, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}, @common=@ipv6header={{0x28}, {0x0, 0x56, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}}, @common=@icmp6={{0x28}, {0x0, '`\f'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) [ 584.613397] x_tables: ip6_tables: mh match: only valid for protocol 135 05:00:05 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x400, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [0xff, 0xff000000, 0xff, 0xff000000], [0xffffffff, 0xff000000, 0xffffffff, 0xffffffff], 'veth1_virt_wifi\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x33, 0xe6, 0x0, 0x1}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x0, 0x1, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}, @common=@ipv6header={{0x28}, {0x0, 0x56, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@hl={{0x28}, {0x3, 0xff}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) 05:00:05 executing program 5: socket$l2tp6(0xa, 0x2, 0x73) r0 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000140)={0x20000006}) 05:00:05 executing program 1: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) [ 584.679813] x_tables: ip6_tables: mh match: only valid for protocol 135 05:00:06 executing program 4: r0 = epoll_create1(0x0) (async) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_wait(r0, &(0x7f0000000000), 0x3c, 0x100) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) (async) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_GET_FPU(r2, 0x81a0ae8c, &(0x7f00000001c0)) r3 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r3, &(0x7f0000000500)=[{}], 0x1, 0x0) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) 05:00:06 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x2, 0xfe00}]}) 05:00:06 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [], [0xffffffff], 'veth1_virt_wifi\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x33, 0xe6, 0x0, 0x1}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x0, 0x1, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}, @common=@ipv6header={{0x28}, {0x0, 0x56, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}}, @common=@icmp6={{0x28}, {0x0, '`\f'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) 05:00:06 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [0xff, 0xff000000, 0xff, 0xff000000], [0xffffffff, 0xff000000, 0xffffffff, 0xffffffff], 'veth1_virt_wifi\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x33, 0xe6, 0x0, 0x1}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x0, 0x1, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}, @common=@ipv6header={{0x28}, {0x0, 0x56, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}, {0x3, 0xff}}, @common=@icmp6={{0x28}, {0x0, '`\f'}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) 05:00:06 executing program 5: socket$l2tp6(0xa, 0x2, 0x73) r0 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000140)={0x20000006}) 05:00:06 executing program 1: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) 05:00:06 executing program 1: r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000000)) 05:00:06 executing program 4: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000000)={0x9c, {{0xa, 0x4e20, 0x101, @loopback, 0xfff}}}, 0x88) 05:00:06 executing program 5: socket$l2tp6(0xa, 0x2, 0x73) r0 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000140)={0x20000006}) 05:00:06 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) (async) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x2, 0xfe00}]}) 05:00:06 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [], [], 'veth1_virt_wifi\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x33, 0xe6, 0x0, 0x1}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x0, 0x1, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}, @common=@ipv6header={{0x28}, {0x0, 0x56, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}}, @common=@icmp6={{0x28}, {0x0, '`\f'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) [ 584.968805] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 584.986933] x_tables: ip6_tables: mh match: only valid for protocol 135 05:00:06 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x400, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [0xff, 0xff000000, 0xff, 0xff000000], [0xffffffff, 0xff000000, 0xffffffff, 0xffffffff], 'veth1_virt_wifi\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x33, 0xe6, 0x0, 0x1}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x0, 0x1, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}, @common=@ipv6header={{0x28}, {0x0, 0x56, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28}, {0x0, '`\f'}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) 05:00:06 executing program 1: r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000000)) 05:00:06 executing program 4: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000000)={0x9c, {{0xa, 0x4e20, 0x101, @loopback, 0xfff}}}, 0x88) epoll_create1(0x0) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) (async) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000000)={0x9c, {{0xa, 0x4e20, 0x101, @loopback, 0xfff}}}, 0x88) (async) 05:00:06 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x2, 0xfe00}]}) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) (async) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) (async) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x2, 0xfe00}]}) (async) 05:00:06 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0) 05:00:06 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x400, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [0xff, 0xff000000, 0xff, 0xff000000], [0xffffffff, 0xff000000, 0xffffffff, 0xffffffff], 'veth1_virt_wifi\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x33, 0xe6, 0x0, 0x1}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x0, 0x1, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}, @common=@ipv6header={{0x28}, {0x0, 0x56, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28}, {0x0, '`\f'}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) 05:00:06 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [], [], 'veth1_virt_wifi\x00', 'veth1_to_team\x00', {}, {0xff}, 0x33, 0xe6, 0x0, 0x1}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x0, 0x1, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}, @common=@ipv6header={{0x28}, {0x0, 0x56, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}}, @common=@icmp6={{0x28}, {0x0, '`\f'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) [ 585.081890] x_tables: ip6_tables: mh match: only valid for protocol 135 05:00:06 executing program 1: r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000000)) 05:00:06 executing program 4: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000000)={0x9c, {{0xa, 0x4e20, 0x101, @loopback, 0xfff}}}, 0x88) epoll_create1(0x0) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) (async) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000000)={0x9c, {{0xa, 0x4e20, 0x101, @loopback, 0xfff}}}, 0x88) (async) 05:00:06 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0) 05:00:06 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x400, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [0xff, 0xff000000, 0xff, 0xff000000], [0xffffffff, 0xff000000, 0xffffffff, 0xffffffff], 'veth1_virt_wifi\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x33, 0xe6, 0x0, 0x1}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x0, 0x1, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}, @common=@ipv6header={{0x28}, {0x0, 0x56, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28}, {0x0, '`\f'}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) 05:00:06 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x20100, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) 05:00:06 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [], [], 'veth1_virt_wifi\x00', 'veth1_to_team\x00', {}, {}, 0x33, 0xe6, 0x0, 0x1}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x0, 0x1, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}, @common=@ipv6header={{0x28}, {0x0, 0x56, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}}, @common=@icmp6={{0x28}, {0x0, '`\f'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) [ 585.182250] x_tables: ip6_tables: mh match: only valid for protocol 135 05:00:06 executing program 1: r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) 05:00:06 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0) 05:00:06 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) r1 = socket$l2tp6(0xa, 0x2, 0x73) getpeername$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000000c0)=0x1c) r2 = epoll_create1(0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) r4 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r4, &(0x7f0000000500)=[{}], 0x1, 0x0) epoll_wait(r4, &(0x7f0000000140)=[{}, {}, {}, {}], 0x4, 0x1) r5 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000000000)={0x9, {{0xa, 0x4e21, 0x1000, @mcast1, 0x84b}}}, 0x88) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000001180)) 05:00:06 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x20100, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) (async) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x20100, 0x0) (async) ioctl$VT_DISALLOCATE(r1, 0x5608) (async) 05:00:06 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [0xff, 0xff000000, 0xff, 0xff000000], [0xffffffff, 0xff000000, 0xffffffff, 0xffffffff], 'veth1_virt_wifi\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x33, 0xe6, 0x0, 0x1}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x0, 0x1, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}, @common=@ipv6header={{0x28}, {0x0, 0x56, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}, {0x0, 0xff}}, @common=@icmp6={{0x28}, {0x0, '`\f'}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) 05:00:06 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) 05:00:06 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [], [], 'veth1_virt_wifi\x00', 'veth1_to_team\x00', {}, {}, 0x0, 0xe6, 0x0, 0x1}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x0, 0x1, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}, @common=@ipv6header={{0x28}, {0x0, 0x56, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}}, @common=@icmp6={{0x28}, {0x0, '`\f'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) [ 585.291296] x_tables: ip6_tables: mh match: only valid for protocol 135 05:00:06 executing program 1: r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) 05:00:06 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [0xff, 0xff000000, 0xff, 0xff000000], [0xffffffff, 0xff000000, 0xffffffff, 0xffffffff], 'veth1_virt_wifi\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x33, 0xe6, 0x0, 0x1}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x0, 0x1, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}, @common=@ipv6header={{0x28}, {0x0, 0x56, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}}, @common=@icmp6={{0x28}, {0x0, '`\f'}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) 05:00:06 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) 05:00:06 executing program 1: r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) [ 585.342318] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 585.378606] x_tables: ip6_tables: mh match: only valid for protocol 135 05:00:06 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) r1 = socket$l2tp6(0xa, 0x2, 0x73) getpeername$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000000c0)=0x1c) (async) r2 = epoll_create1(0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) r4 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r4, &(0x7f0000000500)=[{}], 0x1, 0x0) (async) epoll_wait(r4, &(0x7f0000000140)=[{}, {}, {}, {}], 0x4, 0x1) (async) r5 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000000000)={0x9, {{0xa, 0x4e21, 0x1000, @mcast1, 0x84b}}}, 0x88) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000001180)) 05:00:06 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x20100, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) (async) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x20100, 0x0) (async) ioctl$VT_DISALLOCATE(r1, 0x5608) (async) 05:00:06 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [], [], 'veth1_virt_wifi\x00', 'veth1_to_team\x00', {}, {}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x0, 0x1, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}, @common=@ipv6header={{0x28}, {0x0, 0x56, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}}, @common=@icmp6={{0x28}, {0x0, '`\f'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) 05:00:06 executing program 1: r0 = epoll_create1(0x0) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000000)) 05:00:06 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) 05:00:06 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [0xff, 0xff000000, 0xff, 0xff000000], [0xffffffff, 0xff000000, 0xffffffff, 0xffffffff], 'veth1_virt_wifi\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x33, 0xe6, 0x0, 0x1}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x0, 0x1, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}, @common=@ipv6header={{0x28}, {0x0, 0x56, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}}, @common=@icmp6={{0x28}, {0x0, '`\f'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) [ 585.449521] x_tables: ip6_tables: mh match: only valid for protocol 135 05:00:06 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) ioctl$TIOCSIG(r0, 0x40045436, 0x25) 05:00:06 executing program 1: r0 = epoll_create1(0x0) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000000)) [ 585.514290] x_tables: ip6_tables: mh match: only valid for protocol 135 05:00:06 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) r1 = socket$l2tp6(0xa, 0x2, 0x73) getpeername$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000000c0)=0x1c) r2 = epoll_create1(0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) r4 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r4, &(0x7f0000000500)=[{}], 0x1, 0x0) epoll_wait(r4, &(0x7f0000000140)=[{}, {}, {}, {}], 0x4, 0x1) r5 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000000000)={0x9, {{0xa, 0x4e21, 0x1000, @mcast1, 0x84b}}}, 0x88) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000001180)) socket$l2tp6(0xa, 0x2, 0x73) (async) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) getpeername$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000000c0)=0x1c) (async) epoll_create1(0x0) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) (async) epoll_wait(r4, &(0x7f0000000500)=[{}], 0x1, 0x0) (async) epoll_wait(r4, &(0x7f0000000140)=[{}, {}, {}, {}], 0x4, 0x1) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) setsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) (async) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000000000)={0x9, {{0xa, 0x4e21, 0x1000, @mcast1, 0x84b}}}, 0x88) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000001180)) (async) 05:00:06 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [], [], 'veth1_virt_wifi\x00', 'veth1_to_team\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x0, 0x1, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}, @common=@ipv6header={{0x28}, {0x0, 0x56, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}}, @common=@icmp6={{0x28}, {0x0, '`\f'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) 05:00:06 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) r1 = socket$l2tp6(0xa, 0x2, 0x73) getpeername$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000000c0)=0x1c) r2 = epoll_create1(0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) r4 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r4, &(0x7f0000000500)=[{}], 0x1, 0x0) epoll_wait(r4, &(0x7f0000000140)=[{}, {}, {}, {}], 0x4, 0x1) r5 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000000000)={0x9, {{0xa, 0x4e21, 0x1000, @mcast1, 0x84b}}}, 0x88) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000001180)) 05:00:06 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [0xff, 0xff000000, 0xff], [0xffffffff, 0xff000000, 0xffffffff, 0xffffffff], 'veth1_virt_wifi\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x33, 0xe6, 0x0, 0x1}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x0, 0x1, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}, @common=@ipv6header={{0x28}, {0x0, 0x56, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}}, @common=@icmp6={{0x28}, {0x0, '`\f'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) [ 585.558019] x_tables: ip6_tables: mh match: only valid for protocol 135 05:00:06 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) ioctl$TIOCSIG(r0, 0x40045436, 0x25) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) (async) ioctl$TIOCSIG(r0, 0x40045436, 0x25) (async) 05:00:06 executing program 1: r0 = epoll_create1(0x0) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000000)) 05:00:06 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) r1 = socket$l2tp6(0xa, 0x2, 0x73) getpeername$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000000c0)=0x1c) r2 = epoll_create1(0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) r4 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r4, &(0x7f0000000500)=[{}], 0x1, 0x0) epoll_wait(r4, &(0x7f0000000140)=[{}, {}, {}, {}], 0x4, 0x1) r5 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000000000)={0x9, {{0xa, 0x4e21, 0x1000, @mcast1, 0x84b}}}, 0x88) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000001180)) [ 585.628848] x_tables: ip6_tables: mh match: only valid for protocol 135 05:00:06 executing program 4: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = socket$inet6(0xa, 0x80004, 0x55f) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0x1, 0x58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in6=@empty, 0x4e21, 0x0, 0x4e22, 0x800, 0x0, 0x0, 0xc0, 0x89, r3, 0xffffffffffffffff}, {0x0, 0x0, 0x6, 0x8, 0x9, 0x4, 0x6}, {0xec, 0x0, 0x5, 0x8}, 0x0, 0x6e6bbc}, {{@in=@empty, 0x0, 0x32}, 0x2, @in=@empty, 0x0, 0x2, 0x2, 0x73, 0x0, 0x401}}, 0xe8) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000000)={@private1, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @mcast1, 0x7fffffff, 0x9, 0x9, 0x0, 0x800, 0x200024, r3}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) 05:00:06 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x400, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [], [], 'veth1_virt_wifi\x00', 'veth1_to_team\x00'}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x0, 0x1, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}}, @common=@icmp6={{0x28}, {0x0, '`\f'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) 05:00:06 executing program 1: epoll_create1(0x0) r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) 05:00:06 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) ioctl$TIOCSIG(r0, 0x40045436, 0x25) [ 585.675856] x_tables: ip6_tables: mh match: only valid for protocol 135 05:00:06 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x400, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [], [], 'veth1_virt_wifi\x00', 'veth1_to_team\x00'}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x0, 0x1, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}}, @common=@icmp6={{0x28}, {0x0, '`\f'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) 05:00:06 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [0xff, 0xff000000], [0xffffffff, 0xff000000, 0xffffffff, 0xffffffff], 'veth1_virt_wifi\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x33, 0xe6, 0x0, 0x1}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x0, 0x1, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}, @common=@ipv6header={{0x28}, {0x0, 0x56, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}}, @common=@icmp6={{0x28}, {0x0, '`\f'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) 05:00:06 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) r1 = socket$l2tp6(0xa, 0x2, 0x73) getpeername$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000000c0)=0x1c) r2 = epoll_create1(0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) r4 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r4, &(0x7f0000000500)=[{}], 0x1, 0x0) epoll_wait(r4, &(0x7f0000000140)=[{}, {}, {}, {}], 0x4, 0x1) r5 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000000000)={0x9, {{0xa, 0x4e21, 0x1000, @mcast1, 0x84b}}}, 0x88) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000001180)) 05:00:06 executing program 4: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = socket$inet6(0xa, 0x80004, 0x55f) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0x1, 0x58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in6=@empty, 0x4e21, 0x0, 0x4e22, 0x800, 0x0, 0x0, 0xc0, 0x89, r3, 0xffffffffffffffff}, {0x0, 0x0, 0x6, 0x8, 0x9, 0x4, 0x6}, {0xec, 0x0, 0x5, 0x8}, 0x0, 0x6e6bbc}, {{@in=@empty, 0x0, 0x32}, 0x2, @in=@empty, 0x0, 0x2, 0x2, 0x73, 0x0, 0x401}}, 0xe8) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000000)={@private1, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @mcast1, 0x7fffffff, 0x9, 0x9, 0x0, 0x800, 0x200024, r3}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) epoll_create1(0x0) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) socket$inet6(0xa, 0x80004, 0x55f) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0x1, 0x58, &(0x7f0000000080)}, 0x10) (async) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in6=@empty, 0x4e21, 0x0, 0x4e22, 0x800, 0x0, 0x0, 0xc0, 0x89, r3, 0xffffffffffffffff}, {0x0, 0x0, 0x6, 0x8, 0x9, 0x4, 0x6}, {0xec, 0x0, 0x5, 0x8}, 0x0, 0x6e6bbc}, {{@in=@empty, 0x0, 0x32}, 0x2, @in=@empty, 0x0, 0x2, 0x2, 0x73, 0x0, 0x401}}, 0xe8) (async) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000000)={@private1, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @mcast1, 0x7fffffff, 0x9, 0x9, 0x0, 0x800, 0x200024, r3}) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) (async) 05:00:06 executing program 1: epoll_create1(0x0) r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) 05:00:06 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x400, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [], [], 'veth1_virt_wifi\x00', 'veth1_to_team\x00'}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x0, 0x1, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}}, @common=@icmp6={{0x28}, {0x0, '`\f'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) 05:00:06 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) r1 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r1, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}], 0x6, 0x0) syz_open_pts(r1, 0x20040) r2 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r2, &(0x7f0000000500)=[{}], 0x1, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r3, 0x5600, &(0x7f0000000000)) ioctl$VT_DISALLOCATE(r2, 0x5608) 05:00:06 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) r1 = socket$l2tp6(0xa, 0x2, 0x73) getpeername$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000000c0)=0x1c) epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) r2 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r2, &(0x7f0000000500)=[{}], 0x1, 0x0) epoll_wait(r2, &(0x7f0000000140)=[{}, {}, {}, {}], 0x4, 0x1) r3 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000000)={0x9, {{0xa, 0x4e21, 0x1000, @mcast1, 0x84b}}}, 0x88) [ 585.818768] x_tables: ip6_tables: mh match: only valid for protocol 135 05:00:07 executing program 4: r0 = epoll_create1(0x0) (async) r1 = socket$l2tp6(0xa, 0x2, 0x73) (async) r2 = socket$inet6(0xa, 0x80004, 0x55f) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0x1, 0x58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in6=@empty, 0x4e21, 0x0, 0x4e22, 0x800, 0x0, 0x0, 0xc0, 0x89, r3, 0xffffffffffffffff}, {0x0, 0x0, 0x6, 0x8, 0x9, 0x4, 0x6}, {0xec, 0x0, 0x5, 0x8}, 0x0, 0x6e6bbc}, {{@in=@empty, 0x0, 0x32}, 0x2, @in=@empty, 0x0, 0x2, 0x2, 0x73, 0x0, 0x401}}, 0xe8) (async) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000000)={@private1, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @mcast1, 0x7fffffff, 0x9, 0x9, 0x0, 0x800, 0x200024, r3}) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) 05:00:07 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [0xff], [0xffffffff, 0xff000000, 0xffffffff, 0xffffffff], 'veth1_virt_wifi\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x33, 0xe6, 0x0, 0x1}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x0, 0x1, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}, @common=@ipv6header={{0x28}, {0x0, 0x56, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}}, @common=@icmp6={{0x28}, {0x0, '`\f'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) 05:00:07 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [], [], 'veth1_virt_wifi\x00', 'veth1_to_team\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x0, 0x1, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}, @common=@ipv6header={{0x28}, {0x0, 0x0, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}}, @common=@icmp6={{0x28}, {0x0, '`\f'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) 05:00:07 executing program 1: epoll_create1(0x0) r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) 05:00:07 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) r1 = socket$l2tp6(0xa, 0x2, 0x73) getpeername$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000000c0)=0x1c) epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) r2 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r2, &(0x7f0000000500)=[{}], 0x1, 0x0) epoll_wait(r2, &(0x7f0000000140)=[{}, {}, {}, {}], 0x4, 0x1) r3 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000000)={0x9, {{0xa, 0x4e21, 0x1000, @mcast1, 0x84b}}}, 0x88) 05:00:07 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) (async) r1 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r1, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}], 0x6, 0x0) (async) syz_open_pts(r1, 0x20040) (async) r2 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r2, &(0x7f0000000500)=[{}], 0x1, 0x0) (async) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r3, 0x5600, &(0x7f0000000000)) (async) ioctl$VT_DISALLOCATE(r2, 0x5608) 05:00:07 executing program 4: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) r2 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r2, &(0x7f0000000500)=[{}], 0x1, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r2, 0x40043311, &(0x7f0000000000)) 05:00:07 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) r1 = socket$l2tp6(0xa, 0x2, 0x73) getpeername$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000000c0)=0x1c) epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) r2 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r2, &(0x7f0000000500)=[{}], 0x1, 0x0) epoll_wait(r2, &(0x7f0000000140)=[{}, {}, {}, {}], 0x4, 0x1) r3 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000000)={0x9, {{0xa, 0x4e21, 0x1000, @mcast1, 0x84b}}}, 0x88) 05:00:07 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [], [], 'veth1_virt_wifi\x00', 'veth1_to_team\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x0, 0x1, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}, @common=@ipv6header={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}}, @common=@icmp6={{0x28}, {0x0, '`\f'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) [ 585.971796] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 585.989746] x_tables: ip6_tables: mh match: only valid for protocol 135 05:00:07 executing program 1: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0) 05:00:07 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [], [0xffffffff, 0xff000000, 0xffffffff, 0xffffffff], 'veth1_virt_wifi\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x33, 0xe6, 0x0, 0x1}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x0, 0x1, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}, @common=@ipv6header={{0x28}, {0x0, 0x56, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}}, @common=@icmp6={{0x28}, {0x0, '`\f'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) 05:00:07 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) r1 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r1, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}], 0x6, 0x0) syz_open_pts(r1, 0x20040) (async) r2 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r2, &(0x7f0000000500)=[{}], 0x1, 0x0) (async) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r3, 0x5600, &(0x7f0000000000)) (async, rerun: 64) ioctl$VT_DISALLOCATE(r2, 0x5608) (rerun: 64) 05:00:07 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) r1 = socket$l2tp6(0xa, 0x2, 0x73) getpeername$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000000c0)=0x1c) epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) r2 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r2, &(0x7f0000000500)=[{}], 0x1, 0x0) epoll_wait(r2, &(0x7f0000000140)=[{}, {}, {}, {}], 0x4, 0x1) r3 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000000)={0x9, {{0xa, 0x4e21, 0x1000, @mcast1, 0x84b}}}, 0x88) 05:00:07 executing program 1: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0) 05:00:07 executing program 4: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) (async, rerun: 32) r2 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) (rerun: 32) epoll_wait(r2, &(0x7f0000000500)=[{}], 0x1, 0x0) (async) ioctl$SNAPSHOT_CREATE_IMAGE(r2, 0x40043311, &(0x7f0000000000)) 05:00:07 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [], [0xffffffff, 0xff000000, 0xffffffff], 'veth1_virt_wifi\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x33, 0xe6, 0x0, 0x1}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x0, 0x1, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}, @common=@ipv6header={{0x28}, {0x0, 0x56, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}}, @common=@icmp6={{0x28}, {0x0, '`\f'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) [ 586.118294] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 586.124525] x_tables: ip6_tables: mh match: only valid for protocol 135 05:00:07 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x3e0, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [], [], 'veth1_virt_wifi\x00', 'veth1_to_team\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ipv6header={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}}, @common=@icmp6={{0x28}, {0x0, '`\f'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) 05:00:07 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) r1 = socket$l2tp6(0xa, 0x2, 0x73) getpeername$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000000c0)=0x1c) epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) r2 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r2, &(0x7f0000000500)=[{}], 0x1, 0x0) epoll_wait(r2, &(0x7f0000000140)=[{}, {}, {}, {}], 0x4, 0x1) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000000)={0x9, {{0xa, 0x4e21, 0x1000, @mcast1, 0x84b}}}, 0x88) 05:00:07 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r1, &(0x7f0000000500)=[{}], 0x1, 0x0) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f0000000000)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) 05:00:07 executing program 1: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0) 05:00:07 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x3e0, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [], [], 'veth1_virt_wifi\x00', 'veth1_to_team\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ipv6header={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}}, @common=@icmp6={{0x28}, {0x0, '`\f'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) 05:00:07 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) r1 = socket$l2tp6(0xa, 0x2, 0x73) getpeername$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000000c0)=0x1c) epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) r2 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r2, &(0x7f0000000500)=[{}], 0x1, 0x0) epoll_wait(r2, &(0x7f0000000140)=[{}, {}, {}, {}], 0x4, 0x1) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000000)={0x9, {{0xa, 0x4e21, 0x1000, @mcast1, 0x84b}}}, 0x88) 05:00:07 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [], [0xffffffff, 0xff000000], 'veth1_virt_wifi\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x33, 0xe6, 0x0, 0x1}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x0, 0x1, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}, @common=@ipv6header={{0x28}, {0x0, 0x56, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}}, @common=@icmp6={{0x28}, {0x0, '`\f'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) [ 586.231420] x_tables: ip6_tables: mh match: only valid for protocol 135 05:00:07 executing program 4: r0 = epoll_create1(0x0) (async) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) (async) r2 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r2, &(0x7f0000000500)=[{}], 0x1, 0x0) (async) ioctl$SNAPSHOT_CREATE_IMAGE(r2, 0x40043311, &(0x7f0000000000)) 05:00:07 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r1, &(0x7f0000000500)=[{}], 0x1, 0x0) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f0000000000)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) (async) epoll_wait(r1, &(0x7f0000000500)=[{}], 0x1, 0x0) (async) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f0000000000)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) (async) 05:00:07 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r1, &(0x7f0000000500)=[{}], 0x1, 0x0) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f0000000000)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) 05:00:07 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) r1 = socket$l2tp6(0xa, 0x2, 0x73) getpeername$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000000c0)=0x1c) epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) r2 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r2, &(0x7f0000000500)=[{}], 0x1, 0x0) epoll_wait(r2, &(0x7f0000000140)=[{}, {}, {}, {}], 0x4, 0x1) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000000)={0x9, {{0xa, 0x4e21, 0x1000, @mcast1, 0x84b}}}, 0x88) 05:00:07 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x3e0, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [], [], 'veth1_virt_wifi\x00', 'veth1_to_team\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ipv6header={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}}, @common=@icmp6={{0x28}, {0x0, '`\f'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) 05:00:07 executing program 4: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$IMHOLD_L1(0xffffffffffffffff, 0x80044948, &(0x7f0000000000)=0x6) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) 05:00:07 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [], [0xffffffff], 'veth1_virt_wifi\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x33, 0xe6, 0x0, 0x1}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x0, 0x1, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}, @common=@ipv6header={{0x28}, {0x0, 0x56, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}}, @common=@icmp6={{0x28}, {0x0, '`\f'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) 05:00:07 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r1, &(0x7f0000000500)=[{}], 0x1, 0x0) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f0000000000)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) (async) epoll_wait(r1, &(0x7f0000000500)=[{}], 0x1, 0x0) (async) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f0000000000)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) (async) [ 586.354944] x_tables: ip6_tables: mh match: only valid for protocol 135 05:00:07 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) r1 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r1, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}], 0x6, 0x0) syz_open_pts(r1, 0x20040) r2 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r2, &(0x7f0000000500)=[{}], 0x1, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r3, 0x5600, &(0x7f0000000000)) ioctl$VT_DISALLOCATE(r2, 0x5608) 05:00:07 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) r1 = socket$l2tp6(0xa, 0x2, 0x73) getpeername$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000000c0)=0x1c) epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) r2 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r2, &(0x7f0000000500)=[{}], 0x1, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000000)={0x9, {{0xa, 0x4e21, 0x1000, @mcast1, 0x84b}}}, 0x88) 05:00:07 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [], [], 'veth1_virt_wifi\x00', 'veth1_to_team\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x0, 0x0, 0x1, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}, @common=@ipv6header={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}}, @common=@icmp6={{0x28}, {0x0, '`\f'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) 05:00:07 executing program 4: r0 = epoll_create1(0x0) (async) r1 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$IMHOLD_L1(0xffffffffffffffff, 0x80044948, &(0x7f0000000000)=0x6) (async, rerun: 64) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) (async, rerun: 64) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) 05:00:07 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r1, &(0x7f0000000500)=[{}], 0x1, 0x0) getsockname$l2tp(r1, &(0x7f0000000000)={0x2, 0x0, @broadcast}, &(0x7f0000000040)=0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) 05:00:07 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) r1 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r1, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}], 0x6, 0x0) syz_open_pts(r1, 0x20040) r2 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r2, &(0x7f0000000500)=[{}], 0x1, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r3, 0x5600, &(0x7f0000000000)) ioctl$VT_DISALLOCATE(r2, 0x5608) 05:00:07 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [], [], 'veth1_virt_wifi\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x33, 0xe6, 0x0, 0x1}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x0, 0x1, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}, @common=@ipv6header={{0x28}, {0x0, 0x56, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}}, @common=@icmp6={{0x28}, {0x0, '`\f'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) [ 586.477867] x_tables: ip6_tables: mh match: only valid for protocol 135 05:00:07 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) r1 = socket$l2tp6(0xa, 0x2, 0x73) getpeername$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000000c0)=0x1c) epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000000)={0x9, {{0xa, 0x4e21, 0x1000, @mcast1, 0x84b}}}, 0x88) 05:00:07 executing program 4: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) (async, rerun: 32) ioctl$IMHOLD_L1(0xffffffffffffffff, 0x80044948, &(0x7f0000000000)=0x6) (rerun: 32) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) 05:00:07 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [], [], 'veth1_virt_wifi\x00', 'veth1_to_team\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}, @common=@ipv6header={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}}, @common=@icmp6={{0x28}, {0x0, '`\f'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) [ 586.558523] x_tables: ip6_tables: mh match: only valid for protocol 135 05:00:07 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) (async) r1 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r1, &(0x7f0000000500)=[{}], 0x1, 0x0) getsockname$l2tp(r1, &(0x7f0000000000)={0x2, 0x0, @broadcast}, &(0x7f0000000040)=0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) 05:00:07 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) r1 = socket$l2tp6(0xa, 0x2, 0x73) getpeername$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000000c0)=0x1c) epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) r2 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000000)={0x9, {{0xa, 0x4e21, 0x1000, @mcast1, 0x84b}}}, 0x88) 05:00:07 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) r1 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r1, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}], 0x6, 0x0) syz_open_pts(r1, 0x20040) r2 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r2, &(0x7f0000000500)=[{}], 0x1, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r3, 0x5600, &(0x7f0000000000)) ioctl$VT_DISALLOCATE(r2, 0x5608) [ 586.609405] x_tables: ip6_tables: mh match: only valid for protocol 135 05:00:07 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [], [], 'veth1_virt_wifi\x00', 'veth1_to_team\x00', {}, {0xff}, 0x33, 0xe6, 0x0, 0x1}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x0, 0x1, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}, @common=@ipv6header={{0x28}, {0x0, 0x56, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}}, @common=@icmp6={{0x28}, {0x0, '`\f'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) 05:00:07 executing program 4: r0 = epoll_create1(0x0) r1 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) write$UHID_DESTROY(r1, &(0x7f0000000040), 0x4) r2 = epoll_create(0x5) epoll_wait(r2, &(0x7f0000000000)=[{}, {}, {}, {}, {}], 0x5, 0x0) syz_open_pts(r1, 0x40) r3 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000001180)) 05:00:07 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) r1 = socket$l2tp6(0xa, 0x2, 0x73) getpeername$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000000c0)=0x1c) epoll_create1(0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000000)={0x9, {{0xa, 0x4e21, 0x1000, @mcast1, 0x84b}}}, 0x88) 05:00:07 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) (async, rerun: 32) r1 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) (rerun: 32) epoll_wait(r1, &(0x7f0000000500)=[{}], 0x1, 0x0) (async) getsockname$l2tp(r1, &(0x7f0000000000)={0x2, 0x0, @broadcast}, &(0x7f0000000040)=0x10) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) 05:00:07 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [], [], 'veth1_virt_wifi\x00', 'veth1_to_team\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7], 0xd}}, @common=@ipv6header={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}}, @common=@icmp6={{0x28}, {0x0, '`\f'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) 05:00:07 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) r1 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r1, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}], 0x6, 0x0) syz_open_pts(r1, 0x20040) r2 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r2, &(0x7f0000000500)=[{}], 0x1, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r3, 0x5600, &(0x7f0000000000)) [ 586.685429] x_tables: ip6_tables: mh match: only valid for protocol 135 05:00:07 executing program 4: r0 = epoll_create1(0x0) (async) r1 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) write$UHID_DESTROY(r1, &(0x7f0000000040), 0x4) (async) r2 = epoll_create(0x5) epoll_wait(r2, &(0x7f0000000000)=[{}, {}, {}, {}, {}], 0x5, 0x0) syz_open_pts(r1, 0x40) (async) r3 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000001180)) 05:00:07 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [], [], 'veth1_virt_wifi\x00', 'veth1_to_team\x00', {}, {}, 0x33, 0xe6, 0x0, 0x1}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x0, 0x1, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}, @common=@ipv6header={{0x28}, {0x0, 0x56, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}}, @common=@icmp6={{0x28}, {0x0, '`\f'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) 05:00:07 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) r1 = socket$l2tp6(0xa, 0x2, 0x73) getpeername$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000000c0)=0x1c) r2 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000000)={0x9, {{0xa, 0x4e21, 0x1000, @mcast1, 0x84b}}}, 0x88) [ 586.740839] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 586.776660] x_tables: ip6_tables: mh match: only valid for protocol 135 05:00:07 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) r1 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r1, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}], 0x6, 0x0) syz_open_pts(r1, 0x20040) r2 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r2, &(0x7f0000000500)=[{}], 0x1, 0x0) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000000)) 05:00:07 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [], [], 'veth1_virt_wifi\x00', 'veth1_to_team\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4], 0xd}}, @common=@ipv6header={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}}, @common=@icmp6={{0x28}, {0x0, '`\f'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) 05:00:07 executing program 4: r0 = epoll_create1(0x0) r1 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) write$UHID_DESTROY(r1, &(0x7f0000000040), 0x4) r2 = epoll_create(0x5) epoll_wait(r2, &(0x7f0000000000)=[{}, {}, {}, {}, {}], 0x5, 0x0) syz_open_pts(r1, 0x40) r3 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000001180)) epoll_create1(0x0) (async) syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) (async) write$UHID_DESTROY(r1, &(0x7f0000000040), 0x4) (async) epoll_create(0x5) (async) epoll_wait(r2, &(0x7f0000000000)=[{}, {}, {}, {}, {}], 0x5, 0x0) (async) syz_open_pts(r1, 0x40) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000001180)) (async) 05:00:07 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r0, &(0x7f0000000500)=[{}], 0x1, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1a) r1 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0xf9, 0xff, 0x7, 0x7fff}, {0xa4, 0x1, 0xa, 0x8}, {0x8, 0x1, 0x1, 0x8}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f00000000c0)={0x0, 0x2, r0, 0x9}) epoll_wait(r1, &(0x7f0000000500)=[{}], 0x1, 0x0) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000000)=0x4) 05:00:08 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000000)={0x9, {{0xa, 0x4e21, 0x1000, @mcast1, 0x84b}}}, 0x88) [ 586.875208] x_tables: ip6_tables: mh match: only valid for protocol 135 05:00:08 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) r1 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r1, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}], 0x6, 0x0) syz_open_pts(r1, 0x20040) r2 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r2, &(0x7f0000000500)=[{}], 0x1, 0x0) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000000)) 05:00:08 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [], [], 'veth1_virt_wifi\x00', 'veth1_to_team\x00', {}, {}, 0x0, 0xe6, 0x0, 0x1}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x0, 0x1, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}, @common=@ipv6header={{0x28}, {0x0, 0x56, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}}, @common=@icmp6={{0x28}, {0x0, '`\f'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) 05:00:08 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x1) (async, rerun: 64) r0 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) (rerun: 64) epoll_wait(r0, &(0x7f0000000500)=[{}], 0x1, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1a) r1 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) (async) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0xf9, 0xff, 0x7, 0x7fff}, {0xa4, 0x1, 0xa, 0x8}, {0x8, 0x1, 0x1, 0x8}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f00000000c0)={0x0, 0x2, r0, 0x9}) (async) epoll_wait(r1, &(0x7f0000000500)=[{}], 0x1, 0x0) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000000)=0x4) 05:00:08 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [], [], 'veth1_virt_wifi\x00', 'veth1_to_team\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80], 0xd}}, @common=@ipv6header={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}}, @common=@icmp6={{0x28}, {0x0, '`\f'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) [ 586.918067] x_tables: ip6_tables: mh match: only valid for protocol 135 05:00:08 executing program 4: r0 = epoll_create1(0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r1 = socket$l2tp6(0xa, 0x2, 0x73) write$snapshot(0xffffffffffffffff, &(0x7f00000000c0)="5229a813766c5df2ca4377e7974ed2aa9fc9e991860a32ddc8c2cebd1135228d678eeb44ff80b0d1517be9d435e9b57e6d038bd613295ecd221ee16614ea08d1baee0f3f23bccd20d398e9b186b586709dde2d23a53f5a40818225dffdf5c217f0b40223d736d6fcba0fbf3d56a68383ec4d491711f3a4e1ff55e24514870fa2e00efe97d9e83bba0b6a321a96cb44350ef921b426dd42be6cc3a8c2e7f1b4f5fed6c29ccd4772b45ea8b96337277451298e357795ecc9855b1df19e0fd4e3fa55e2bb1c412c853afc8942c82928ec99e133398eb038", 0xd6) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) 05:00:08 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) r1 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r1, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}], 0x6, 0x0) syz_open_pts(r1, 0x20040) r2 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r2, &(0x7f0000000500)=[{}], 0x1, 0x0) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000000)) 05:00:08 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000000)={0x9, {{0xa, 0x4e21, 0x1000, @mcast1, 0x84b}}}, 0x88) 05:00:08 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [], [], 'veth1_virt_wifi\x00', 'veth1_to_team\x00', {}, {}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x0, 0x1, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}, @common=@ipv6header={{0x28}, {0x0, 0x56, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}}, @common=@icmp6={{0x28}, {0x0, '`\f'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) 05:00:08 executing program 4: r0 = epoll_create1(0x0) (async, rerun: 32) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) (async, rerun: 32) r1 = socket$l2tp6(0xa, 0x2, 0x73) write$snapshot(0xffffffffffffffff, &(0x7f00000000c0)="5229a813766c5df2ca4377e7974ed2aa9fc9e991860a32ddc8c2cebd1135228d678eeb44ff80b0d1517be9d435e9b57e6d038bd613295ecd221ee16614ea08d1baee0f3f23bccd20d398e9b186b586709dde2d23a53f5a40818225dffdf5c217f0b40223d736d6fcba0fbf3d56a68383ec4d491711f3a4e1ff55e24514870fa2e00efe97d9e83bba0b6a321a96cb44350ef921b426dd42be6cc3a8c2e7f1b4f5fed6c29ccd4772b45ea8b96337277451298e357795ecc9855b1df19e0fd4e3fa55e2bb1c412c853afc8942c82928ec99e133398eb038", 0xd6) (async, rerun: 64) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) (rerun: 64) 05:00:08 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r0, &(0x7f0000000500)=[{}], 0x1, 0x0) (async, rerun: 32) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1a) (rerun: 32) r1 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) (async) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0xf9, 0xff, 0x7, 0x7fff}, {0xa4, 0x1, 0xa, 0x8}, {0x8, 0x1, 0x1, 0x8}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f00000000c0)={0x0, 0x2, r0, 0x9}) (async) epoll_wait(r1, &(0x7f0000000500)=[{}], 0x1, 0x0) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000000)=0x4) [ 587.024383] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 587.050636] x_tables: ip6_tables: mh match: only valid for protocol 135 05:00:08 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [], [], 'veth1_virt_wifi\x00', 'veth1_to_team\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7], 0xd}}, @common=@ipv6header={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}}, @common=@icmp6={{0x28}, {0x0, '`\f'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) 05:00:08 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) r1 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r1, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}], 0x6, 0x0) syz_open_pts(r1, 0x20040) syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r2, 0x5600, &(0x7f0000000000)) 05:00:08 executing program 5: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000000)={0x9, {{0xa, 0x4e21, 0x1000, @mcast1, 0x84b}}}, 0x88) 05:00:08 executing program 4: r0 = epoll_create1(0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r1 = socket$l2tp6(0xa, 0x2, 0x73) write$snapshot(0xffffffffffffffff, &(0x7f00000000c0)="5229a813766c5df2ca4377e7974ed2aa9fc9e991860a32ddc8c2cebd1135228d678eeb44ff80b0d1517be9d435e9b57e6d038bd613295ecd221ee16614ea08d1baee0f3f23bccd20d398e9b186b586709dde2d23a53f5a40818225dffdf5c217f0b40223d736d6fcba0fbf3d56a68383ec4d491711f3a4e1ff55e24514870fa2e00efe97d9e83bba0b6a321a96cb44350ef921b426dd42be6cc3a8c2e7f1b4f5fed6c29ccd4772b45ea8b96337277451298e357795ecc9855b1df19e0fd4e3fa55e2bb1c412c853afc8942c82928ec99e133398eb038", 0xd6) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) epoll_create1(0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) write$snapshot(0xffffffffffffffff, &(0x7f00000000c0)="5229a813766c5df2ca4377e7974ed2aa9fc9e991860a32ddc8c2cebd1135228d678eeb44ff80b0d1517be9d435e9b57e6d038bd613295ecd221ee16614ea08d1baee0f3f23bccd20d398e9b186b586709dde2d23a53f5a40818225dffdf5c217f0b40223d736d6fcba0fbf3d56a68383ec4d491711f3a4e1ff55e24514870fa2e00efe97d9e83bba0b6a321a96cb44350ef921b426dd42be6cc3a8c2e7f1b4f5fed6c29ccd4772b45ea8b96337277451298e357795ecc9855b1df19e0fd4e3fa55e2bb1c412c853afc8942c82928ec99e133398eb038", 0xd6) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) (async) 05:00:08 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [], [], 'veth1_virt_wifi\x00', 'veth1_to_team\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x0, 0x1, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}, @common=@ipv6header={{0x28}, {0x0, 0x56, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}}, @common=@icmp6={{0x28}, {0x0, '`\f'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) 05:00:08 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x8, 0x14, 0x11c, &(0x7f00000002c0)}) [ 587.131095] x_tables: ip6_tables: mh match: only valid for protocol 135 05:00:08 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) r1 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r1, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}], 0x6, 0x0) syz_open_pts(r1, 0x20040) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r2, 0x5600, &(0x7f0000000000)) 05:00:08 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x8, 0x14, 0x11c, &(0x7f00000002c0)}) 05:00:08 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [], [], 'veth1_virt_wifi\x00', 'veth1_to_team\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40], 0xd}}, @common=@ipv6header={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}}, @common=@icmp6={{0x28}, {0x0, '`\f'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) 05:00:08 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x400, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [], [], 'veth1_virt_wifi\x00', 'veth1_to_team\x00'}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x0, 0x1, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}}, @common=@icmp6={{0x28}, {0x0, '`\f'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) [ 587.188956] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 587.221945] x_tables: ip6_tables: mh match: only valid for protocol 135 05:00:08 executing program 4: r0 = epoll_create1(0x0) r1 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x8000000007, 0x470103) epoll_wait(r1, &(0x7f0000000500)=[{}], 0x1, 0x0) ioctl$VT_ACTIVATE(r1, 0x5606, 0x4) r2 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000001180)) 05:00:08 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000000)={0x9, {{0xa, 0x4e21, 0x1000, @mcast1, 0x84b}}}, 0x88) 05:00:08 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) r1 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r1, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}], 0x6, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r2, 0x5600, &(0x7f0000000000)) 05:00:08 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x8, 0x14, 0x11c, &(0x7f00000002c0)}) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) (async) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x8, 0x14, 0x11c, &(0x7f00000002c0)}) (async) 05:00:08 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x400, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [], [], 'veth1_virt_wifi\x00', 'veth1_to_team\x00'}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x0, 0x1, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}}, @common=@icmp6={{0x28}, {0x0, '`\f'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) 05:00:08 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [], [], 'veth1_virt_wifi\x00', 'veth1_to_team\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000], 0xd}}, @common=@ipv6header={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}}, @common=@icmp6={{0x28}, {0x0, '`\f'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) 05:00:08 executing program 4: r0 = epoll_create1(0x0) r1 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x8000000007, 0x470103) epoll_wait(r1, &(0x7f0000000500)=[{}], 0x1, 0x0) ioctl$VT_ACTIVATE(r1, 0x5606, 0x4) r2 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000001180)) epoll_create1(0x0) (async) syz_open_dev$vcsn(&(0x7f00000004c0), 0x8000000007, 0x470103) (async) epoll_wait(r1, &(0x7f0000000500)=[{}], 0x1, 0x0) (async) ioctl$VT_ACTIVATE(r1, 0x5606, 0x4) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000001180)) (async) [ 587.353008] x_tables: ip6_tables: mh match: only valid for protocol 135 05:00:08 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000000)={0x9, {{0xa, 0x4e21, 0x1000, @mcast1, 0x84b}}}, 0x88) 05:00:08 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f0000000000)) 05:00:08 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 05:00:08 executing program 4: r0 = epoll_create1(0x0) r1 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x8000000007, 0x470103) epoll_wait(r1, &(0x7f0000000500)=[{}], 0x1, 0x0) (async) ioctl$VT_ACTIVATE(r1, 0x5606, 0x4) (async) r2 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000001180)) 05:00:08 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x400, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [], [], 'veth1_virt_wifi\x00', 'veth1_to_team\x00'}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x0, 0x1, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}}, @common=@icmp6={{0x28}, {0x0, '`\f'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) 05:00:08 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [], [], 'veth1_virt_wifi\x00', 'veth1_to_team\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4], 0xd}}, @common=@ipv6header={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}}, @common=@icmp6={{0x28}, {0x0, '`\f'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) 05:00:08 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000000)={0x9, {{0xa, 0x4e21, 0x1000, @mcast1, 0x84b}}}, 0x88) [ 587.456346] x_tables: ip6_tables: mh match: only valid for protocol 135 05:00:08 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f0000000000)) 05:00:08 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [], [], 'veth1_virt_wifi\x00', 'veth1_to_team\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x0, 0x1, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}, @common=@ipv6header={{0x28}, {0x0, 0x0, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}}, @common=@icmp6={{0x28}, {0x0, '`\f'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) 05:00:08 executing program 4: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) r2 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r2, &(0x7f0000000500)=[{}], 0x1, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000000)={0x10}) 05:00:08 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) (async) 05:00:08 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000000)={0x9, {{0xa, 0x4e21, 0x1000, @mcast1, 0x84b}}}, 0x88) 05:00:08 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000000)) 05:00:08 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [], [], 'veth1_virt_wifi\x00', 'veth1_to_team\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb], 0xd}}, @common=@ipv6header={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}}, @common=@icmp6={{0x28}, {0x0, '`\f'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) [ 587.593838] x_tables: ip6_tables: mh match: only valid for protocol 135 05:00:08 executing program 4: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) (async) r2 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r2, &(0x7f0000000500)=[{}], 0x1, 0x0) (async) r3 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000000)={0x10}) 05:00:08 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r0, 0x29, 0x0, &(0x7f00000008c0)={@mcast1}, 0x14) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000000)={0x9, {{0xa, 0x4e21, 0x1000, @mcast1, 0x84b}}}, 0x88) 05:00:08 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) [ 587.655474] x_tables: ip6_tables: mh match: only valid for protocol 135 05:00:08 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [], [], 'veth1_virt_wifi\x00', 'veth1_to_team\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x0, 0x1, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}, @common=@ipv6header={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}}, @common=@icmp6={{0x28}, {0x0, '`\f'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) 05:00:08 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000000)) 05:00:08 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r0, 0x29, 0x0, &(0x7f00000008c0)={@mcast1}, 0x14) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000000)={0x9, {{0xa, 0x4e21, 0x1000, @mcast1, 0x84b}}}, 0x88) 05:00:08 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [], [], 'veth1_virt_wifi\x00', 'veth1_to_team\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001], 0xd}}, @common=@ipv6header={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}}, @common=@icmp6={{0x28}, {0x0, '`\f'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) 05:00:08 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x1a) r2 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r2, &(0x7f0000000500)=[{}], 0x1, 0x0) ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f0000000040)={0xfff, 0xe1, 0x0, 0x2, 0x0, 0xffe1}) 05:00:08 executing program 4: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) r2 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r2, &(0x7f0000000500)=[{}], 0x1, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000000)={0x10}) epoll_create1(0x0) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) (async) syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) (async) epoll_wait(r2, &(0x7f0000000500)=[{}], 0x1, 0x0) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000000)={0x10}) (async) [ 587.738340] x_tables: ip6_tables: mh match: only valid for protocol 135 05:00:08 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000000)) [ 587.802896] x_tables: ip6_tables: mh match: only valid for protocol 135 05:00:08 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r0, 0x29, 0x0, &(0x7f00000008c0)={@mcast1}, 0x14) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000000)={0x9, {{0xa, 0x4e21, 0x1000, @mcast1, 0x84b}}}, 0x88) 05:00:08 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x3e0, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [], [], 'veth1_virt_wifi\x00', 'veth1_to_team\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ipv6header={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}}, @common=@icmp6={{0x28}, {0x0, '`\f'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) 05:00:09 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x1a) (async) r2 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r2, &(0x7f0000000500)=[{}], 0x1, 0x0) (async) ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f0000000040)={0xfff, 0xe1, 0x0, 0x2, 0x0, 0xffe1}) 05:00:09 executing program 4: r0 = epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) r1 = epoll_create1(0x80000) r2 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x7, 0x1}]}) r3 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder-control\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000001180)={0x30000004}) r4 = socket$l2tp6(0xa, 0x2, 0x73) socketpair(0x21, 0x807, 0x7, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_mtu(r5, 0x29, 0x17, &(0x7f0000000240)=0x3, 0x4) r6 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r6, &(0x7f0000000500)=[{}], 0x1, 0x0) epoll_pwait(r1, &(0x7f0000000280)=[{}, {}, {}, {}], 0x4, 0x10000, &(0x7f00000002c0)={[0x6]}, 0x8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r6, 0x58, &(0x7f0000000140)}, 0x10) setsockopt$inet6_MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f00000000c0)={{0xa, 0x4e20, 0xc2d6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}, {0xa, 0x5, 0x3, @remote, 0x58}, 0x0, [0x0, 0xa800, 0x4be, 0x7fffffff, 0x1000, 0x9f5, 0x7fff, 0x80]}, 0x5c) [ 587.843042] x_tables: ip6_tables: mh match: only valid for protocol 135 05:00:09 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [], [], 'veth1_virt_wifi\x00', 'veth1_to_team\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x4, 0x40, 0xb70, 0x7213, 0x8], 0xd}}, @common=@ipv6header={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}}, @common=@icmp6={{0x28}, {0x0, '`\f'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) 05:00:09 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000000)) 05:00:09 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x3e0, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [], [], 'veth1_virt_wifi\x00', 'veth1_to_team\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ipv6header={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}}, @common=@icmp6={{0x28}, {0x0, '`\f'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) 05:00:09 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r0, 0x29, 0x14, 0x0, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000000)={0x9, {{0xa, 0x4e21, 0x1000, @mcast1, 0x84b}}}, 0x88) 05:00:09 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000000)) 05:00:09 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x1a) r2 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r2, &(0x7f0000000500)=[{}], 0x1, 0x0) (async) ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f0000000040)={0xfff, 0xe1, 0x0, 0x2, 0x0, 0xffe1}) 05:00:09 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [], [], 'veth1_virt_wifi\x00', 'veth1_to_team\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x4, 0x40, 0xb70, 0x7213], 0xd}}, @common=@ipv6header={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}}, @common=@icmp6={{0x28}, {0x0, '`\f'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) [ 587.966439] x_tables: ip6_tables: mh match: only valid for protocol 135 05:00:09 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x3e0, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [], [], 'veth1_virt_wifi\x00', 'veth1_to_team\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ipv6header={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}}, @common=@icmp6={{0x28}, {0x0, '`\f'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) 05:00:09 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r0, 0x29, 0x14, 0x0, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000000)={0x9, {{0xa, 0x4e21, 0x1000, @mcast1, 0x84b}}}, 0x88) 05:00:09 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r0, 0x5600, 0x0) 05:00:09 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [], [], 'veth1_virt_wifi\x00', 'veth1_to_team\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x4, 0x40, 0xb70], 0xd}}, @common=@ipv6header={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}}, @common=@icmp6={{0x28}, {0x0, '`\f'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) [ 588.056585] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 588.118777] x_tables: ip6_tables: mh match: only valid for protocol 135 05:00:09 executing program 4: r0 = epoll_create1(0x0) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) r1 = epoll_create1(0x80000) (async) r2 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x7, 0x1}]}) (async) r3 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder-control\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000001180)={0x30000004}) (async) r4 = socket$l2tp6(0xa, 0x2, 0x73) socketpair(0x21, 0x807, 0x7, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_mtu(r5, 0x29, 0x17, &(0x7f0000000240)=0x3, 0x4) (async) r6 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r6, &(0x7f0000000500)=[{}], 0x1, 0x0) epoll_pwait(r1, &(0x7f0000000280)=[{}, {}, {}, {}], 0x4, 0x10000, &(0x7f00000002c0)={[0x6]}, 0x8) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r6, 0x58, &(0x7f0000000140)}, 0x10) setsockopt$inet6_MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f00000000c0)={{0xa, 0x4e20, 0xc2d6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}, {0xa, 0x5, 0x3, @remote, 0x58}, 0x0, [0x0, 0xa800, 0x4be, 0x7fffffff, 0x1000, 0x9f5, 0x7fff, 0x80]}, 0x5c) 05:00:09 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [], [], 'veth1_virt_wifi\x00', 'veth1_to_team\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x0, 0x0, 0x1, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}, @common=@ipv6header={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}}, @common=@icmp6={{0x28}, {0x0, '`\f'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) 05:00:09 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x38) syz_open_dev$ptys(0xc, 0x3, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0x44, 0x5cd743) epoll_wait(r1, &(0x7f0000000500)=[{}], 0x1, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x16) 05:00:09 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r0, 0x29, 0x14, 0x0, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000000)={0x9, {{0xa, 0x4e21, 0x1000, @mcast1, 0x84b}}}, 0x88) 05:00:09 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [], [], 'veth1_virt_wifi\x00', 'veth1_to_team\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x4, 0x40], 0xd}}, @common=@ipv6header={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}}, @common=@icmp6={{0x28}, {0x0, '`\f'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) 05:00:09 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r0, 0x5600, 0x0) 05:00:09 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r0, 0x5600, 0x0) 05:00:09 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x38) (async) syz_open_dev$ptys(0xc, 0x3, 0x1) (async, rerun: 64) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0x44, 0x5cd743) (rerun: 64) epoll_wait(r1, &(0x7f0000000500)=[{}], 0x1, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x16) 05:00:10 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000000)={0x9, {{0xa, 0x4e21, 0x1000, @mcast1, 0x84b}}}, 0x88) 05:00:10 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [], [], 'veth1_virt_wifi\x00', 'veth1_to_team\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}, @common=@ipv6header={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}}, @common=@icmp6={{0x28}, {0x0, '`\f'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) [ 588.838394] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 588.867468] x_tables: ip6_tables: mh match: only valid for protocol 135 05:00:10 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [], [], 'veth1_virt_wifi\x00', 'veth1_to_team\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x4], 0xd}}, @common=@ipv6header={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}}, @common=@icmp6={{0x28}, {0x0, '`\f'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) 05:00:10 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r0, 0x29, 0x14, 0x0, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000000)={0x9, {{0xa, 0x4e21, 0x1000, @mcast1, 0x84b}}}, 0x88) [ 588.944804] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 588.985071] x_tables: ip6_tables: mh match: only valid for protocol 135 05:00:10 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x38) (async) syz_open_dev$ptys(0xc, 0x3, 0x1) (async) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0x44, 0x5cd743) epoll_wait(r1, &(0x7f0000000500)=[{}], 0x1, 0x0) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x16) 05:00:10 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000000)={0x9, {{0xa, 0x4e21, 0x1000, @mcast1, 0x84b}}}, 0x88) 05:00:10 executing program 4: r0 = epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) r1 = epoll_create1(0x80000) r2 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x7, 0x1}]}) r3 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder-control\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000001180)={0x30000004}) r4 = socket$l2tp6(0xa, 0x2, 0x73) socketpair(0x21, 0x807, 0x7, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_mtu(r5, 0x29, 0x17, &(0x7f0000000240)=0x3, 0x4) r6 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r6, &(0x7f0000000500)=[{}], 0x1, 0x0) epoll_pwait(r1, &(0x7f0000000280)=[{}, {}, {}, {}], 0x4, 0x10000, &(0x7f00000002c0)={[0x6]}, 0x8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r6, 0x58, &(0x7f0000000140)}, 0x10) setsockopt$inet6_MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f00000000c0)={{0xa, 0x4e20, 0xc2d6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}, {0xa, 0x5, 0x3, @remote, 0x58}, 0x0, [0x0, 0xa800, 0x4be, 0x7fffffff, 0x1000, 0x9f5, 0x7fff, 0x80]}, 0x5c) epoll_create1(0x0) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) epoll_create1(0x80000) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) setsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x7, 0x1}]}) (async) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder-control\x00', 0x0, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000001180)={0x30000004}) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) socketpair(0x21, 0x807, 0x7, &(0x7f0000000200)) (async) setsockopt$inet6_mtu(r5, 0x29, 0x17, &(0x7f0000000240)=0x3, 0x4) (async) syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) (async) epoll_wait(r6, &(0x7f0000000500)=[{}], 0x1, 0x0) (async) epoll_pwait(r1, &(0x7f0000000280)=[{}, {}, {}, {}], 0x4, 0x10000, &(0x7f00000002c0)={[0x6]}, 0x8) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r6, 0x58, &(0x7f0000000140)}, 0x10) (async) setsockopt$inet6_MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f00000000c0)={{0xa, 0x4e20, 0xc2d6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}, {0xa, 0x5, 0x3, @remote, 0x58}, 0x0, [0x0, 0xa800, 0x4be, 0x7fffffff, 0x1000, 0x9f5, 0x7fff, 0x80]}, 0x5c) (async) 05:00:10 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [], [], 'veth1_virt_wifi\x00', 'veth1_to_team\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7], 0xd}}, @common=@ipv6header={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}}, @common=@icmp6={{0x28}, {0x0, '`\f'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) 05:00:10 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r0, 0x29, 0x14, 0x0, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000000)={0x9, {{0xa, 0x4e21, 0x1000, @mcast1, 0x84b}}}, 0x88) 05:00:10 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [], [], 'veth1_virt_wifi\x00', 'veth1_to_team\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x0, 0x0, 0x0, [], 0xd}}, @common=@ipv6header={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}}, @common=@icmp6={{0x28}, {0x0, '`\f'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) 05:00:10 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r0, 0x29, 0x14, 0x0, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000000)={0x9, {{0xa, 0x4e21, 0x1000, @mcast1, 0x84b}}}, 0x88) 05:00:10 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_pts(r0, 0x200) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f00000000c0)) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x200c00, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x6) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000000080)) 05:00:10 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000000)={0x9, {{0xa, 0x4e21, 0x1000, @mcast1, 0x84b}}}, 0x88) 05:00:10 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [], [], 'veth1_virt_wifi\x00', 'veth1_to_team\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4], 0xd}}, @common=@ipv6header={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}}, @common=@icmp6={{0x28}, {0x0, '`\f'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) 05:00:10 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [], [], 'veth1_virt_wifi\x00', 'veth1_to_team\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}}, @common=@ipv6header={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}}, @common=@icmp6={{0x28}, {0x0, '`\f'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) [ 589.724342] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 589.757851] x_tables: ip6_tables: mh match: only valid for protocol 135 05:00:10 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, 0x0, 0x0) 05:00:10 executing program 4: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = getpgid(0x0) kcmp$KCMP_EPOLL_TFD(r2, 0x0, 0x7, 0xffffffffffffffff, 0x0) r3 = getpgid(0xffffffffffffffff) r4 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r4, &(0x7f0000000500)=[{}], 0x1, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r0, &(0x7f0000000000)={r4, r5, 0x8}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) 05:00:10 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_pts(r0, 0x200) (async) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) (async) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f00000000c0)) (async) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x200c00, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x6) (async) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000000080)) 05:00:10 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000000)={0x9, {{0xa, 0x4e21, 0x1000, @mcast1, 0x84b}}}, 0x88) 05:00:11 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [], [], 'veth1_virt_wifi\x00', 'veth1_to_team\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80], 0xd}}, @common=@ipv6header={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}}, @common=@icmp6={{0x28}, {0x0, '`\f'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) 05:00:11 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, 0x0, 0x0) 05:00:11 executing program 4: r0 = epoll_create1(0x0) (async) r1 = socket$l2tp6(0xa, 0x2, 0x73) (async) r2 = getpgid(0x0) kcmp$KCMP_EPOLL_TFD(r2, 0x0, 0x7, 0xffffffffffffffff, 0x0) (async) r3 = getpgid(0xffffffffffffffff) r4 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r4, &(0x7f0000000500)=[{}], 0x1, 0x0) (async) r5 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) (async) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r0, &(0x7f0000000000)={r4, r5, 0x8}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) [ 589.847165] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 589.876810] x_tables: ip6_tables: mh match: only valid for protocol 135 05:00:11 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [], [], 'veth1_virt_wifi\x00', 'veth1_to_team\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}}, @common=@ipv6header={{0x28}}]}, @common=@unspec=@STANDARD={0x28}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}}, @common=@icmp6={{0x28}, {0x0, '`\f'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) 05:00:11 executing program 1: setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000000)={0x9, {{0xa, 0x4e21, 0x1000, @mcast1, 0x84b}}}, 0x88) 05:00:11 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_pts(r0, 0x200) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f00000000c0)) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x200c00, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x6) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000000080)) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) syz_open_pts(r0, 0x200) (async) syz_open_dev$ptys(0xc, 0x3, 0x1) (async) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) (async) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f00000000c0)) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x200c00, 0x0) (async) ioctl$TIOCGPTPEER(r1, 0x5441, 0x6) (async) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000000080)) (async) 05:00:11 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, 0x0, 0x0) 05:00:11 executing program 4: r0 = epoll_create1(0x0) (async) r1 = socket$l2tp6(0xa, 0x2, 0x73) (async) r2 = getpgid(0x0) kcmp$KCMP_EPOLL_TFD(r2, 0x0, 0x7, 0xffffffffffffffff, 0x0) r3 = getpgid(0xffffffffffffffff) (async) r4 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r4, &(0x7f0000000500)=[{}], 0x1, 0x0) (async) r5 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) (async) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r0, &(0x7f0000000000)={r4, r5, 0x8}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) 05:00:11 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [], [], 'veth1_virt_wifi\x00', 'veth1_to_team\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7], 0xd}}, @common=@ipv6header={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}}, @common=@icmp6={{0x28}, {0x0, '`\f'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) [ 589.969653] x_tables: ip6_tables: mh match: only valid for protocol 135 05:00:11 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [], [], 'veth1_virt_wifi\x00', 'veth1_to_team\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}}, @common=@ipv6header={{0x28}}]}, @common=@unspec=@STANDARD={0x28}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}}, @common=@icmp6={{0x28}, {0x0, '`\f'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) 05:00:11 executing program 1: setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000000)={0x9, {{0xa, 0x4e21, 0x1000, @mcast1, 0x84b}}}, 0x88) 05:00:11 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x4e21, 0x1000, @mcast1, 0x84b}}}, 0x88) 05:00:11 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) 05:00:11 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [], [], 'veth1_virt_wifi\x00', 'veth1_to_team\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}}, @common=@ipv6header={{0x28}}]}, @common=@unspec=@STANDARD={0x28}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}}, @common=@icmp6={{0x28}, {0x0, '`\f'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) 05:00:11 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [], [], 'veth1_virt_wifi\x00', 'veth1_to_team\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40], 0xd}}, @common=@ipv6header={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}}, @common=@icmp6={{0x28}, {0x0, '`\f'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) [ 590.081196] x_tables: ip6_tables: mh match: only valid for protocol 135 05:00:11 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x4e21, 0x1000, @mcast1, 0x84b}}}, 0x88) 05:00:11 executing program 4: epoll_create1(0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000080)) socket$l2tp6(0xa, 0x2, 0x73) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) epoll_create1(0x80000) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="c3ee25c0b534f5056ce7e2a1c28a2686d0705f7992d09ae074cf3b39d2349faff2d163c818d8c5561ee6030cbfdeb92e008177b5f035a0fdf6c0745d15e4c6b706000000d0bbf8e44929e7b7ddb387da653badf64cd35b29edc8a4f4b238702ead084b1785dc76105c7dabb9b063f6c3a8869b23e40fa25b1dadfa43e6798d357472e67e8b1d6ad0dbe853aa54a97835eba215bff2236746dfbfa1ffa2d97acb85fc88f8467ab65728550dfd9f70", @ANYRES16=r1, @ANYBLOB="000828bd7000ffdbdf250200000008001900ac1e010114001f00fe880000000000000000000000000001050014007f000000"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) 05:00:11 executing program 1: setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000000)={0x9, {{0xa, 0x4e21, 0x1000, @mcast1, 0x84b}}}, 0x88) 05:00:11 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) (async) 05:00:11 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x400, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [], [], 'veth1_virt_wifi\x00', 'veth1_to_team\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}}, @common=@ipv6header={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}}, @common=@icmp6={{0x28}, {0x0, '`\f'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) 05:00:11 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x4e21, 0x1000, @mcast1, 0x84b}}}, 0x88) 05:00:11 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000000)={0x9, {{0xa, 0x4e21, 0x1000, @mcast1, 0x84b}}}, 0x88) 05:00:11 executing program 4: epoll_create1(0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000080)) socket$l2tp6(0xa, 0x2, 0x73) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) epoll_create1(0x80000) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="c3ee25c0b534f5056ce7e2a1c28a2686d0705f7992d09ae074cf3b39d2349faff2d163c818d8c5561ee6030cbfdeb92e008177b5f035a0fdf6c0745d15e4c6b706000000d0bbf8e44929e7b7ddb387da653badf64cd35b29edc8a4f4b238702ead084b1785dc76105c7dabb9b063f6c3a8869b23e40fa25b1dadfa43e6798d357472e67e8b1d6ad0dbe853aa54a97835eba215bff2236746dfbfa1ffa2d97acb85fc88f8467ab65728550dfd9f70", @ANYRES16=r1, @ANYBLOB="000828bd7000ffdbdf250200000008001900ac1e010114001f00fe880000000000000000000000000001050014007f000000"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) epoll_create1(0x0) (async) syz_open_dev$ptys(0xc, 0x3, 0x1) (async) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000080)) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) epoll_create1(0x80000) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="c3ee25c0b534f5056ce7e2a1c28a2686d0705f7992d09ae074cf3b39d2349faff2d163c818d8c5561ee6030cbfdeb92e008177b5f035a0fdf6c0745d15e4c6b706000000d0bbf8e44929e7b7ddb387da653badf64cd35b29edc8a4f4b238702ead084b1785dc76105c7dabb9b063f6c3a8869b23e40fa25b1dadfa43e6798d357472e67e8b1d6ad0dbe853aa54a97835eba215bff2236746dfbfa1ffa2d97acb85fc88f8467ab65728550dfd9f70", @ANYRES16=r1, @ANYBLOB="000828bd7000ffdbdf250200000008001900ac1e010114001f00fe880000000000000000000000000001050014007f000000"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) (async) 05:00:11 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [], [], 'veth1_virt_wifi\x00', 'veth1_to_team\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000], 0xd}}, @common=@ipv6header={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}}, @common=@icmp6={{0x28}, {0x0, '`\f'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) [ 590.232013] x_tables: ip6_tables: mh match: only valid for protocol 135 05:00:11 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000000)={0x9, {{0xa, 0x0, 0x1000, @mcast1, 0x84b}}}, 0x88) 05:00:11 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x400, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [], [], 'veth1_virt_wifi\x00', 'veth1_to_team\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}}, @common=@ipv6header={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}}, @common=@icmp6={{0x28}, {0x0, '`\f'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) 05:00:11 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) 05:00:11 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000000)={0x9, {{0xa, 0x4e21, 0x1000, @mcast1, 0x84b}}}, 0x88) 05:00:11 executing program 4: epoll_create1(0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000080)) socket$l2tp6(0xa, 0x2, 0x73) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) epoll_create1(0x80000) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="c3ee25c0b534f5056ce7e2a1c28a2686d0705f7992d09ae074cf3b39d2349faff2d163c818d8c5561ee6030cbfdeb92e008177b5f035a0fdf6c0745d15e4c6b706000000d0bbf8e44929e7b7ddb387da653badf64cd35b29edc8a4f4b238702ead084b1785dc76105c7dabb9b063f6c3a8869b23e40fa25b1dadfa43e6798d357472e67e8b1d6ad0dbe853aa54a97835eba215bff2236746dfbfa1ffa2d97acb85fc88f8467ab65728550dfd9f70", @ANYRES16=r1, @ANYBLOB="000828bd7000ffdbdf250200000008001900ac1e010114001f00fe880000000000000000000000000001050014007f000000"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) 05:00:11 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000000)={0x9, {{0xa, 0x0, 0x0, @mcast1, 0x84b}}}, 0x88) 05:00:11 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000140)={0xcc, {{0xa, 0x4e23, 0xa2, @mcast1, 0x4}}}, 0x88) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f00000000c0)={0x3, 0x5, 0x7, 0x0, 0x1}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x17) 05:00:11 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x400, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [], [], 'veth1_virt_wifi\x00', 'veth1_to_team\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}}, @common=@ipv6header={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}}, @common=@icmp6={{0x28}, {0x0, '`\f'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) 05:00:11 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [], [], 'veth1_virt_wifi\x00', 'veth1_to_team\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4], 0xd}}, @common=@ipv6header={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}}, @common=@icmp6={{0x28}, {0x0, '`\f'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) [ 590.360599] x_tables: ip6_tables: mh match: only valid for protocol 135 05:00:11 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000000)={0x9, {{0xa, 0x4e21, 0x1000, @mcast1, 0x84b}}}, 0x88) 05:00:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10e5864299b5eb31}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) r1 = epoll_create1(0x0) r2 = epoll_create(0xee8) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x8000001b}) epoll_create(0xf) 05:00:11 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, 0x0, 0x0) 05:00:11 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000000)={0x9, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) 05:00:11 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [], [], 'veth1_virt_wifi\x00', 'veth1_to_team\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb], 0xd}}, @common=@ipv6header={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}}, @common=@icmp6={{0x28}, {0x0, '`\f'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) 05:00:11 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28}}, {{@ipv6={@empty, @mcast2, [], [], 'veth1_virt_wifi\x00', 'veth1_to_team\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}}, @common=@ipv6header={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}}, @common=@icmp6={{0x28}, {0x0, '`\f'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) [ 590.474856] x_tables: ip6_tables: mh match: only valid for protocol 135 05:00:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10e5864299b5eb31}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) (async, rerun: 32) r1 = epoll_create1(0x0) (async, rerun: 32) r2 = epoll_create(0xee8) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x8000001b}) (async) epoll_create(0xf) 05:00:11 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000140)={0xcc, {{0xa, 0x4e23, 0xa2, @mcast1, 0x4}}}, 0x88) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f00000000c0)={0x3, 0x5, 0x7, 0x0, 0x1}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x17) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000140)={0xcc, {{0xa, 0x4e23, 0xa2, @mcast1, 0x4}}}, 0x88) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f00000000c0)={0x3, 0x5, 0x7, 0x0, 0x1}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x17) (async) 05:00:11 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, 0x0, 0x0) 05:00:11 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [], [], 'veth1_virt_wifi\x00', 'veth1_to_team\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}}, @common=@ipv6header={{0x28}}]}, @common=@unspec=@STANDARD={0x28}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}}, @common=@icmp6={{0x28}, {0x0, '`\f'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) 05:00:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10e5864299b5eb31}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) r1 = epoll_create1(0x0) r2 = epoll_create(0xee8) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x8000001b}) (async) epoll_create(0xf) 05:00:11 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [], [], 'veth1_virt_wifi\x00', 'veth1_to_team\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001], 0xd}}, @common=@ipv6header={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}}, @common=@icmp6={{0x28}, {0x0, '`\f'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) [ 590.606250] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 590.616500] x_tables: ip6_tables: mh match: only valid for protocol 135 05:00:11 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 05:00:11 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, 0x0, 0x0) 05:00:11 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [], [], 'veth1_virt_wifi\x00', 'veth1_to_team\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}}, @common=@ipv6header={{0x28}}]}, @common=@unspec=@STANDARD={0x28}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}}, @common=@icmp6={{0x28}, {0x0, '`\f'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) 05:00:11 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000140)={0xcc, {{0xa, 0x4e23, 0xa2, @mcast1, 0x4}}}, 0x88) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f00000000c0)={0x3, 0x5, 0x7, 0x0, 0x1}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x17) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000140)={0xcc, {{0xa, 0x4e23, 0xa2, @mcast1, 0x4}}}, 0x88) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f00000000c0)={0x3, 0x5, 0x7, 0x0, 0x1}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x17) (async) 05:00:11 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 05:00:11 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x4e21, 0x1000, @mcast1, 0x84b}}}, 0x88) 05:00:11 executing program 4: r0 = epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) syz_open_dev$vcsn(&(0x7f0000000040), 0x4, 0x400000) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)={0x40000000}) 05:00:11 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [], [], 'veth1_virt_wifi\x00', 'veth1_to_team\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x4, 0x40, 0xb70, 0x7213, 0x8], 0xd}}, @common=@ipv6header={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}}, @common=@icmp6={{0x28}, {0x0, '`\f'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) 05:00:11 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [], [], 'veth1_virt_wifi\x00', 'veth1_to_team\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}}, @common=@ipv6header={{0x28}}]}, @common=@unspec=@STANDARD={0x28}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}}, @common=@icmp6={{0x28}, {0x0, '`\f'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) [ 590.730300] x_tables: ip6_tables: mh match: only valid for protocol 135 05:00:11 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 05:00:11 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x4e21, 0x1000, @mcast1, 0x84b}}}, 0x88) 05:00:11 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) ioctl$TIOCL_SELLOADLUT(r1, 0x541c, &(0x7f0000000000)={0x5, 0x4, 0x0, 0x2, 0x4}) ioctl$TIOCGPTPEER(r0, 0x5441, 0x100000000) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) 05:00:12 executing program 4: r0 = epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) syz_open_dev$vcsn(&(0x7f0000000040), 0x4, 0x400000) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)={0x40000000}) epoll_create1(0x0) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) (async) syz_open_dev$vcsn(&(0x7f0000000040), 0x4, 0x400000) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)={0x40000000}) (async) 05:00:12 executing program 5: setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [], [], 'veth1_virt_wifi\x00', 'veth1_to_team\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}}, @common=@ipv6header={{0x28}}]}, @common=@unspec=@STANDARD={0x28}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}}, @common=@icmp6={{0x28}, {0x0, '`\f'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) 05:00:12 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) [ 590.869565] x_tables: ip6_tables: mh match: only valid for protocol 135 05:00:12 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [], [], 'veth1_virt_wifi\x00', 'veth1_to_team\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x4, 0x40, 0xb70, 0x7213], 0xd}}, @common=@ipv6header={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}}, @common=@icmp6={{0x28}, {0x0, '`\f'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) 05:00:12 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) ioctl$TIOCL_SELLOADLUT(r1, 0x541c, &(0x7f0000000000)={0x5, 0x4, 0x0, 0x2, 0x4}) (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x100000000) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) 05:00:12 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x4e21, 0x1000, @mcast1, 0x84b}}}, 0x88) 05:00:12 executing program 5: setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [], [], 'veth1_virt_wifi\x00', 'veth1_to_team\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}}, @common=@ipv6header={{0x28}}]}, @common=@unspec=@STANDARD={0x28}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}}, @common=@icmp6={{0x28}, {0x0, '`\f'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) 05:00:12 executing program 4: r0 = epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) (async) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) syz_open_dev$vcsn(&(0x7f0000000040), 0x4, 0x400000) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)={0x40000000}) 05:00:12 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 05:00:12 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000000)={0x9, {{0xa, 0x0, 0x1000, @mcast1, 0x84b}}}, 0x88) [ 591.009469] x_tables: ip6_tables: mh match: only valid for protocol 135 05:00:12 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) ioctl$TIOCL_SELLOADLUT(r1, 0x541c, &(0x7f0000000000)={0x5, 0x4, 0x0, 0x2, 0x4}) ioctl$TIOCGPTPEER(r0, 0x5441, 0x100000000) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) (async) ioctl$TIOCL_SELLOADLUT(r1, 0x541c, &(0x7f0000000000)={0x5, 0x4, 0x0, 0x2, 0x4}) (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x100000000) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) (async) 05:00:12 executing program 5: setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [], [], 'veth1_virt_wifi\x00', 'veth1_to_team\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}}, @common=@ipv6header={{0x28}}]}, @common=@unspec=@STANDARD={0x28}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}}, @common=@icmp6={{0x28}, {0x0, '`\f'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) 05:00:12 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [], [], 'veth1_virt_wifi\x00', 'veth1_to_team\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x4, 0x40, 0xb70], 0xd}}, @common=@ipv6header={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}}, @common=@icmp6={{0x28}, {0x0, '`\f'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) 05:00:12 executing program 4: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@local, 0x100, 0x1, 0x3, 0x1, 0x1eb, 0x9}, 0x20) r0 = epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) r1 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r1, &(0x7f0000000500)=[{}], 0x1, 0x0) epoll_pwait(r1, &(0x7f0000000000), 0x0, 0x1, &(0x7f0000000080)={[0x81]}, 0x8) r2 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000001180)) r3 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r3, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) r4 = syz_open_dev$vcsn(&(0x7f0000000100), 0xffff, 0x0) setsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f0000000140)=0x5, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$inet6(0xa, 0x3, 0x3f) setsockopt$inet6_mtu(r5, 0x29, 0x17, &(0x7f00000000c0)=0x5, 0x4) 05:00:12 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 05:00:12 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) ioctl$VT_WAITACTIVE(r0, 0x5607) 05:00:12 executing program 5: socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [], [], 'veth1_virt_wifi\x00', 'veth1_to_team\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}}, @common=@ipv6header={{0x28}}]}, @common=@unspec=@STANDARD={0x28}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}}, @common=@icmp6={{0x28}, {0x0, '`\f'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) 05:00:12 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000000)={0x9, {{0xa, 0x0, 0x0, @mcast1, 0x84b}}}, 0x88) 05:00:12 executing program 4: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@local, 0x100, 0x1, 0x3, 0x1, 0x1eb, 0x9}, 0x20) (async) r0 = epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) (async) r1 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r1, &(0x7f0000000500)=[{}], 0x1, 0x0) (async) epoll_pwait(r1, &(0x7f0000000000), 0x0, 0x1, &(0x7f0000000080)={[0x81]}, 0x8) r2 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000001180)) r3 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r3, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) (async) r4 = syz_open_dev$vcsn(&(0x7f0000000100), 0xffff, 0x0) setsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f0000000140)=0x5, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$inet6(0xa, 0x3, 0x3f) setsockopt$inet6_mtu(r5, 0x29, 0x17, &(0x7f00000000c0)=0x5, 0x4) 05:00:12 executing program 0: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x1b) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)) [ 591.155845] x_tables: ip6_tables: mh match: only valid for protocol 135 05:00:12 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [], [], 'veth1_virt_wifi\x00', 'veth1_to_team\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x4, 0x40], 0xd}}, @common=@ipv6header={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}}, @common=@icmp6={{0x28}, {0x0, '`\f'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) 05:00:12 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) (async) ioctl$VT_WAITACTIVE(r0, 0x5607) 05:00:12 executing program 0: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x1b) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)) 05:00:12 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000000)={0x9, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) 05:00:12 executing program 5: socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [], [], 'veth1_virt_wifi\x00', 'veth1_to_team\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}}, @common=@ipv6header={{0x28}}]}, @common=@unspec=@STANDARD={0x28}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}}, @common=@icmp6={{0x28}, {0x0, '`\f'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) 05:00:12 executing program 4: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@local, 0x100, 0x1, 0x3, 0x1, 0x1eb, 0x9}, 0x20) r0 = epoll_create1(0x0) (async) socket$l2tp6(0xa, 0x2, 0x73) (async, rerun: 64) r1 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) (rerun: 64) epoll_wait(r1, &(0x7f0000000500)=[{}], 0x1, 0x0) (async, rerun: 32) epoll_pwait(r1, &(0x7f0000000000), 0x0, 0x1, &(0x7f0000000080)={[0x81]}, 0x8) (async, rerun: 32) r2 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000001180)) (async) r3 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r3, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) (async) r4 = syz_open_dev$vcsn(&(0x7f0000000100), 0xffff, 0x0) setsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f0000000140)=0x5, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$inet6(0xa, 0x3, 0x3f) setsockopt$inet6_mtu(r5, 0x29, 0x17, &(0x7f00000000c0)=0x5, 0x4) 05:00:12 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) ioctl$VT_WAITACTIVE(r0, 0x5607) 05:00:12 executing program 5: socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [], [], 'veth1_virt_wifi\x00', 'veth1_to_team\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}}, @common=@ipv6header={{0x28}}]}, @common=@unspec=@STANDARD={0x28}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}}, @common=@icmp6={{0x28}, {0x0, '`\f'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) [ 591.312087] x_tables: ip6_tables: mh match: only valid for protocol 135 05:00:12 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [], [], 'veth1_virt_wifi\x00', 'veth1_to_team\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x4], 0xd}}, @common=@ipv6header={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}}, @common=@icmp6={{0x28}, {0x0, '`\f'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) 05:00:12 executing program 0: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x1b) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)) 05:00:12 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 05:00:12 executing program 4: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) epoll_create1(0x0) r3 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r3, &(0x7f0000000500)=[{}], 0x1, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r4, 0x29, 0x14, &(0x7f0000000140)={@loopback}, 0x14) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r4) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f00000000c0)={@local, @loopback, @local, 0x100, 0xaa72, 0x0, 0x400, 0xfffffffffffffff8, 0x1800000, r2}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) 05:00:12 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) 05:00:12 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [], [], 'veth1_virt_wifi\x00', 'veth1_to_team\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x0, 0x0, 0x0, [], 0xd}}, @common=@ipv6header={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}}, @common=@icmp6={{0x28}, {0x0, '`\f'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) [ 591.426832] x_tables: ip6_tables: mh match: only valid for protocol 135 05:00:12 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0xffff) ioctl$TIOCL_SELLOADLUT(r1, 0x541c, &(0x7f0000000040)={0x5, 0x4, 0x4, 0x9, 0x1}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)=0x15) r2 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) ioctl$TCGETS(r2, 0x5401, &(0x7f0000000000)) epoll_wait(r2, &(0x7f0000000500)=[{}], 0x1, 0x0) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) 05:00:12 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x1b) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 05:00:12 executing program 1: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@local, 0x100, 0x1, 0x3, 0x1, 0x1eb, 0x9}, 0x20) r0 = epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) r1 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r1, &(0x7f0000000500)=[{}], 0x1, 0x0) epoll_pwait(r1, &(0x7f0000000000), 0x0, 0x1, &(0x7f0000000080)={[0x81]}, 0x8) r2 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000001180)) r3 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r3, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) r4 = syz_open_dev$vcsn(&(0x7f0000000100), 0xffff, 0x0) setsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f0000000140)=0x5, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$inet6(0xa, 0x3, 0x3f) setsockopt$inet6_mtu(r5, 0x29, 0x17, &(0x7f00000000c0)=0x5, 0x4) 05:00:12 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) 05:00:12 executing program 4: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) epoll_create1(0x0) r3 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r3, &(0x7f0000000500)=[{}], 0x1, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r4, 0x29, 0x14, &(0x7f0000000140)={@loopback}, 0x14) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r4) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f00000000c0)={@local, @loopback, @local, 0x100, 0xaa72, 0x0, 0x400, 0xfffffffffffffff8, 0x1800000, r2}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) epoll_create1(0x0) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) (async) epoll_create1(0x0) (async) syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) (async) epoll_wait(r3, &(0x7f0000000500)=[{}], 0x1, 0x0) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) setsockopt$inet6_mreq(r4, 0x29, 0x14, &(0x7f0000000140)={@loopback}, 0x14) (async) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r4) (async) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f00000000c0)={@local, @loopback, @local, 0x100, 0xaa72, 0x0, 0x400, 0xfffffffffffffff8, 0x1800000, r2}) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) (async) 05:00:12 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0xffff) ioctl$TIOCL_SELLOADLUT(r1, 0x541c, &(0x7f0000000040)={0x5, 0x4, 0x4, 0x9, 0x1}) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)=0x15) (async) r2 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) ioctl$TCGETS(r2, 0x5401, &(0x7f0000000000)) epoll_wait(r2, &(0x7f0000000500)=[{}], 0x1, 0x0) (async) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) 05:00:12 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x1b) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 05:00:12 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) [ 591.574974] x_tables: ip6_tables: mh match: only valid for protocol 135 05:00:12 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0xffff) ioctl$TIOCL_SELLOADLUT(r1, 0x541c, &(0x7f0000000040)={0x5, 0x4, 0x4, 0x9, 0x1}) (async, rerun: 64) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)=0x15) (rerun: 64) r2 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) ioctl$TCGETS(r2, 0x5401, &(0x7f0000000000)) (async) epoll_wait(r2, &(0x7f0000000500)=[{}], 0x1, 0x0) (async) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) 05:00:12 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [], [], 'veth1_virt_wifi\x00', 'veth1_to_team\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}}, @common=@ipv6header={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}}, @common=@icmp6={{0x28}, {0x0, '`\f'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) 05:00:12 executing program 4: r0 = epoll_create1(0x0) (async) r1 = socket$l2tp6(0xa, 0x2, 0x73) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) epoll_create1(0x0) r3 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r3, &(0x7f0000000500)=[{}], 0x1, 0x0) (async) r4 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r4, 0x29, 0x14, &(0x7f0000000140)={@loopback}, 0x14) (async) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r4) (async) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f00000000c0)={@local, @loopback, @local, 0x100, 0xaa72, 0x0, 0x400, 0xfffffffffffffff8, 0x1800000, r2}) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) 05:00:12 executing program 1: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@local, 0x100, 0x1, 0x3, 0x1, 0x1eb, 0x9}, 0x20) r0 = epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) r1 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r1, &(0x7f0000000500)=[{}], 0x1, 0x0) epoll_pwait(r1, &(0x7f0000000000), 0x0, 0x1, &(0x7f0000000080)={[0x81]}, 0x8) r2 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000001180)) r3 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r3, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) r4 = syz_open_dev$vcsn(&(0x7f0000000100), 0xffff, 0x0) setsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f0000000140)=0x5, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$inet6(0xa, 0x3, 0x3f) setsockopt$inet6_mtu(r5, 0x29, 0x17, &(0x7f00000000c0)=0x5, 0x4) 05:00:12 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x1b) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 05:00:12 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x400, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [], [], 'veth1_virt_wifi\x00', 'veth1_to_team\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}}, @common=@ipv6header={{0x28}}]}, @common=@unspec=@STANDARD={0x28}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@hl={{0x28}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) 05:00:12 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r1, &(0x7f0000000500)=[{}], 0x1, 0x0) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0xa) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) 05:00:12 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [], [], 'veth1_virt_wifi\x00', 'veth1_to_team\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}}, @common=@ipv6header={{0x28}}]}, @common=@unspec=@STANDARD={0x28}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}}, @common=@icmp6={{0x28}, {0x0, '`\f'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) 05:00:12 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x400, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [], [], 'veth1_virt_wifi\x00', 'veth1_to_team\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}}, @common=@ipv6header={{0x28}}]}, @common=@unspec=@STANDARD={0x28}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@hl={{0x28}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) [ 591.739601] x_tables: ip6_tables: mh match: only valid for protocol 135 05:00:12 executing program 1: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@local, 0x100, 0x1, 0x3, 0x1, 0x1eb, 0x9}, 0x20) r0 = epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) r1 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r1, &(0x7f0000000500)=[{}], 0x1, 0x0) epoll_pwait(r1, &(0x7f0000000000), 0x0, 0x1, &(0x7f0000000080)={[0x81]}, 0x8) r2 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000001180)) r3 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r3, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) r4 = syz_open_dev$vcsn(&(0x7f0000000100), 0xffff, 0x0) setsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f0000000140)=0x5, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$inet6(0xa, 0x3, 0x3f) setsockopt$inet6_mtu(r5, 0x29, 0x17, &(0x7f00000000c0)=0x5, 0x4) 05:00:12 executing program 4: epoll_create1(0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r1, &(0x7f0000000500)=[{}], 0x1, 0x0) ioctl$IMCTRLREQ(r1, 0x80044945, &(0x7f0000000000)={0x2, 0x10001, 0x40, 0x1010000}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000001180)) 05:00:12 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 05:00:13 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x400, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [], [], 'veth1_virt_wifi\x00', 'veth1_to_team\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}}, @common=@ipv6header={{0x28}}]}, @common=@unspec=@STANDARD={0x28}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@hl={{0x28}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) 05:00:13 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r1, &(0x7f0000000500)=[{}], 0x1, 0x0) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0xa) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) (async) epoll_wait(r1, &(0x7f0000000500)=[{}], 0x1, 0x0) (async) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0xa) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) (async) 05:00:13 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [], [], 'veth1_virt_wifi\x00', 'veth1_to_team\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}}, @common=@ipv6header={{0x28}}]}, @common=@unspec=@STANDARD={0x28}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}}, @common=@icmp6={{0x28}, {0x0, '`\f'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) 05:00:13 executing program 1: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@local, 0x100, 0x1, 0x3, 0x1, 0x1eb, 0x9}, 0x20) r0 = epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) r1 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r1, &(0x7f0000000500)=[{}], 0x1, 0x0) epoll_pwait(r1, &(0x7f0000000000), 0x0, 0x1, &(0x7f0000000080)={[0x81]}, 0x8) r2 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000001180)) r3 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r3, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) r4 = syz_open_dev$vcsn(&(0x7f0000000100), 0xffff, 0x0) setsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f0000000140)=0x5, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000000c0)=0x5, 0x4) 05:00:13 executing program 4: epoll_create1(0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r1, &(0x7f0000000500)=[{}], 0x1, 0x0) (async) ioctl$IMCTRLREQ(r1, 0x80044945, &(0x7f0000000000)={0x2, 0x10001, 0x40, 0x1010000}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000001180)) 05:00:13 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 05:00:13 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [], [], 'veth1_virt_wifi\x00', 'veth1_to_team\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}}, @common=@ipv6header={{0x28}}]}, @common=@unspec=@STANDARD={0x28}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}}, @common=@icmp6={{0x28}, {0x0, '`\f'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) 05:00:13 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x400, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [], [], 'veth1_virt_wifi\x00', 'veth1_to_team\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}}, @common=@ipv6header={{0x28}}]}, @common=@unspec=@STANDARD={0x28}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28}, {0x0, '`\f'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) 05:00:13 executing program 1: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@local, 0x100, 0x1, 0x3, 0x1, 0x1eb, 0x9}, 0x20) r0 = epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) r1 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r1, &(0x7f0000000500)=[{}], 0x1, 0x0) epoll_pwait(r1, &(0x7f0000000000), 0x0, 0x1, &(0x7f0000000080)={[0x81]}, 0x8) r2 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000001180)) r3 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r3, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) r4 = syz_open_dev$vcsn(&(0x7f0000000100), 0xffff, 0x0) setsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f0000000140)=0x5, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000000c0)=0x5, 0x4) 05:00:13 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r1, &(0x7f0000000500)=[{}], 0x1, 0x0) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0xa) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) 05:00:13 executing program 4: epoll_create1(0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) (async) r1 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r1, &(0x7f0000000500)=[{}], 0x1, 0x0) (async, rerun: 32) ioctl$IMCTRLREQ(r1, 0x80044945, &(0x7f0000000000)={0x2, 0x10001, 0x40, 0x1010000}) (async, rerun: 32) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000001180)) 05:00:13 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 05:00:13 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x400, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [], [], 'veth1_virt_wifi\x00', 'veth1_to_team\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}}, @common=@ipv6header={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}}, @common=@icmp6={{0x28}, {0x0, '`\f'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) 05:00:13 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x400, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [], [], 'veth1_virt_wifi\x00', 'veth1_to_team\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}}, @common=@ipv6header={{0x28}}]}, @common=@unspec=@STANDARD={0x28}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28}, {0x0, '`\f'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) 05:00:13 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000000)={0x8, 0x3f, 0x0, 0x3, 0x5, 0x9}) r2 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r2, &(0x7f0000000500)=[{}], 0x1, 0x0) r3 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r3, &(0x7f0000000500)=[{}], 0x1, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000080)) ioctl$PIO_FONTX(r2, 0x4b6c, &(0x7f0000000040)={0x1bc, 0x1c, &(0x7f00000002c0)="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"}) 05:00:13 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 05:00:13 executing program 1: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@local, 0x100, 0x1, 0x3, 0x1, 0x1eb, 0x9}, 0x20) r0 = epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) r1 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r1, &(0x7f0000000500)=[{}], 0x1, 0x0) epoll_pwait(r1, &(0x7f0000000000), 0x0, 0x1, &(0x7f0000000080)={[0x81]}, 0x8) r2 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000001180)) r3 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r3, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) r4 = syz_open_dev$vcsn(&(0x7f0000000100), 0xffff, 0x0) setsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f0000000140)=0x5, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000000c0)=0x5, 0x4) 05:00:13 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x400, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [], [], 'veth1_virt_wifi\x00', 'veth1_to_team\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}}, @common=@ipv6header={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}}, @common=@icmp6={{0x28}, {0x0, '`\f'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) 05:00:13 executing program 4: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000000)={0x1e}) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r1) 05:00:13 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 05:00:13 executing program 1: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@local, 0x100, 0x1, 0x3, 0x1, 0x1eb, 0x9}, 0x20) r0 = epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) r1 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r1, &(0x7f0000000500)=[{}], 0x1, 0x0) epoll_pwait(r1, &(0x7f0000000000), 0x0, 0x1, &(0x7f0000000080)={[0x81]}, 0x8) r2 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000001180)) r3 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r3, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) r4 = syz_open_dev$vcsn(&(0x7f0000000100), 0xffff, 0x0) setsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f0000000140)=0x5, 0x4) r5 = socket$inet6(0xa, 0x3, 0x3f) setsockopt$inet6_mtu(r5, 0x29, 0x17, &(0x7f00000000c0)=0x5, 0x4) 05:00:13 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x400, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [], [], 'veth1_virt_wifi\x00', 'veth1_to_team\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}}, @common=@ipv6header={{0x28}}]}, @common=@unspec=@STANDARD={0x28}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28}, {0x0, '`\f'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) 05:00:13 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x400, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [], [], 'veth1_virt_wifi\x00', 'veth1_to_team\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}}, @common=@ipv6header={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}}, @common=@icmp6={{0x28}, {0x0, '`\f'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) 05:00:13 executing program 4: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000000)={0x1e}) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r1) epoll_create1(0x0) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000000)={0x1e}) (async) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r1) (async) 05:00:13 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) (async) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000000)={0x8, 0x3f, 0x0, 0x3, 0x5, 0x9}) r2 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r2, &(0x7f0000000500)=[{}], 0x1, 0x0) r3 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r3, &(0x7f0000000500)=[{}], 0x1, 0x0) (async) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000080)) (async) ioctl$PIO_FONTX(r2, 0x4b6c, &(0x7f0000000040)={0x1bc, 0x1c, &(0x7f00000002c0)="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"}) 05:00:13 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 05:00:13 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x400, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [], [], 'veth1_virt_wifi\x00', 'veth1_to_team\x00'}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}}, @common=@icmp6={{0x28}, {0x0, '`\f'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) 05:00:13 executing program 1: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@local, 0x100, 0x1, 0x3, 0x1, 0x1eb, 0x9}, 0x20) r0 = epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) r1 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r1, &(0x7f0000000500)=[{}], 0x1, 0x0) epoll_pwait(r1, &(0x7f0000000000), 0x0, 0x1, &(0x7f0000000080)={[0x81]}, 0x8) r2 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000001180)) r3 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r3, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) syz_open_dev$vcsn(&(0x7f0000000100), 0xffff, 0x0) r4 = socket$inet6(0xa, 0x3, 0x3f) setsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f00000000c0)=0x5, 0x4) 05:00:13 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28}}, {{@ipv6={@empty, @mcast2, [], [], 'veth1_virt_wifi\x00', 'veth1_to_team\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}}, @common=@ipv6header={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}}, @common=@icmp6={{0x28}, {0x0, '`\f'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) 05:00:13 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)) 05:00:13 executing program 4: r0 = epoll_create1(0x0) (async) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000000)={0x1e}) (async, rerun: 32) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r1) (rerun: 32) 05:00:13 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x400, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [], [], 'veth1_virt_wifi\x00', 'veth1_to_team\x00'}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}}, @common=@icmp6={{0x28}, {0x0, '`\f'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) 05:00:13 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000000)={0x8, 0x3f, 0x0, 0x3, 0x5, 0x9}) (async) r2 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r2, &(0x7f0000000500)=[{}], 0x1, 0x0) (async) r3 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r3, &(0x7f0000000500)=[{}], 0x1, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000080)) (async, rerun: 32) ioctl$PIO_FONTX(r2, 0x4b6c, &(0x7f0000000040)={0x1bc, 0x1c, &(0x7f00000002c0)="63fd51a5250d277c66dd4d09a56d482cbc9dff050f1832066862873773db8cc886b9e0d778ba4407c82c36ca8cdc81582a6a964418c104ea08f1436329de602529633751b237250065655e98eb6acd5a4c945fd3e7bf01ade751c1f5e537dfaedc549d9cc4e2f3bd1c92064af960086a813f139ec03d58331182877a6f41a3a5c4303cbc7ab78b244a802630695e77852056008da6f14c100ec3cdb15bbd3316738739c9dfb512b39107754c5973084852df9d12aca3932ce957924ec310bdb09f0dee6480689e079ed1fb6326926c095cf8a02b9fd25b507df0f61e95614de54a392fc1ad2698a7346879628a4d48f83e878d05822cf879cb246833c7a0d182419c918a4bda47bf04b4e2172fcaaca650f7f894ea1f9066065242005bee624344c09864a0e0553f0fa4ffc8432ccbca3586fa0d64129f7cd8dabcd45f20af1c2676f2e8b068592c1f15b0d46ddcea22601be4987f51c977e4c768fd057f9f542fe1b808791d0900000000000000221c21686d4f21016c63f0561d713b5b6fde7f818bd35369a0a824b68ff51868b20fb113642fe5c59b804624eda44a54d6c90a81b1b7b1166d73177b0e3b6ba4d5305bed524b7dcb64424d5d9b5779d9d9ac11ac356798cd747ea7634e9b2fa9927b77b53e83fd50827bd17161d6e8debf3749d9310438cab51f0fab8304b79ef995b50b79d4b1a2e185f03e46fd6eccfcca08f75a9945ce615639fb6aa1973e87e7854bcb151a37e25d9631c1bd222d3732ed69828663b4e5e8942f5f9a2863adbbbc44c78d918ef260b766260927f1b3d242569dc12a2342c5333e25ecdb0eb5f4273731daecdd73ad6bd78148997c684e1fb1c009a5a6ce305531d10d6b4eab5cf12fe6c720ac238fc2d38969f79d8da8d6013fe50a6609358f2620aa4ebdb3994915c6a4945854a899681ab8d4788edc72e86417660ac601e5a5bcd90e18ae235d6a559977b3c455c5d970f3734a53b284f989162d718880d554a794b782435aeb254bf6a4f10085002eddbdddd24f57acb372b93a8874ccfbf8a1ca346064e08d4967d7f685dac4e3dd5ddec1ebb56c1ceed5598ac456738c658a9f7076154fa9a509073dd9fa4badcb4a2db155ee27f574af4b7db83f802f9295e7508f36932b8e952158be0563d98a4df5fb7548f8f5ec0574b42a3526c930c8b0566feaf259cf5c20ee229d0dea9c71ed8cad91f690b8c17db4339d77614deeb0134623b8461845aa29360cd48297322cfccd91f01d899486a875ec3233c29ccc96c368c32ed00fa3f7a9e2e1104bfb7fcafddad9103bfe760cee8474be493c8895bf9beef75681e4693082aac94ea3c158ae6cde041673cfb79f1310a7bbf581b99567741af248ab189ad479d6f2c6e3f02760c2db76f89f604599253c8f24f5268fe1006a11e3587fd608bbf1e99dec1e0b296f"}) (rerun: 32) 05:00:13 executing program 1: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@local, 0x100, 0x1, 0x3, 0x1, 0x1eb, 0x9}, 0x20) r0 = epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) r1 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r1, &(0x7f0000000500)=[{}], 0x1, 0x0) epoll_pwait(r1, &(0x7f0000000000), 0x0, 0x1, &(0x7f0000000080)={[0x81]}, 0x8) r2 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000001180)) r3 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r3, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) r4 = socket$inet6(0xa, 0x3, 0x3f) setsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f00000000c0)=0x5, 0x4) 05:00:13 executing program 4: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, &(0x7f0000000000)) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10e5864299b5eb31}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) read$snapshot(r3, &(0x7f0000000280)=""/117, 0x75) ioctl$SNAPSHOT_CREATE_IMAGE(r3, 0x40043311, &(0x7f0000000300)) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r3, 0x330f, 0x3) socketpair(0x9, 0x2, 0x2, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_open_dev$vcsn(&(0x7f00000001c0), 0x9, 0x400) read$snapshot(r5, &(0x7f00000004c0)=""/67, 0x43) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), r3) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x38, r6, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x100}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010100}]}, 0x38}}, 0xc000) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r6, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x80000000}]}, 0x20}, 0x1, 0x0, 0x0, 0x90}, 0x4000090) 05:00:13 executing program 3: r0 = epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) syz_open_dev$vcsn(&(0x7f0000000040), 0x4, 0x400000) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)={0x40000000}) 05:00:13 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x400, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [], [], 'veth1_virt_wifi\x00', 'veth1_to_team\x00'}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}}, @common=@icmp6={{0x28}, {0x0, '`\f'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) 05:00:13 executing program 2: bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)={&(0x7f0000001300)='./file0\x00', 0x0, 0x18}, 0x10) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) r1 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r1, &(0x7f0000000500)=[{}], 0x1, 0x0) r2 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r2, &(0x7f0000000500)=[{}], 0x1, 0x0) ioctl$TIOCGSERIAL(r2, 0x541e, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/4114}) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f00000001c0)={0x5, &(0x7f0000000180)=[{0x8000, 0x3}, {0x7fff, 0x4}, {0x1000}, {0x9, 0x3}, {0x62b, 0x8}]}) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, &(0x7f0000000080)) syz_open_pts(0xffffffffffffffff, 0x40002) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000001380)) r3 = epoll_create1(0x80000) r4 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r4, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r4, &(0x7f0000000000)={0x2000}) ioctl$TIOCGPTPEER(r0, 0x5441, 0x5) r5 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r5, &(0x7f0000000500)=[{}], 0x1, 0x0) ioctl$TIOCGSERIAL(r5, 0x541e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000013c0)=""/180}) 05:00:13 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)) [ 592.431385] x_tables: ip6_tables: mh match: only valid for protocol 135 05:00:13 executing program 1: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@local, 0x100, 0x1, 0x3, 0x1, 0x1eb, 0x9}, 0x20) r0 = epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) r1 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r1, &(0x7f0000000500)=[{}], 0x1, 0x0) epoll_pwait(r1, &(0x7f0000000000), 0x0, 0x1, &(0x7f0000000080)={[0x81]}, 0x8) r2 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000001180)) socket$l2tp(0x2, 0x2, 0x73) r3 = socket$inet6(0xa, 0x3, 0x3f) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000000c0)=0x5, 0x4) 05:00:13 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x3e0, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [], [], 'veth1_virt_wifi\x00', 'veth1_to_team\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ipv6header={{0x28}}]}, @common=@unspec=@STANDARD={0x28}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}}, @common=@icmp6={{0x28}, {0x0, '`\f'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) 05:00:13 executing program 2: bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)={&(0x7f0000001300)='./file0\x00', 0x0, 0x18}, 0x10) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) (async) r1 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r1, &(0x7f0000000500)=[{}], 0x1, 0x0) (async) r2 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r2, &(0x7f0000000500)=[{}], 0x1, 0x0) ioctl$TIOCGSERIAL(r2, 0x541e, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/4114}) (async) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f00000001c0)={0x5, &(0x7f0000000180)=[{0x8000, 0x3}, {0x7fff, 0x4}, {0x1000}, {0x9, 0x3}, {0x62b, 0x8}]}) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, &(0x7f0000000080)) syz_open_pts(0xffffffffffffffff, 0x40002) (async) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000001380)) (async) r3 = epoll_create1(0x80000) (async) r4 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r4, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) (async) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r4, &(0x7f0000000000)={0x2000}) (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x5) (async) r5 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r5, &(0x7f0000000500)=[{}], 0x1, 0x0) (async) ioctl$TIOCGSERIAL(r5, 0x541e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000013c0)=""/180}) 05:00:13 executing program 3: r0 = epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) syz_open_dev$vcsn(&(0x7f0000000040), 0x4, 0x400000) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)={0x40000000}) 05:00:13 executing program 4: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, &(0x7f0000000000)) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10e5864299b5eb31}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) read$snapshot(r3, &(0x7f0000000280)=""/117, 0x75) ioctl$SNAPSHOT_CREATE_IMAGE(r3, 0x40043311, &(0x7f0000000300)) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r3, 0x330f, 0x3) socketpair(0x9, 0x2, 0x2, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_open_dev$vcsn(&(0x7f00000001c0), 0x9, 0x400) read$snapshot(r5, &(0x7f00000004c0)=""/67, 0x43) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), r3) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x38, r6, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x100}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010100}]}, 0x38}}, 0xc000) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r6, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x80000000}]}, 0x20}, 0x1, 0x0, 0x0, 0x90}, 0x4000090) epoll_create1(0x0) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) (async) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, &(0x7f0000000000)) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10e5864299b5eb31}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) (async) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) (async) read$snapshot(r3, &(0x7f0000000280)=""/117, 0x75) (async) ioctl$SNAPSHOT_CREATE_IMAGE(r3, 0x40043311, &(0x7f0000000300)) (async) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r3, 0x330f, 0x3) (async) socketpair(0x9, 0x2, 0x2, &(0x7f0000000380)) (async) syz_open_dev$vcsn(&(0x7f00000001c0), 0x9, 0x400) (async) read$snapshot(r5, &(0x7f00000004c0)=""/67, 0x43) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), r3) (async) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x38, r6, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x100}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010100}]}, 0x38}}, 0xc000) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r6, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x80000000}]}, 0x20}, 0x1, 0x0, 0x0, 0x90}, 0x4000090) (async) 05:00:13 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)) 05:00:13 executing program 1: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@local, 0x100, 0x1, 0x3, 0x1, 0x1eb, 0x9}, 0x20) r0 = epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) r1 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r1, &(0x7f0000000500)=[{}], 0x1, 0x0) epoll_pwait(r1, &(0x7f0000000000), 0x0, 0x1, &(0x7f0000000080)={[0x81]}, 0x8) r2 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000001180)) r3 = socket$inet6(0xa, 0x3, 0x3f) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000000c0)=0x5, 0x4) 05:00:13 executing program 3: r0 = epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) syz_open_dev$vcsn(&(0x7f0000000040), 0x4, 0x400000) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)={0x40000000}) 05:00:13 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x3e0, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [], [], 'veth1_virt_wifi\x00', 'veth1_to_team\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ipv6header={{0x28}}]}, @common=@unspec=@STANDARD={0x28}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}}, @common=@icmp6={{0x28}, {0x0, '`\f'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) 05:00:13 executing program 2: bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)={&(0x7f0000001300)='./file0\x00', 0x0, 0x18}, 0x10) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) r1 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r1, &(0x7f0000000500)=[{}], 0x1, 0x0) r2 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r2, &(0x7f0000000500)=[{}], 0x1, 0x0) ioctl$TIOCGSERIAL(r2, 0x541e, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/4114}) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f00000001c0)={0x5, &(0x7f0000000180)=[{0x8000, 0x3}, {0x7fff, 0x4}, {0x1000}, {0x9, 0x3}, {0x62b, 0x8}]}) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, &(0x7f0000000080)) syz_open_pts(0xffffffffffffffff, 0x40002) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000001380)) r3 = epoll_create1(0x80000) r4 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r4, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r4, &(0x7f0000000000)={0x2000}) ioctl$TIOCGPTPEER(r0, 0x5441, 0x5) r5 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r5, &(0x7f0000000500)=[{}], 0x1, 0x0) ioctl$TIOCGSERIAL(r5, 0x541e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000013c0)=""/180}) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)={&(0x7f0000001300)='./file0\x00', 0x0, 0x18}, 0x10) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) (async) syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) (async) epoll_wait(r1, &(0x7f0000000500)=[{}], 0x1, 0x0) (async) syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) (async) epoll_wait(r2, &(0x7f0000000500)=[{}], 0x1, 0x0) (async) ioctl$TIOCGSERIAL(r2, 0x541e, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/4114}) (async) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f00000001c0)={0x5, &(0x7f0000000180)=[{0x8000, 0x3}, {0x7fff, 0x4}, {0x1000}, {0x9, 0x3}, {0x62b, 0x8}]}) (async) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, &(0x7f0000000080)) (async) syz_open_pts(0xffffffffffffffff, 0x40002) (async) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000001380)) (async) epoll_create1(0x80000) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) setsockopt$inet6_mreq(r4, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) (async) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r4, &(0x7f0000000000)={0x2000}) (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x5) (async) syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) (async) epoll_wait(r5, &(0x7f0000000500)=[{}], 0x1, 0x0) (async) ioctl$TIOCGSERIAL(r5, 0x541e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000013c0)=""/180}) (async) 05:00:13 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) ioctl$TIOCSETD(r0, 0x5423, 0x0) 05:00:13 executing program 1: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@local, 0x100, 0x1, 0x3, 0x1, 0x1eb, 0x9}, 0x20) epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) r0 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r0, &(0x7f0000000500)=[{}], 0x1, 0x0) epoll_pwait(r0, &(0x7f0000000000), 0x0, 0x1, &(0x7f0000000080)={[0x81]}, 0x8) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) r2 = socket$inet6(0xa, 0x3, 0x3f) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f00000000c0)=0x5, 0x4) 05:00:13 executing program 4: r0 = epoll_create1(0x0) (async) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) (async) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, &(0x7f0000000000)) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10e5864299b5eb31}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) (async) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) read$snapshot(r3, &(0x7f0000000280)=""/117, 0x75) ioctl$SNAPSHOT_CREATE_IMAGE(r3, 0x40043311, &(0x7f0000000300)) (async) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r3, 0x330f, 0x3) (async) socketpair(0x9, 0x2, 0x2, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_open_dev$vcsn(&(0x7f00000001c0), 0x9, 0x400) read$snapshot(r5, &(0x7f00000004c0)=""/67, 0x43) (async) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), r3) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x38, r6, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x100}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010100}]}, 0x38}}, 0xc000) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r6, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x80000000}]}, 0x20}, 0x1, 0x0, 0x0, 0x90}, 0x4000090) 05:00:13 executing program 3: r0 = epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)={0x40000000}) 05:00:13 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x3e0, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [], [], 'veth1_virt_wifi\x00', 'veth1_to_team\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ipv6header={{0x28}}]}, @common=@unspec=@STANDARD={0x28}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}}, @common=@icmp6={{0x28}, {0x0, '`\f'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) 05:00:13 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) ioctl$TIOCSETD(r0, 0x5423, 0x0) 05:00:13 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCGETS(r1, 0x5401, &(0x7f0000000000)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) r2 = socket$inet6(0xa, 0xa, 0x6) setsockopt$inet6_opts(r2, 0x29, 0x39, &(0x7f0000000040)=@routing={0x3b, 0x8, 0x1, 0x6, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @mcast2, @remote]}, 0x48) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f00000000c0)=""/63) 05:00:13 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x400, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [], [], 'veth1_virt_wifi\x00', 'veth1_to_team\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}}, @common=@ipv6header={{0x28}}]}, @common=@unspec=@STANDARD={0x28}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}}, @common=@icmp6={{0x28}, {0x0, '`\f'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) 05:00:13 executing program 3: r0 = epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000001180)={0x40000000}) 05:00:14 executing program 1: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@local, 0x100, 0x1, 0x3, 0x1, 0x1eb, 0x9}, 0x20) epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) r0 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r0, &(0x7f0000000500)=[{}], 0x1, 0x0) epoll_pwait(r0, &(0x7f0000000000), 0x0, 0x1, &(0x7f0000000080)={[0x81]}, 0x8) socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$inet6(0xa, 0x3, 0x3f) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000000c0)=0x5, 0x4) 05:00:14 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) ioctl$TIOCSETD(r0, 0x5423, 0x0) 05:00:14 executing program 4: epoll_create1(0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000001180)={0x90000005}) ioctl$KVM_GET_FPU(0xffffffffffffffff, 0x81a0ae8c, &(0x7f0000000000)) 05:00:14 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x400, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [], [], 'veth1_virt_wifi\x00', 'veth1_to_team\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}}, @common=@ipv6header={{0x28}}]}, @common=@unspec=@STANDARD={0x28}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}}, @common=@icmp6={{0x28}, {0x0, '`\f'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) 05:00:14 executing program 3: r0 = epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000001180)={0x40000000}) 05:00:14 executing program 1: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@local, 0x100, 0x1, 0x3, 0x1, 0x1eb, 0x9}, 0x20) epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) r0 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r0, &(0x7f0000000500)=[{}], 0x1, 0x0) epoll_pwait(r0, &(0x7f0000000000), 0x0, 0x1, &(0x7f0000000080)={[0x81]}, 0x8) r1 = socket$inet6(0xa, 0x3, 0x3f) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000000c0)=0x5, 0x4) 05:00:14 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCGETS(r1, 0x5401, &(0x7f0000000000)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) r2 = socket$inet6(0xa, 0xa, 0x6) setsockopt$inet6_opts(r2, 0x29, 0x39, &(0x7f0000000040)=@routing={0x3b, 0x8, 0x1, 0x6, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @mcast2, @remote]}, 0x48) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f00000000c0)=""/63) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) ioctl$TCGETS(r1, 0x5401, &(0x7f0000000000)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) (async) socket$inet6(0xa, 0xa, 0x6) (async) setsockopt$inet6_opts(r2, 0x29, 0x39, &(0x7f0000000040)=@routing={0x3b, 0x8, 0x1, 0x6, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @mcast2, @remote]}, 0x48) (async) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f00000000c0)=""/63) (async) 05:00:14 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) r1 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r1, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}], 0x6, 0x0) syz_open_pts(r1, 0x20040) r2 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r2, &(0x7f0000000500)=[{}], 0x1, 0x0) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000000)) 05:00:14 executing program 4: epoll_create1(0x0) (async) r0 = socket$l2tp6(0xa, 0x2, 0x73) (async) r1 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000001180)={0x90000005}) (async) ioctl$KVM_GET_FPU(0xffffffffffffffff, 0x81a0ae8c, &(0x7f0000000000)) 05:00:14 executing program 1: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@local, 0x100, 0x1, 0x3, 0x1, 0x1eb, 0x9}, 0x20) epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) r0 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r0, &(0x7f0000000500)=[{}], 0x1, 0x0) r1 = socket$inet6(0xa, 0x3, 0x3f) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000000c0)=0x5, 0x4) 05:00:14 executing program 3: r0 = epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000001180)={0x40000000}) 05:00:14 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x400, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [], [], 'veth1_virt_wifi\x00', 'veth1_to_team\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}}, @common=@ipv6header={{0x28}}]}, @common=@unspec=@STANDARD={0x28}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}}, @common=@icmp6={{0x28}, {0x0, '`\f'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) 05:00:14 executing program 4: epoll_create1(0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000001180)={0x90000005}) ioctl$KVM_GET_FPU(0xffffffffffffffff, 0x81a0ae8c, &(0x7f0000000000)) epoll_create1(0x0) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) epoll_create(0x1) (async) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000001180)={0x90000005}) (async) ioctl$KVM_GET_FPU(0xffffffffffffffff, 0x81a0ae8c, &(0x7f0000000000)) (async) 05:00:14 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCGETS(r1, 0x5401, &(0x7f0000000000)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) (async) r2 = socket$inet6(0xa, 0xa, 0x6) setsockopt$inet6_opts(r2, 0x29, 0x39, &(0x7f0000000040)=@routing={0x3b, 0x8, 0x1, 0x6, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @mcast2, @remote]}, 0x48) (async) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f00000000c0)=""/63) 05:00:14 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) r1 = socket$l2tp6(0xa, 0x2, 0x73) getpeername$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000000c0)=0x1c) epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) r2 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r2, &(0x7f0000000500)=[{}], 0x1, 0x0) epoll_wait(r2, &(0x7f0000000140)=[{}, {}, {}, {}], 0x4, 0x1) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000000)={0x9, {{0xa, 0x4e21, 0x1000, @mcast1, 0x84b}}}, 0x88) 05:00:14 executing program 1: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@local, 0x100, 0x1, 0x3, 0x1, 0x1eb, 0x9}, 0x20) epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3f) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f00000000c0)=0x5, 0x4) 05:00:14 executing program 3: r0 = epoll_create1(0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)={0x40000000}) 05:00:14 executing program 1: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@local, 0x100, 0x1, 0x3, 0x1, 0x1eb, 0x9}, 0x20) epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$inet6(0xa, 0x3, 0x3f) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f00000000c0)=0x5, 0x4) 05:00:14 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28}}, {{@ipv6={@empty, @mcast2, [], [], 'veth1_virt_wifi\x00', 'veth1_to_team\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}}, @common=@ipv6header={{0x28}}]}, @common=@unspec=@STANDARD={0x28}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}}, @common=@icmp6={{0x28}, {0x0, '`\f'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) 05:00:14 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) ioctl$KDMKTONE(r0, 0x4b30, 0x8) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x204041, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r1, &(0x7f0000000500)=[{}], 0x1, 0x0) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000040)=""/142) 05:00:14 executing program 4: r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/binder1\x00', 0x802, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r2 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) r3 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) r4 = socket$l2tp6(0xa, 0x2, 0x73) r5 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f0000000100)={@local}, 0x14) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r4, &(0x7f0000000040)={0x20000008}) r6 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r6, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) getsockopt$IP6T_SO_GET_INFO(r6, 0x29, 0x40, &(0x7f0000000080)={'raw\x00', 0x0, [0x0, 0x2, 0x2, 0x7fff, 0x401]}, &(0x7f0000000000)=0x54) 05:00:14 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) r1 = socket$l2tp6(0xa, 0x2, 0x73) getpeername$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000000c0)=0x1c) epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) r2 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r2, &(0x7f0000000500)=[{}], 0x1, 0x0) epoll_wait(r2, &(0x7f0000000140)=[{}, {}, {}, {}], 0x4, 0x1) r3 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000000)={0x9, {{0xa, 0x4e21, 0x1000, @mcast1, 0x84b}}}, 0x88) 05:00:14 executing program 3: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000001180)={0x40000000}) 05:00:14 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) ioctl$KDMKTONE(r0, 0x4b30, 0x8) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x204041, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r1, &(0x7f0000000500)=[{}], 0x1, 0x0) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000040)=""/142) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) (async) ioctl$KDMKTONE(r0, 0x4b30, 0x8) (async) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x204041, 0x0) (async) syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) (async) epoll_wait(r1, &(0x7f0000000500)=[{}], 0x1, 0x0) (async) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000040)=""/142) (async) 05:00:14 executing program 1: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@local, 0x100, 0x1, 0x3, 0x1, 0x1eb, 0x9}, 0x20) epoll_create1(0x0) r0 = socket$inet6(0xa, 0x3, 0x3f) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f00000000c0)=0x5, 0x4) 05:00:14 executing program 5: r0 = epoll_create1(0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)={0x40000000}) 05:00:14 executing program 3: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000001180)={0x40000000}) 05:00:14 executing program 1: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@local, 0x100, 0x1, 0x3, 0x1, 0x1eb, 0x9}, 0x20) r0 = socket$inet6(0xa, 0x3, 0x3f) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f00000000c0)=0x5, 0x4) 05:00:14 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [0xff, 0xff000000, 0xff, 0xff000000], [0xffffffff, 0xff000000, 0xffffffff, 0xffffffff], 'veth1_virt_wifi\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x33, 0xe6, 0x0, 0x1}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x0, 0x1, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}, @common=@ipv6header={{0x28}, {0x0, 0x56, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [], [], 'syz_tun\x00', 'veth1_to_batadv\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}}, @common=@icmp6={{0x28}, {0x0, '`\f'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) 05:00:14 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x3f) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f00000000c0)=0x5, 0x4) 05:00:14 executing program 4: r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r0) (async) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/binder1\x00', 0x802, 0x0) (async) socket$l2tp6(0xa, 0x2, 0x73) (async, rerun: 32) r2 = socket$l2tp6(0xa, 0x2, 0x73) (rerun: 32) setsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) r3 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) (async) r4 = socket$l2tp6(0xa, 0x2, 0x73) (async, rerun: 64) r5 = socket$l2tp6(0xa, 0x2, 0x73) (rerun: 64) setsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f0000000100)={@local}, 0x14) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r4, &(0x7f0000000040)={0x20000008}) (async, rerun: 64) r6 = socket$l2tp6(0xa, 0x2, 0x73) (rerun: 64) setsockopt$inet6_mreq(r6, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) (async) getsockopt$IP6T_SO_GET_INFO(r6, 0x29, 0x40, &(0x7f0000000080)={'raw\x00', 0x0, [0x0, 0x2, 0x2, 0x7fff, 0x401]}, &(0x7f0000000000)=0x54) 05:00:14 executing program 3: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000001180)={0x40000000}) 05:00:14 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) ioctl$KDMKTONE(r0, 0x4b30, 0x8) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x204041, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r1, &(0x7f0000000500)=[{}], 0x1, 0x0) (async) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000040)=""/142) 05:00:14 executing program 5: r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/binder1\x00', 0x802, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r2 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) r3 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) r4 = socket$l2tp6(0xa, 0x2, 0x73) r5 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f0000000100)={@local}, 0x14) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r4, &(0x7f0000000040)={0x20000008}) r6 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r6, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) getsockopt$IP6T_SO_GET_INFO(r6, 0x29, 0x40, &(0x7f0000000080)={'raw\x00', 0x0, [0x0, 0x2, 0x2, 0x7fff, 0x401]}, &(0x7f0000000000)=0x54) 05:00:14 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x3f) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f00000000c0)=0x5, 0x4) 05:00:14 executing program 0: r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/binder1\x00', 0x802, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r2 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) r3 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) r4 = socket$l2tp6(0xa, 0x2, 0x73) r5 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f0000000100)={@local}, 0x14) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r4, &(0x7f0000000040)={0x20000008}) r6 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r6, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) getsockopt$IP6T_SO_GET_INFO(r6, 0x29, 0x40, &(0x7f0000000080)={'raw\x00', 0x0, [0x0, 0x2, 0x2, 0x7fff, 0x401]}, &(0x7f0000000000)=0x54) [ 593.494918] x_tables: ip6_tables: mh match: only valid for protocol 135 05:00:14 executing program 3: r0 = epoll_create1(0x0) r1 = openat$misdntimer(0xffffffffffffff9c, 0x0, 0x2400, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)={0x40000000}) 05:00:14 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x40000) epoll_wait(r1, &(0x7f0000000500)=[{}], 0x1, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000000), 0x3, 0x4080) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$TIOCGSERIAL(r1, 0x541e, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/94}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) 05:00:14 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [0xff, 0xff000000, 0xff, 0xff000000], [0xffffffff, 0xff000000, 0xffffffff, 0xffffffff], 'veth1_virt_wifi\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x33, 0xe6, 0x0, 0x1}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x0, 0x1, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}, @common=@ipv6header={{0x28}, {0x0, 0x56, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [0xff000000], [0xff000000, 0xff, 0xffffffff, 0xff000000], 'syz_tun\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}, 0x2, 0xfb, 0x5}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}, {0x3, 0xff}}, @common=@icmp6={{0x28}, {0x11, '`\f'}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) 05:00:14 executing program 3: r0 = epoll_create1(0x0) r1 = openat$misdntimer(0xffffffffffffff9c, 0x0, 0x2400, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)={0x40000000}) 05:00:14 executing program 0: r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/binder1\x00', 0x802, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r2 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) r3 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) r4 = socket$l2tp6(0xa, 0x2, 0x73) r5 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f0000000100)={@local}, 0x14) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r4, &(0x7f0000000040)={0x20000008}) r6 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r6, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) getsockopt$IP6T_SO_GET_INFO(r6, 0x29, 0x40, &(0x7f0000000080)={'raw\x00', 0x0, [0x0, 0x2, 0x2, 0x7fff, 0x401]}, &(0x7f0000000000)=0x54) 05:00:14 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x3f) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f00000000c0)=0x5, 0x4) 05:00:14 executing program 4: r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/binder1\x00', 0x802, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r2 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) r3 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) r4 = socket$l2tp6(0xa, 0x2, 0x73) r5 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f0000000100)={@local}, 0x14) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r4, &(0x7f0000000040)={0x20000008}) r6 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r6, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) getsockopt$IP6T_SO_GET_INFO(r6, 0x29, 0x40, &(0x7f0000000080)={'raw\x00', 0x0, [0x0, 0x2, 0x2, 0x7fff, 0x401]}, &(0x7f0000000000)=0x54) epoll_create1(0x0) (async) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r0) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) ioctl$VT_DISALLOCATE(r1, 0x5608) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/binder1\x00', 0x802, 0x0) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) setsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) setsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) setsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f0000000100)={@local}, 0x14) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r4, &(0x7f0000000040)={0x20000008}) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) setsockopt$inet6_mreq(r6, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) (async) getsockopt$IP6T_SO_GET_INFO(r6, 0x29, 0x40, &(0x7f0000000080)={'raw\x00', 0x0, [0x0, 0x2, 0x2, 0x7fff, 0x401]}, &(0x7f0000000000)=0x54) (async) 05:00:14 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x40000) epoll_wait(r1, &(0x7f0000000500)=[{}], 0x1, 0x0) (async) r2 = syz_open_dev$vcsn(&(0x7f0000000000), 0x3, 0x4080) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$TIOCGSERIAL(r1, 0x541e, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/94}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) 05:00:14 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/160}) r1 = epoll_create1(0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000001180)={0xc0002004}) r3 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)={0x20000006}) [ 593.693217] x_tables: ip6_tables: mh match: only valid for protocol 135 05:00:14 executing program 3: r0 = epoll_create1(0x0) r1 = openat$misdntimer(0xffffffffffffff9c, 0x0, 0x2400, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)={0x40000000}) 05:00:14 executing program 0: r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/binder1\x00', 0x802, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r2 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) r3 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) r4 = socket$l2tp6(0xa, 0x2, 0x73) r5 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f0000000100)={@local}, 0x14) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r4, &(0x7f0000000040)={0x20000008}) r6 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r6, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) getsockopt$IP6T_SO_GET_INFO(r6, 0x29, 0x40, &(0x7f0000000080)={'raw\x00', 0x0, [0x0, 0x2, 0x2, 0x7fff, 0x401]}, &(0x7f0000000000)=0x54) 05:00:14 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x40000) epoll_wait(r1, &(0x7f0000000500)=[{}], 0x1, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000000), 0x3, 0x4080) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$TIOCGSERIAL(r1, 0x541e, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/94}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x40000) (async) epoll_wait(r1, &(0x7f0000000500)=[{}], 0x1, 0x0) (async) syz_open_dev$vcsn(&(0x7f0000000000), 0x3, 0x4080) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) (async) ioctl$TIOCGSERIAL(r1, 0x541e, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/94}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) (async) 05:00:14 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x3f) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f00000000c0)=0x5, 0x4) 05:00:14 executing program 4: timer_getoverrun(0x0) r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x1c}}, 0x4000) 05:00:14 executing program 3: r0 = epoll_create1(0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)={0x40000000}) 05:00:14 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/160}) r1 = epoll_create1(0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000001180)={0xc0002004}) r3 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)={0x20000006}) 05:00:15 executing program 0: r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/binder1\x00', 0x802, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r2 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) r3 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) r4 = socket$l2tp6(0xa, 0x2, 0x73) r5 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f0000000100)={@local}, 0x14) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r4, &(0x7f0000000040)={0x20000008}) r6 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r6, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) 05:00:15 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x7, 0x4, 0x0, 0x800, 0xff, "22a11e541c4473854681875ab89acb8e992d2b", 0x4, 0x40}) 05:00:15 executing program 4: timer_getoverrun(0x0) (async) r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x1c}}, 0x4000) 05:00:15 executing program 3: epoll_create1(0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000001180)={0x40000000}) 05:00:15 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f00000000c0)=0x5, 0x4) 05:00:15 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/160}) r1 = epoll_create1(0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000001180)={0xc0002004}) r3 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)={0x20000006}) 05:00:15 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x7, 0x4, 0x0, 0x800, 0xff, "22a11e541c4473854681875ab89acb8e992d2b", 0x4, 0x40}) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) (async) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x7, 0x4, 0x0, 0x800, 0xff, "22a11e541c4473854681875ab89acb8e992d2b", 0x4, 0x40}) (async) 05:00:15 executing program 0: r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/binder1\x00', 0x802, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r2 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) r3 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) r4 = socket$l2tp6(0xa, 0x2, 0x73) r5 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f0000000100)={@local}, 0x14) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r4, &(0x7f0000000040)={0x20000008}) socket$l2tp6(0xa, 0x2, 0x73) 05:00:15 executing program 4: timer_getoverrun(0x0) r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x1c}}, 0x4000) timer_getoverrun(0x0) (async) epoll_create1(0x0) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x1c}}, 0x4000) (async) 05:00:15 executing program 3: epoll_create1(0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000001180)={0x40000000}) 05:00:15 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x7, 0x4, 0x0, 0x800, 0xff, "22a11e541c4473854681875ab89acb8e992d2b", 0x4, 0x40}) 05:00:15 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/160}) r1 = epoll_create1(0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000001180)={0xc0002004}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000140)={0x20000006}) 05:00:15 executing program 0: r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/binder1\x00', 0x802, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r2 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) r3 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) r4 = socket$l2tp6(0xa, 0x2, 0x73) r5 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f0000000100)={@local}, 0x14) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r4, &(0x7f0000000040)={0x20000008}) 05:00:15 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f00000000c0)=0x5, 0x4) 05:00:15 executing program 4: r0 = epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) r1 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r1, &(0x7f0000000500)=[{}], 0x1, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000000), 0x51e, 0x155c00) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000001180)={0x70002011}) 05:00:15 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) r1 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r1, &(0x7f0000000500)=[{}], 0x1, 0x0) r2 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r2, &(0x7f0000000500)=[{}], 0x1, 0x0) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000040)=0x1) ioctl$VT_WAITACTIVE(r0, 0x5607) ioctl$TCGETS2(r0, 0x802c542a, &(0x7f0000000000)) 05:00:15 executing program 3: epoll_create1(0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000001180)={0x40000000}) 05:00:15 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/160}) r1 = epoll_create1(0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000001180)={0xc0002004}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000140)={0x20000006}) 05:00:15 executing program 0: r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/binder1\x00', 0x802, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r2 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) r3 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) socket$l2tp6(0xa, 0x2, 0x73) r4 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r4, 0x29, 0x14, &(0x7f0000000100)={@local}, 0x14) 05:00:15 executing program 4: r0 = epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) r1 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r1, &(0x7f0000000500)=[{}], 0x1, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000000), 0x51e, 0x155c00) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000001180)={0x70002011}) epoll_create1(0x0) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) (async) epoll_wait(r1, &(0x7f0000000500)=[{}], 0x1, 0x0) (async) syz_open_dev$vcsn(&(0x7f0000000000), 0x51e, 0x155c00) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000001180)={0x70002011}) (async) 05:00:15 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) (async) r1 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r1, &(0x7f0000000500)=[{}], 0x1, 0x0) r2 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r2, &(0x7f0000000500)=[{}], 0x1, 0x0) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000040)=0x1) (async) ioctl$VT_WAITACTIVE(r0, 0x5607) (async) ioctl$TCGETS2(r0, 0x802c542a, &(0x7f0000000000)) 05:00:15 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f00000000c0)=0x5, 0x4) 05:00:15 executing program 3: r0 = epoll_create1(0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000001180)={0x40000000}) 05:00:15 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/160}) r1 = epoll_create1(0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000001180)={0xc0002004}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000140)={0x20000006}) 05:00:15 executing program 0: r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/binder1\x00', 0x802, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r2 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) r3 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) socket$l2tp6(0xa, 0x2, 0x73) socket$l2tp6(0xa, 0x2, 0x73) 05:00:15 executing program 4: r0 = epoll_create1(0x0) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) r1 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r1, &(0x7f0000000500)=[{}], 0x1, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000000), 0x51e, 0x155c00) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000001180)={0x70002011}) 05:00:15 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/160}) epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000140)={0x20000006}) 05:00:15 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) (async) r1 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r1, &(0x7f0000000500)=[{}], 0x1, 0x0) (async, rerun: 32) r2 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) (rerun: 32) epoll_wait(r2, &(0x7f0000000500)=[{}], 0x1, 0x0) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000040)=0x1) ioctl$VT_WAITACTIVE(r0, 0x5607) ioctl$TCGETS2(r0, 0x802c542a, &(0x7f0000000000)) 05:00:15 executing program 4: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f0000000000)={0x40000000}) socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) 05:00:15 executing program 3: r0 = epoll_create1(0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000001180)={0x40000000}) 05:00:15 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/160}) epoll_create1(0x0) r1 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000140)={0x20000006}) 05:00:15 executing program 0: r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/binder1\x00', 0x802, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r2 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) r3 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) socket$l2tp6(0xa, 0x2, 0x73) 05:00:15 executing program 2: ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x34) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000040)="2688b799196dc050df5dc73bdb047c90183ec7f2e641846c16b2faebc3998e231900449f3b92ee1dfb62e2ed3e0f4568fb522b64c2ea453c04e8f8ed00d8ea5d760cbe66aedfc58f4fe6a22e", 0x4c, 0x8000, 0x0, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10e5864299b5eb31}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x0, 0x0, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x5}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast1}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000081}, 0x40000) ioctl$TCGETS(r0, 0x5401, &(0x7f0000000280)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1) 05:00:15 executing program 1: socket$inet6(0xa, 0x3, 0x3f) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000000c0)=0x5, 0x4) 05:00:15 executing program 4: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) (async) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f0000000000)={0x40000000}) socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) 05:00:15 executing program 3: r0 = epoll_create1(0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000001180)={0x40000000}) 05:00:15 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/160}) epoll_create1(0x0) r1 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000140)={0x20000006}) 05:00:15 executing program 0: r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/binder1\x00', 0x802, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r2 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) r3 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) 05:00:15 executing program 1: socket$inet6(0xa, 0x3, 0x3f) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000000c0)=0x5, 0x4) 05:00:15 executing program 4: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f0000000000)={0x40000000}) socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) epoll_create1(0x0) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f0000000000)={0x40000000}) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) 05:00:15 executing program 2: ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x34) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000040)="2688b799196dc050df5dc73bdb047c90183ec7f2e641846c16b2faebc3998e231900449f3b92ee1dfb62e2ed3e0f4568fb522b64c2ea453c04e8f8ed00d8ea5d760cbe66aedfc58f4fe6a22e", 0x4c, 0x8000, 0x0, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10e5864299b5eb31}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x0, 0x0, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x5}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast1}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000081}, 0x40000) ioctl$TCGETS(r0, 0x5401, &(0x7f0000000280)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x34) (async) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000040)="2688b799196dc050df5dc73bdb047c90183ec7f2e641846c16b2faebc3998e231900449f3b92ee1dfb62e2ed3e0f4568fb522b64c2ea453c04e8f8ed00d8ea5d760cbe66aedfc58f4fe6a22e", 0x4c, 0x8000, 0x0, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10e5864299b5eb31}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) (async) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x0, 0x0, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x5}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast1}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000081}, 0x40000) (async) ioctl$TCGETS(r0, 0x5401, &(0x7f0000000280)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1) (async) 05:00:15 executing program 3: r0 = epoll_create1(0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, 0x0) 05:00:15 executing program 0: r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/binder1\x00', 0x802, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r2 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) socket$l2tp6(0xa, 0x2, 0x73) 05:00:15 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/160}) epoll_create1(0x0) r1 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000140)={0x20000006}) 05:00:15 executing program 1: socket$inet6(0xa, 0x3, 0x3f) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000000c0)=0x5, 0x4) 05:00:15 executing program 4: ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000000, 0x8, 0x8, 0x8, 0x40, 0x10000, 0x8e}]}) r0 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000001180)) 05:00:15 executing program 3: r0 = epoll_create1(0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, 0x0) 05:00:15 executing program 0: r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/binder1\x00', 0x802, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r2 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) 05:00:15 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x3f) setsockopt$inet6_mtu(r0, 0x29, 0x17, 0x0, 0x0) 05:00:15 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/160}) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000140)={0x20000006}) 05:00:15 executing program 2: ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x34) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000040)="2688b799196dc050df5dc73bdb047c90183ec7f2e641846c16b2faebc3998e231900449f3b92ee1dfb62e2ed3e0f4568fb522b64c2ea453c04e8f8ed00d8ea5d760cbe66aedfc58f4fe6a22e", 0x4c, 0x8000, 0x0, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10e5864299b5eb31}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x0, 0x0, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x5}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast1}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000081}, 0x40000) ioctl$TCGETS(r0, 0x5401, &(0x7f0000000280)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x34) (async) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000040)="2688b799196dc050df5dc73bdb047c90183ec7f2e641846c16b2faebc3998e231900449f3b92ee1dfb62e2ed3e0f4568fb522b64c2ea453c04e8f8ed00d8ea5d760cbe66aedfc58f4fe6a22e", 0x4c, 0x8000, 0x0, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10e5864299b5eb31}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) (async) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x0, 0x0, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x5}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast1}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000081}, 0x40000) (async) ioctl$TCGETS(r0, 0x5401, &(0x7f0000000280)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1) (async) 05:00:15 executing program 4: ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000000, 0x8, 0x8, 0x8, 0x40, 0x10000, 0x8e}]}) r0 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000001180)) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000000, 0x8, 0x8, 0x8, 0x40, 0x10000, 0x8e}]}) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000001180)) (async) 05:00:15 executing program 3: r0 = epoll_create1(0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, 0x0) 05:00:15 executing program 0: r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/binder1\x00', 0x802, 0x0) socket$l2tp6(0xa, 0x2, 0x73) socket$l2tp6(0xa, 0x2, 0x73) 05:00:15 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x3f) setsockopt$inet6_mtu(r0, 0x29, 0x17, 0x0, 0x0) 05:00:15 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)={0x20000006}) 05:00:15 executing program 3: r0 = epoll_create1(0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) 05:00:16 executing program 0: r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/binder1\x00', 0x802, 0x0) socket$l2tp6(0xa, 0x2, 0x73) 05:00:16 executing program 4: ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000000, 0x8, 0x8, 0x8, 0x40, 0x10000, 0x8e}]}) (async) r0 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000001180)) 05:00:16 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)={0x20000006}) 05:00:16 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r0, &(0x7f0000000500)=[{}], 0x1, 0x0) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)=0x1b) 05:00:16 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x3f) setsockopt$inet6_mtu(r0, 0x29, 0x17, 0x0, 0x0) 05:00:16 executing program 0: r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/binder1\x00', 0x802, 0x0) 05:00:16 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = epoll_create(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)={0x20000006}) 05:00:16 executing program 3: ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x34) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000040)="2688b799196dc050df5dc73bdb047c90183ec7f2e641846c16b2faebc3998e231900449f3b92ee1dfb62e2ed3e0f4568fb522b64c2ea453c04e8f8ed00d8ea5d760cbe66aedfc58f4fe6a22e", 0x4c, 0x8000, 0x0, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10e5864299b5eb31}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x0, 0x0, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x5}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast1}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000081}, 0x40000) ioctl$TCGETS(r0, 0x5401, &(0x7f0000000280)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1) 05:00:16 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@empty, @remote, @loopback, 0xa3d, 0x200, 0x3f, 0x100, 0x7, 0x414b0290}) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f00000003c0)={{0xa, 0x4e24, 0xbd7c, @local}, {0xa, 0x4e23, 0x3ff, @local, 0xfffffe00}, 0xc5, [0x40000000, 0x8, 0x856, 0x5, 0x9, 0x6, 0x9, 0xffff0000]}, 0x5c) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10e5864299b5eb31}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) read$snapshot(r2, &(0x7f0000000280)=""/117, 0x75) ioctl$SNAPSHOT_CREATE_IMAGE(r2, 0x40043311, &(0x7f0000000300)) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r2, 0x330f, 0x3) socketpair(0x9, 0x2, 0x2, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) read$snapshot(r2, &(0x7f00000004c0)=""/79, 0x4f) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), r2) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x38, r4, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x100}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010100}]}, 0x38}}, 0xc000) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, r4, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x6}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'batadv_slave_0\x00'}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x6}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7fffffff}]}, 0x54}, 0x1, 0x0, 0x0, 0xc4}, 0x10) r5 = epoll_create1(0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_TRANSLATE(r6, 0xc018ae85, &(0x7f00000001c0)={0x1000, 0x5000, 0x2, 0xff, 0x1f}) r7 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r7, &(0x7f0000001180)) 05:00:16 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x3f) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f00000000c0), 0x4) 05:00:16 executing program 0: r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) 05:00:16 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r0, &(0x7f0000000500)=[{}], 0x1, 0x0) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)=0x1b) syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) (async) epoll_wait(r0, &(0x7f0000000500)=[{}], 0x1, 0x0) (async) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)=0x1b) (async) 05:00:16 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = epoll_create(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)={0x20000006}) 05:00:16 executing program 0: r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r0) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) 05:00:16 executing program 1: r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/binder1\x00', 0x802, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r2 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) r3 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) socket$l2tp6(0xa, 0x2, 0x73) r4 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r4, 0x29, 0x14, &(0x7f0000000100)={@local}, 0x14) 05:00:16 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@empty, @remote, @loopback, 0xa3d, 0x200, 0x3f, 0x100, 0x7, 0x414b0290}) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f00000003c0)={{0xa, 0x4e24, 0xbd7c, @local}, {0xa, 0x4e23, 0x3ff, @local, 0xfffffe00}, 0xc5, [0x40000000, 0x8, 0x856, 0x5, 0x9, 0x6, 0x9, 0xffff0000]}, 0x5c) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10e5864299b5eb31}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) read$snapshot(r2, &(0x7f0000000280)=""/117, 0x75) ioctl$SNAPSHOT_CREATE_IMAGE(r2, 0x40043311, &(0x7f0000000300)) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r2, 0x330f, 0x3) socketpair(0x9, 0x2, 0x2, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) read$snapshot(r2, &(0x7f00000004c0)=""/79, 0x4f) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), r2) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x38, r4, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x100}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010100}]}, 0x38}}, 0xc000) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, r4, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x6}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'batadv_slave_0\x00'}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x6}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7fffffff}]}, 0x54}, 0x1, 0x0, 0x0, 0xc4}, 0x10) r5 = epoll_create1(0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_TRANSLATE(r6, 0xc018ae85, &(0x7f00000001c0)={0x1000, 0x5000, 0x2, 0xff, 0x1f}) r7 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r7, &(0x7f0000001180)) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@empty, @remote, @loopback, 0xa3d, 0x200, 0x3f, 0x100, 0x7, 0x414b0290}) (async) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f00000003c0)={{0xa, 0x4e24, 0xbd7c, @local}, {0xa, 0x4e23, 0x3ff, @local, 0xfffffe00}, 0xc5, [0x40000000, 0x8, 0x856, 0x5, 0x9, 0x6, 0x9, 0xffff0000]}, 0x5c) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10e5864299b5eb31}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) (async) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) (async) read$snapshot(r2, &(0x7f0000000280)=""/117, 0x75) (async) ioctl$SNAPSHOT_CREATE_IMAGE(r2, 0x40043311, &(0x7f0000000300)) (async) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r2, 0x330f, 0x3) (async) socketpair(0x9, 0x2, 0x2, &(0x7f0000000380)) (async) read$snapshot(r2, &(0x7f00000004c0)=""/79, 0x4f) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), r2) (async) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x38, r4, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x100}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010100}]}, 0x38}}, 0xc000) (async) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, r4, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x6}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'batadv_slave_0\x00'}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x6}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7fffffff}]}, 0x54}, 0x1, 0x0, 0x0, 0xc4}, 0x10) (async) epoll_create1(0x0) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) (async) ioctl$KVM_TRANSLATE(r6, 0xc018ae85, &(0x7f00000001c0)={0x1000, 0x5000, 0x2, 0xff, 0x1f}) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r7, &(0x7f0000001180)) (async) 05:00:16 executing program 3: ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x34) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000040)="2688b799196dc050df5dc73bdb047c90183ec7f2e641846c16b2faebc3998e231900449f3b92ee1dfb62e2ed3e0f4568fb522b64c2ea453c04e8f8ed00d8ea5d760cbe66aedfc58f4fe6a22e", 0x4c, 0x8000, 0x0, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10e5864299b5eb31}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x0, 0x0, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x5}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast1}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000081}, 0x40000) ioctl$TCGETS(r0, 0x5401, &(0x7f0000000280)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1) 05:00:16 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r0, &(0x7f0000000500)=[{}], 0x1, 0x0) (async) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)=0x1b) 05:00:16 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = epoll_create(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)={0x20000006}) 05:00:16 executing program 0: r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r0) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) 05:00:16 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000140)={0x20000006}) 05:00:16 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000000)={0x1, 0x1a, &(0x7f00000002c0)="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"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) 05:00:16 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/160}) r1 = epoll_create1(0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000001180)={0xc0002004}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000140)={0x20000006}) 05:00:16 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@empty, @remote, @loopback, 0xa3d, 0x200, 0x3f, 0x100, 0x7, 0x414b0290}) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f00000003c0)={{0xa, 0x4e24, 0xbd7c, @local}, {0xa, 0x4e23, 0x3ff, @local, 0xfffffe00}, 0xc5, [0x40000000, 0x8, 0x856, 0x5, 0x9, 0x6, 0x9, 0xffff0000]}, 0x5c) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10e5864299b5eb31}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) read$snapshot(r2, &(0x7f0000000280)=""/117, 0x75) ioctl$SNAPSHOT_CREATE_IMAGE(r2, 0x40043311, &(0x7f0000000300)) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r2, 0x330f, 0x3) socketpair(0x9, 0x2, 0x2, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) read$snapshot(r2, &(0x7f00000004c0)=""/79, 0x4f) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), r2) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x38, r4, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x100}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010100}]}, 0x38}}, 0xc000) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, r4, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x6}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'batadv_slave_0\x00'}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x6}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7fffffff}]}, 0x54}, 0x1, 0x0, 0x0, 0xc4}, 0x10) r5 = epoll_create1(0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_TRANSLATE(r6, 0xc018ae85, &(0x7f00000001c0)={0x1000, 0x5000, 0x2, 0xff, 0x1f}) r7 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r7, &(0x7f0000001180)) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@empty, @remote, @loopback, 0xa3d, 0x200, 0x3f, 0x100, 0x7, 0x414b0290}) (async) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f00000003c0)={{0xa, 0x4e24, 0xbd7c, @local}, {0xa, 0x4e23, 0x3ff, @local, 0xfffffe00}, 0xc5, [0x40000000, 0x8, 0x856, 0x5, 0x9, 0x6, 0x9, 0xffff0000]}, 0x5c) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10e5864299b5eb31}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) (async) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) (async) read$snapshot(r2, &(0x7f0000000280)=""/117, 0x75) (async) ioctl$SNAPSHOT_CREATE_IMAGE(r2, 0x40043311, &(0x7f0000000300)) (async) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r2, 0x330f, 0x3) (async) socketpair(0x9, 0x2, 0x2, &(0x7f0000000380)) (async) read$snapshot(r2, &(0x7f00000004c0)=""/79, 0x4f) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), r2) (async) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x38, r4, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x100}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010100}]}, 0x38}}, 0xc000) (async) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, r4, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x6}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'batadv_slave_0\x00'}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x6}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7fffffff}]}, 0x54}, 0x1, 0x0, 0x0, 0xc4}, 0x10) (async) epoll_create1(0x0) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) (async) ioctl$KVM_TRANSLATE(r6, 0xc018ae85, &(0x7f00000001c0)={0x1000, 0x5000, 0x2, 0xff, 0x1f}) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r7, &(0x7f0000001180)) (async) 05:00:16 executing program 3: ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x34) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000040)="2688b799196dc050df5dc73bdb047c90183ec7f2e641846c16b2faebc3998e231900449f3b92ee1dfb62e2ed3e0f4568fb522b64c2ea453c04e8f8ed00d8ea5d760cbe66aedfc58f4fe6a22e", 0x4c, 0x8000, 0x0, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10e5864299b5eb31}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x0, 0x0, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x5}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast1}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000081}, 0x40000) ioctl$TCGETS(r0, 0x5401, &(0x7f0000000280)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1) 05:00:16 executing program 0: r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r0) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) 05:00:16 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000140)={0x20000006}) 05:00:16 executing program 0: epoll_create1(0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_DISALLOCATE(r0, 0x5608) 05:00:16 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000000)={0x1, 0x1a, &(0x7f00000002c0)="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"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) 05:00:16 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000000)={0x1, 0x1a, &(0x7f00000002c0)="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"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) 05:00:16 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_DISALLOCATE(r0, 0x5608) 05:00:16 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000000)={0x1, 0x1a, &(0x7f00000002c0)="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"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000000)={0x1, 0x1a, &(0x7f00000002c0)="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"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) (async) 05:00:16 executing program 4: epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) ioctl$BINDER_CTL_ADD(0xffffffffffffffff, 0xc1086201, &(0x7f0000000000)={'custom1\x00'}) 05:00:16 executing program 3: ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x34) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000040)="2688b799196dc050df5dc73bdb047c90183ec7f2e641846c16b2faebc3998e231900449f3b92ee1dfb62e2ed3e0f4568fb522b64c2ea453c04e8f8ed00d8ea5d760cbe66aedfc58f4fe6a22e", 0x4c, 0x8000, 0x0, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10e5864299b5eb31}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x0, 0x0, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x5}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast1}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000081}, 0x40000) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1) 05:00:16 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000140)={0x20000006}) 05:00:16 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000140)={0x20000006}) 05:00:16 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) 05:00:16 executing program 4: epoll_create1(0x0) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) ioctl$BINDER_CTL_ADD(0xffffffffffffffff, 0xc1086201, &(0x7f0000000000)={'custom1\x00'}) 05:00:16 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/160}) r1 = epoll_create1(0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000001180)={0xc0002004}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000140)={0x20000006}) 05:00:16 executing program 5: socket$l2tp6(0xa, 0x2, 0x73) r0 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000140)={0x20000006}) 05:00:16 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$VT_ACTIVATE(r0, 0x5606, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) 05:00:16 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) 05:00:16 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/160}) r1 = epoll_create1(0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000001180)={0xc0002004}) r3 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)={0x20000006}) 05:00:16 executing program 5: socket$l2tp6(0xa, 0x2, 0x73) r0 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000140)={0x20000006}) 05:00:16 executing program 3: ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x34) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000040)="2688b799196dc050df5dc73bdb047c90183ec7f2e641846c16b2faebc3998e231900449f3b92ee1dfb62e2ed3e0f4568fb522b64c2ea453c04e8f8ed00d8ea5d760cbe66aedfc58f4fe6a22e", 0x4c, 0x8000, 0x0, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10e5864299b5eb31}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1) 05:00:16 executing program 4: epoll_create1(0x0) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) ioctl$BINDER_CTL_ADD(0xffffffffffffffff, 0xc1086201, &(0x7f0000000000)={'custom1\x00'}) 05:00:16 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$VT_ACTIVATE(r0, 0x5606, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) 05:00:16 executing program 1: ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x34) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000040)="2688b799196dc050df5dc73bdb047c90183ec7f2e641846c16b2faebc3998e231900449f3b92ee1dfb62e2ed3e0f4568fb522b64c2ea453c04e8f8ed00d8ea5d760cbe66aedfc58f4fe6a22e", 0x4c, 0x8000, 0x0, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10e5864299b5eb31}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x0, 0x0, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x5}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast1}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000081}, 0x40000) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1) 05:00:16 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) 05:00:16 executing program 5: socket$l2tp6(0xa, 0x2, 0x73) r0 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000140)={0x20000006}) 05:00:16 executing program 4: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)={0x90000006}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x7fffffff, 0x0, 0x0, 0x0, 0x190b, 0x2}, 0x20) r2 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10e5864299b5eb31}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) read$snapshot(r4, &(0x7f0000000280)=""/117, 0x75) ioctl$SNAPSHOT_CREATE_IMAGE(r4, 0x40043311, &(0x7f0000000300)) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r4, 0x330f, 0x3) socketpair(0x9, 0x2, 0x2, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) read$snapshot(r4, &(0x7f00000004c0)=""/79, 0x4f) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), r4) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)=ANY=[@ANYBLOB='\x00\x00@\x00', @ANYRES16=r6, @ANYBLOB="00042dbd7000fedbdf250800000014002000ff01000000000000000000000000000106001c00000100000800180064010100"], 0x38}}, 0xc000) sendmsg$L2TP_CMD_TUNNEL_GET(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r6, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x4e5}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4004040) epoll_wait(r2, &(0x7f0000000500), 0x0, 0x0) r7 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f00000008c0)={@mcast1}, 0x14) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r7, &(0x7f0000000040)={0x8}) 05:00:16 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/160}) r1 = epoll_create1(0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000001180)={0xc0002004}) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x37f}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r3 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)={0x20000006}) 05:00:17 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$VT_ACTIVATE(r0, 0x5606, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$VT_ACTIVATE(r0, 0x5606, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) (async) 05:00:17 executing program 3: ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x34) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000040)="2688b799196dc050df5dc73bdb047c90183ec7f2e641846c16b2faebc3998e231900449f3b92ee1dfb62e2ed3e0f4568fb522b64c2ea453c04e8f8ed00d8ea5d760cbe66aedfc58f4fe6a22e", 0x4c, 0x8000, 0x0, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10e5864299b5eb31}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1) 05:00:17 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0) 05:00:17 executing program 1: ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x34) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000040)="2688b799196dc050df5dc73bdb047c90183ec7f2e641846c16b2faebc3998e231900449f3b92ee1dfb62e2ed3e0f4568fb522b64c2ea453c04e8f8ed00d8ea5d760cbe66aedfc58f4fe6a22e", 0x4c, 0x8000, 0x0, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10e5864299b5eb31}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x0, 0x0, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x5}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast1}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000081}, 0x40000) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1) 05:00:17 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/160}) r1 = epoll_create1(0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000001180)={0xc0002004}) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x37f}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r3 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)={0x20000006}) 05:00:17 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCGETS(r0, 0x5401, &(0x7f0000000080)) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000040)={0x9, &(0x7f0000000000)=[{0x2, 0x200}, {0x2, 0x987}, {0x400, 0x7}, {0x4}, {0x9a42, 0xef}, {0x800, 0x20}, {0x3f, 0xad97}, {0xa0, 0x3}, {0x3ff, 0x9}]}) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)=0x1b) 05:00:17 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0) 05:00:17 executing program 4: r0 = epoll_create1(0x0) (async) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)={0x90000006}) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x7fffffff, 0x0, 0x0, 0x0, 0x190b, 0x2}, 0x20) r2 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10e5864299b5eb31}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) read$snapshot(r4, &(0x7f0000000280)=""/117, 0x75) ioctl$SNAPSHOT_CREATE_IMAGE(r4, 0x40043311, &(0x7f0000000300)) (async) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r4, 0x330f, 0x3) (async) socketpair(0x9, 0x2, 0x2, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) read$snapshot(r4, &(0x7f00000004c0)=""/79, 0x4f) (async) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), r4) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)=ANY=[@ANYBLOB='\x00\x00@\x00', @ANYRES16=r6, @ANYBLOB="00042dbd7000fedbdf250800000014002000ff01000000000000000000000000000106001c00000100000800180064010100"], 0x38}}, 0xc000) (async) sendmsg$L2TP_CMD_TUNNEL_GET(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r6, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x4e5}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4004040) (async) epoll_wait(r2, &(0x7f0000000500), 0x0, 0x0) r7 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f00000008c0)={@mcast1}, 0x14) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r7, &(0x7f0000000040)={0x8}) 05:00:17 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/160}) r1 = epoll_create1(0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000001180)={0xc0002004}) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x37f}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r3 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)={0x20000006}) 05:00:17 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCGETS(r0, 0x5401, &(0x7f0000000080)) (async) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000040)={0x9, &(0x7f0000000000)=[{0x2, 0x200}, {0x2, 0x987}, {0x400, 0x7}, {0x4}, {0x9a42, 0xef}, {0x800, 0x20}, {0x3f, 0xad97}, {0xa0, 0x3}, {0x3ff, 0x9}]}) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)=0x1b) 05:00:17 executing program 3: ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x34) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000040)="2688b799196dc050df5dc73bdb047c90183ec7f2e641846c16b2faebc3998e231900449f3b92ee1dfb62e2ed3e0f4568fb522b64c2ea453c04e8f8ed00d8ea5d760cbe66aedfc58f4fe6a22e", 0x4c, 0x8000, 0x0, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1) 05:00:17 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0) 05:00:17 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/160}) r1 = epoll_create1(0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000001180)={0xc0002004}) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x37f}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) epoll_create(0x9) 05:00:17 executing program 4: r0 = epoll_create1(0x0) (async) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)={0x90000006}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x7fffffff, 0x0, 0x0, 0x0, 0x190b, 0x2}, 0x20) (async) r2 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10e5864299b5eb31}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) read$snapshot(r4, &(0x7f0000000280)=""/117, 0x75) ioctl$SNAPSHOT_CREATE_IMAGE(r4, 0x40043311, &(0x7f0000000300)) (async, rerun: 64) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r4, 0x330f, 0x3) (async, rerun: 64) socketpair(0x9, 0x2, 0x2, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) (async) read$snapshot(r4, &(0x7f00000004c0)=""/79, 0x4f) (async) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), r4) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)=ANY=[@ANYBLOB='\x00\x00@\x00', @ANYRES16=r6, @ANYBLOB="00042dbd7000fedbdf250800000014002000ff01000000000000000000000000000106001c00000100000800180064010100"], 0x38}}, 0xc000) (async) sendmsg$L2TP_CMD_TUNNEL_GET(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r6, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x4e5}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4004040) (async) epoll_wait(r2, &(0x7f0000000500), 0x0, 0x0) (async) r7 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f00000008c0)={@mcast1}, 0x14) (async) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r7, &(0x7f0000000040)={0x8}) 05:00:17 executing program 1: ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x34) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000040)="2688b799196dc050df5dc73bdb047c90183ec7f2e641846c16b2faebc3998e231900449f3b92ee1dfb62e2ed3e0f4568fb522b64c2ea453c04e8f8ed00d8ea5d760cbe66aedfc58f4fe6a22e", 0x4c, 0x8000, 0x0, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10e5864299b5eb31}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x0, 0x0, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x5}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast1}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000081}, 0x40000) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1) 05:00:17 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) 05:00:17 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/160}) r1 = epoll_create1(0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000001180)={0xc0002004}) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x37f}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) 05:00:17 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCGETS(r0, 0x5401, &(0x7f0000000080)) (async) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000040)={0x9, &(0x7f0000000000)=[{0x2, 0x200}, {0x2, 0x987}, {0x400, 0x7}, {0x4}, {0x9a42, 0xef}, {0x800, 0x20}, {0x3f, 0xad97}, {0xa0, 0x3}, {0x3ff, 0x9}]}) (async) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)=0x1b) 05:00:17 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) 05:00:17 executing program 3: ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x34) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000040)="2688b799196dc050df5dc73bdb047c90183ec7f2e641846c16b2faebc3998e231900449f3b92ee1dfb62e2ed3e0f4568fb522b64c2ea453c04e8f8ed00d8ea5d760cbe66aedfc58f4fe6a22e", 0x4c, 0x8000, 0x0, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1) 05:00:17 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/160}) r1 = epoll_create1(0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000001180)={0xc0002004}) 05:00:17 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) 05:00:17 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$TCGETS(r1, 0x5401, &(0x7f0000000080)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) 05:00:17 executing program 1: ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x34) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000040)="2688b799196dc050df5dc73bdb047c90183ec7f2e641846c16b2faebc3998e231900449f3b92ee1dfb62e2ed3e0f4568fb522b64c2ea453c04e8f8ed00d8ea5d760cbe66aedfc58f4fe6a22e", 0x4c, 0x8000, 0x0, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10e5864299b5eb31}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1) 05:00:17 executing program 4: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) r2 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r2, &(0x7f0000000500)=[{}], 0x1, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f0000000000)={0x80000001}) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000040)=0x2, 0x4) 05:00:17 executing program 5: ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x34) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000040)="2688b799196dc050df5dc73bdb047c90183ec7f2e641846c16b2faebc3998e231900449f3b92ee1dfb62e2ed3e0f4568fb522b64c2ea453c04e8f8ed00d8ea5d760cbe66aedfc58f4fe6a22e", 0x4c, 0x8000, 0x0, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1) 05:00:17 executing program 3: ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x34) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000040)="2688b799196dc050df5dc73bdb047c90183ec7f2e641846c16b2faebc3998e231900449f3b92ee1dfb62e2ed3e0f4568fb522b64c2ea453c04e8f8ed00d8ea5d760cbe66aedfc58f4fe6a22e", 0x4c, 0x8000, 0x0, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1) 05:00:17 executing program 4: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) r2 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r2, &(0x7f0000000500)=[{}], 0x1, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f0000000000)={0x80000001}) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000040)=0x2, 0x4) epoll_create1(0x0) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) (async) syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) (async) epoll_wait(r2, &(0x7f0000000500)=[{}], 0x1, 0x0) (async) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) (async) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f0000000000)={0x80000001}) (async) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000040)=0x2, 0x4) (async) 05:00:17 executing program 1: ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x34) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000040)="2688b799196dc050df5dc73bdb047c90183ec7f2e641846c16b2faebc3998e231900449f3b92ee1dfb62e2ed3e0f4568fb522b64c2ea453c04e8f8ed00d8ea5d760cbe66aedfc58f4fe6a22e", 0x4c, 0x8000, 0x0, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1) 05:00:17 executing program 4: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) (async) r2 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r2, &(0x7f0000000500)=[{}], 0x1, 0x0) (async) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f0000000000)={0x80000001}) (async) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000040)=0x2, 0x4) 05:00:17 executing program 5: ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x34) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000040)="2688b799196dc050df5dc73bdb047c90183ec7f2e641846c16b2faebc3998e231900449f3b92ee1dfb62e2ed3e0f4568fb522b64c2ea453c04e8f8ed00d8ea5d760cbe66aedfc58f4fe6a22e", 0x4c, 0x8000, 0x0, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1) 05:00:17 executing program 3: ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x34) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000040)="2688b799196dc050df5dc73bdb047c90183ec7f2e641846c16b2faebc3998e231900449f3b92ee1dfb62e2ed3e0f4568fb522b64c2ea453c04e8f8ed00d8ea5d760cbe66aedfc58f4fe6a22e", 0x4c, 0x8000, 0x0, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10e5864299b5eb31}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1) 05:00:17 executing program 1: ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x34) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000040)="2688b799196dc050df5dc73bdb047c90183ec7f2e641846c16b2faebc3998e231900449f3b92ee1dfb62e2ed3e0f4568fb522b64c2ea453c04e8f8ed00d8ea5d760cbe66aedfc58f4fe6a22e", 0x4c, 0x8000, 0x0, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1) 05:00:17 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/160}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000001180)={0xc0002004}) 05:00:18 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$TCGETS(r1, 0x5401, &(0x7f0000000080)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) (async) ioctl$TCGETS(r1, 0x5401, &(0x7f0000000080)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) (async) 05:00:18 executing program 4: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) r2 = syz_open_dev$vcsn(&(0x7f0000000000), 0xfff, 0x40140) r3 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000040)) 05:00:18 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/160}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000001180)={0xc0002004}) 05:00:18 executing program 5: ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x34) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000040)="2688b799196dc050df5dc73bdb047c90183ec7f2e641846c16b2faebc3998e231900449f3b92ee1dfb62e2ed3e0f4568fb522b64c2ea453c04e8f8ed00d8ea5d760cbe66aedfc58f4fe6a22e", 0x4c, 0x8000, 0x0, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1) 05:00:18 executing program 3: ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x34) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000040)="2688b799196dc050df5dc73bdb047c90183ec7f2e641846c16b2faebc3998e231900449f3b92ee1dfb62e2ed3e0f4568fb522b64c2ea453c04e8f8ed00d8ea5d760cbe66aedfc58f4fe6a22e", 0x4c, 0x8000, 0x0, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10e5864299b5eb31}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1) 05:00:18 executing program 1: ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x34) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000040)="2688b799196dc050df5dc73bdb047c90183ec7f2e641846c16b2faebc3998e231900449f3b92ee1dfb62e2ed3e0f4568fb522b64c2ea453c04e8f8ed00d8ea5d760cbe66aedfc58f4fe6a22e", 0x4c, 0x8000, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x1) 05:00:18 executing program 1: ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x34) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000040)="2688b799196dc050df5dc73bdb047c90183ec7f2e641846c16b2faebc3998e231900449f3b92ee1dfb62e2ed3e0f4568fb522b64c2ea453c04e8f8ed00d8ea5d760cbe66aedfc58f4fe6a22e", 0x4c, 0x8000, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x1) 05:00:18 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/160}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000001180)={0xc0002004}) 05:00:18 executing program 4: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) r2 = syz_open_dev$vcsn(&(0x7f0000000000), 0xfff, 0x40140) r3 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000040)) epoll_create1(0x0) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) epoll_create1(0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) (async) syz_open_dev$vcsn(&(0x7f0000000000), 0xfff, 0x40140) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) setsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) (async) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000040)) (async) 05:00:18 executing program 1: ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x34) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000040)="2688b799196dc050df5dc73bdb047c90183ec7f2e641846c16b2faebc3998e231900449f3b92ee1dfb62e2ed3e0f4568fb522b64c2ea453c04e8f8ed00d8ea5d760cbe66aedfc58f4fe6a22e", 0x4c, 0x8000, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x1) 05:00:18 executing program 3: ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x34) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000040)="2688b799196dc050df5dc73bdb047c90183ec7f2e641846c16b2faebc3998e231900449f3b92ee1dfb62e2ed3e0f4568fb522b64c2ea453c04e8f8ed00d8ea5d760cbe66aedfc58f4fe6a22e", 0x4c, 0x8000, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10e5864299b5eb31}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x1) 05:00:18 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/160}) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000001180)={0xc0002004}) 05:00:18 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$TCGETS(r1, 0x5401, &(0x7f0000000080)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) 05:00:18 executing program 5: ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x34) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000040)="2688b799196dc050df5dc73bdb047c90183ec7f2e641846c16b2faebc3998e231900449f3b92ee1dfb62e2ed3e0f4568fb522b64c2ea453c04e8f8ed00d8ea5d760cbe66aedfc58f4fe6a22e", 0x4c, 0x8000, 0x0, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1) 05:00:18 executing program 1: ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x34) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1) 05:00:18 executing program 4: r0 = epoll_create1(0x0) (async) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_create1(0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) r2 = syz_open_dev$vcsn(&(0x7f0000000000), 0xfff, 0x40140) (async) r3 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) (async) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000040)) 05:00:18 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/160}) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000001180)={0xc0002004}) 05:00:18 executing program 3: ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x34) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000040)="2688b799196dc050df5dc73bdb047c90183ec7f2e641846c16b2faebc3998e231900449f3b92ee1dfb62e2ed3e0f4568fb522b64c2ea453c04e8f8ed00d8ea5d760cbe66aedfc58f4fe6a22e", 0x4c, 0x8000, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10e5864299b5eb31}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x1) 05:00:18 executing program 3: ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x34) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000040)="2688b799196dc050df5dc73bdb047c90183ec7f2e641846c16b2faebc3998e231900449f3b92ee1dfb62e2ed3e0f4568fb522b64c2ea453c04e8f8ed00d8ea5d760cbe66aedfc58f4fe6a22e", 0x4c, 0x8000, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10e5864299b5eb31}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x1) 05:00:18 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create(0x6) r2 = syz_open_pts(0xffffffffffffffff, 0x88000) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000000)={0x60000000}) r3 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000001180)) 05:00:18 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/160}) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000001180)={0xc0002004}) 05:00:18 executing program 3: ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x34) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10e5864299b5eb31}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1) 05:00:18 executing program 1: ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x34) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1) 05:00:18 executing program 5: ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x34) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000040)="2688b799196dc050df5dc73bdb047c90183ec7f2e641846c16b2faebc3998e231900449f3b92ee1dfb62e2ed3e0f4568fb522b64c2ea453c04e8f8ed00d8ea5d760cbe66aedfc58f4fe6a22e", 0x4c, 0x8000, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x1) 05:00:19 executing program 2: ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x34) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1) 05:00:19 executing program 4: r0 = epoll_create1(0x0) (async) r1 = epoll_create(0x6) (async) r2 = syz_open_pts(0xffffffffffffffff, 0x88000) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000000)={0x60000000}) r3 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000001180)) 05:00:19 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)={0xc0002004}) 05:00:19 executing program 5: ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x34) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000040)="2688b799196dc050df5dc73bdb047c90183ec7f2e641846c16b2faebc3998e231900449f3b92ee1dfb62e2ed3e0f4568fb522b64c2ea453c04e8f8ed00d8ea5d760cbe66aedfc58f4fe6a22e", 0x4c, 0x8000, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x1) 05:00:19 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10e5864299b5eb31}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1) 05:00:19 executing program 1: ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x34) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1) 05:00:19 executing program 0: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)={0xc0002004}) 05:00:19 executing program 5: ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x34) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000040)="2688b799196dc050df5dc73bdb047c90183ec7f2e641846c16b2faebc3998e231900449f3b92ee1dfb62e2ed3e0f4568fb522b64c2ea453c04e8f8ed00d8ea5d760cbe66aedfc58f4fe6a22e", 0x4c, 0x8000, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x1) 05:00:19 executing program 5: ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x34) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1) 05:00:19 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1) 05:00:19 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create(0x6) r2 = syz_open_pts(0xffffffffffffffff, 0x88000) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000000)={0x60000000}) r3 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000001180)) epoll_create1(0x0) (async) epoll_create(0x6) (async) syz_open_pts(0xffffffffffffffff, 0x88000) (async) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000000)={0x60000000}) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000001180)) (async) 05:00:19 executing program 0: epoll_create1(0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000001180)={0xc0002004}) 05:00:19 executing program 2: ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x34) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1) 05:00:19 executing program 0: epoll_create1(0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000001180)={0xc0002004}) 05:00:19 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r0, &(0x7f0000000500)=[{}], 0x1, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, &(0x7f0000000000)) r1 = epoll_create1(0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000001180)) r3 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r3, &(0x7f0000000500)=[{}], 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10e5864299b5eb31}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, r5, 0x200, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x9}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xff}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x8080}, 0x4040844) epoll_wait(r3, &(0x7f0000000040)=[{}, {}, {}], 0x3, 0x5) r6 = getpgid(0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000280)={0x0, 0x0}) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r9 = epoll_create1(0x80000) r10 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r10, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) kcmp$KCMP_EPOLL_TFD(r6, r7, 0x7, r8, &(0x7f0000000340)={r9, r10, 0x1fffc00}) 05:00:19 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1) 05:00:19 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1) 05:00:19 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1) 05:00:19 executing program 0: epoll_create1(0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000001180)={0xc0002004}) 05:00:19 executing program 0: r0 = epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000001180)={0xc0002004}) 05:00:19 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r0, &(0x7f0000000500)=[{}], 0x1, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, &(0x7f0000000000)) r1 = epoll_create1(0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000001180)) r3 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r3, &(0x7f0000000500)=[{}], 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10e5864299b5eb31}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, r5, 0x200, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x9}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xff}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x8080}, 0x4040844) epoll_wait(r3, &(0x7f0000000040)=[{}, {}, {}], 0x3, 0x5) r6 = getpgid(0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000280)={0x0, 0x0}) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r9 = epoll_create1(0x80000) r10 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r10, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) kcmp$KCMP_EPOLL_TFD(r6, r7, 0x7, r8, &(0x7f0000000340)={r9, r10, 0x1fffc00}) syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) (async) epoll_wait(r0, &(0x7f0000000500)=[{}], 0x1, 0x0) (async) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, &(0x7f0000000000)) (async) epoll_create1(0x0) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000001180)) (async) syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) (async) epoll_wait(r3, &(0x7f0000000500)=[{}], 0x1, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10e5864299b5eb31}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r0) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, r5, 0x200, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x9}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xff}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x8080}, 0x4040844) (async) epoll_wait(r3, &(0x7f0000000040)=[{}, {}, {}], 0x3, 0x5) (async) getpgid(0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000280)) (async) openat$uhid(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) (async) epoll_create1(0x80000) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) setsockopt$inet6_mreq(r10, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) (async) kcmp$KCMP_EPOLL_TFD(r6, r7, 0x7, r8, &(0x7f0000000340)={r9, r10, 0x1fffc00}) (async) 05:00:19 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1) 05:00:19 executing program 2: ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x34) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1) 05:00:19 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x1) 05:00:19 executing program 0: r0 = epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000001180)={0xc0002004}) 05:00:19 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x1) 05:00:19 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x1) 05:00:19 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r0, &(0x7f0000000500)=[{}], 0x1, 0x0) (async, rerun: 32) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, &(0x7f0000000000)) (async, rerun: 32) r1 = epoll_create1(0x0) (async, rerun: 32) r2 = socket$l2tp6(0xa, 0x2, 0x73) (rerun: 32) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000001180)) (async, rerun: 32) r3 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) (rerun: 32) epoll_wait(r3, &(0x7f0000000500)=[{}], 0x1, 0x0) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10e5864299b5eb31}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, r5, 0x200, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x9}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xff}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x8080}, 0x4040844) (async) epoll_wait(r3, &(0x7f0000000040)=[{}, {}, {}], 0x3, 0x5) (async) r6 = getpgid(0x0) (async, rerun: 32) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000280)={0x0, 0x0}) (rerun: 32) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) (async) r9 = epoll_create1(0x80000) (async) r10 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r10, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) (async, rerun: 64) kcmp$KCMP_EPOLL_TFD(r6, r7, 0x7, r8, &(0x7f0000000340)={r9, r10, 0x1fffc00}) (rerun: 64) 05:00:19 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x1) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x1) 05:00:19 executing program 0: r0 = epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000001180)={0xc0002004}) 05:00:19 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x1) 05:00:19 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x1) 05:00:19 executing program 2: ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x34) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x1) 05:00:19 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x1) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x1) 05:00:19 executing program 0: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, 0x0) 05:00:20 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) 05:00:20 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x1) 05:00:20 executing program 4: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0x10) r0 = epoll_create1(0x80000) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) 05:00:20 executing program 2: ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x34) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x1) 05:00:20 executing program 0: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, 0x0) 05:00:20 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) 05:00:20 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x1) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x1) 05:00:20 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) 05:00:20 executing program 4: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0x10) (async) r0 = epoll_create1(0x80000) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) 05:00:20 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) 05:00:20 executing program 0: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, 0x0) 05:00:20 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) 05:00:20 executing program 2: ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x34) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x1) 05:00:20 executing program 4: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0x10) r0 = epoll_create1(0x80000) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0x10) (async) epoll_create1(0x80000) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) (async) 05:00:20 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 05:00:20 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) 05:00:20 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1) 05:00:20 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) 05:00:20 executing program 0: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) 05:00:20 executing program 4: r0 = epoll_create1(0x0) r1 = getpgid(0x0) kcmp$KCMP_EPOLL_TFD(r1, 0x0, 0x7, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) r3 = socket$l2tp(0x2, 0x2, 0x73) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r3, &(0x7f0000000080)={r0, r0, 0x7ff}) r4 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r4, &(0x7f0000001180)) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_FONTX(r5, 0x4b6c, &(0x7f00000004c0)={0xc8, 0x20, &(0x7f00000000c0)="d810d9ebfe5d9a5045d70d42bb13c21f72631a550a23de21b277057e4a7ce81e6ce1addf3ff12ebad491afd852a625b9b464491b8261f1039135ce2d6da803710b4d8340c006413df8d8f0c3ecf3c8a5524d2bcc8639442fb808faade15ff77ef0bed44164b792265a553daa73604e3a0ee82cb29d62175496feb9f346b6202f9b1d983551af270d9fea0d069344412d712b488d96e802d5d6454c04c4b714398ba741edd47cda0984dd3a7ebbc412a8e89560e2250b2a9c49302897f32b768334a08870cc1fbecd4d429c7a907c6e02930cd6052bc82d53ac59b786d3f3af47bc486e0fc5065ecd99e7123764b80c5b4f3f77127840b1e1cdb6527e6c413d83ab82aad5b3ae213740f42796be36393b85cd13b08da603e21f4007a624fa18703be03247d866fbb05a355077ea75de03ba7da76cda6570c0875ea4d9bba8ed818726ee25064efcd8c3784e5e6c3c2e82a03683d1cf2c0e94942a41eea0054f6f8e817a499fb78866020f757dc5769708a35f451abd83500cba344ae15ade2779feb79d022c515ffa164071b9c3a498ad4cdf83e6fef921b8ec917591f8b29fd52ca817968a53a6256128cb681764a911c01614ba21d89b71402065a29d1211b353416d760cb25ff3c8564a7cccca10ec42d2cdfb9044bde34c926faedee900d3d84c1be22cae63e55047facc603dfa34d12b7a199567e10c4a57d6910e810ee7954c7186fe9b03ba0f2dbdc9bc41d7466bfc21a5246bc983e29ffd8cb01135b2fbeaf52a7acd063f5985d8378fa04d6b96c38ec0a7ac7bdf918ca0338dd3dc44663a184c59c11b9100a938c78dc5cdcbef580871363997972089bc365d726607927a22822f6a7c546ca16cfd016225c1d2a9d7856d7ed93add078dbff9ae9503ea503f850bec3d249d690d9c877f97dcde48d31f631e55f130e46edf62c715a4facf1f43ed3f361a90dc546184c058f22357749dd0ce825f2d5cd6acc80fe39ad094587972b4fff5c77dcbd902ec4d209b7ff40bd92306f5f1824a9133ecfaab0ada081eabb8515cce5a9803f21f1672ff21dab1ca2e84392b9d4bbf83747685db12184f96707166e984d691552029f67df62e979128374deb38c5b1f433c50be7f46ceec5e23917c67e198e091e13c8bfd1f020f2a820b399100bab2a3fe80ab404d354c7057a15c7a3c305eb992e2b83dd4c918d0ba3e9475327a509ca48794d992ebb205870d78b48207a6d97adecd4a62aaf29324c9b95734791f819d360a204f1afeb692e33702e7e7734d7b14f8092bc19eb7cacc5834143c84574011f02cc6dd96d60f618697e43da1c9149b6da7ea1ef6ffcd4cb44d2caf567d330e7749ea114555835856ea3d99c235f1786fa15af16fcc2c0b92a115f25b729664cd83882215c381e1d36623b0e35cb99478a8dc10717cc713ded43eb90b692f542"}) 05:00:20 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) 05:00:20 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 05:00:20 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 05:00:20 executing program 0: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) 05:00:20 executing program 4: r0 = epoll_create1(0x0) r1 = getpgid(0x0) kcmp$KCMP_EPOLL_TFD(r1, 0x0, 0x7, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) r3 = socket$l2tp(0x2, 0x2, 0x73) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r3, &(0x7f0000000080)={r0, r0, 0x7ff}) r4 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r4, &(0x7f0000001180)) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_FONTX(r5, 0x4b6c, &(0x7f00000004c0)={0xc8, 0x20, &(0x7f00000000c0)="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"}) epoll_create1(0x0) (async) getpgid(0x0) (async) kcmp$KCMP_EPOLL_TFD(r1, 0x0, 0x7, 0xffffffffffffffff, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) (async) socket$l2tp(0x2, 0x2, 0x73) (async) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r3, &(0x7f0000000080)={r0, r0, 0x7ff}) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r4, &(0x7f0000001180)) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) ioctl$PIO_FONTX(r5, 0x4b6c, &(0x7f00000004c0)={0xc8, 0x20, &(0x7f00000000c0)="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"}) (async) 05:00:20 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) 05:00:20 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1) 05:00:20 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 05:00:20 executing program 0: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) 05:00:20 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 05:00:20 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 05:00:20 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1) 05:00:20 executing program 4: r0 = epoll_create1(0x0) r1 = getpgid(0x0) kcmp$KCMP_EPOLL_TFD(r1, 0x0, 0x7, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) r3 = socket$l2tp(0x2, 0x2, 0x73) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r3, &(0x7f0000000080)={r0, r0, 0x7ff}) r4 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r4, &(0x7f0000001180)) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_FONTX(r5, 0x4b6c, &(0x7f00000004c0)={0xc8, 0x20, &(0x7f00000000c0)="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"}) epoll_create1(0x0) (async) getpgid(0x0) (async) kcmp$KCMP_EPOLL_TFD(r1, 0x0, 0x7, 0xffffffffffffffff, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) (async) socket$l2tp(0x2, 0x2, 0x73) (async) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r3, &(0x7f0000000080)={r0, r0, 0x7ff}) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r4, &(0x7f0000001180)) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) ioctl$PIO_FONTX(r5, 0x4b6c, &(0x7f00000004c0)={0xc8, 0x20, &(0x7f00000000c0)="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"}) (async) 05:00:20 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 05:00:20 executing program 4: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) read$snapshot(r2, &(0x7f0000000280)=""/117, 0x75) ioctl$SNAPSHOT_CREATE_IMAGE(r2, 0x40043311, &(0x7f0000000300)) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r2, 0x330f, 0x3) socketpair(0x9, 0x2, 0x2, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) read$snapshot(r2, &(0x7f00000004c0)=""/79, 0x4f) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), r2) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x38, r4, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x100}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010100}]}, 0x38}}, 0xc000) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, r4, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x300}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000855}, 0x20000000) 05:00:20 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1) 05:00:20 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1) 05:00:20 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1) 05:00:20 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1) 05:00:20 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 05:00:20 executing program 2: ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1) 05:00:20 executing program 4: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) read$snapshot(r2, &(0x7f0000000280)=""/117, 0x75) ioctl$SNAPSHOT_CREATE_IMAGE(r2, 0x40043311, &(0x7f0000000300)) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r2, 0x330f, 0x3) socketpair(0x9, 0x2, 0x2, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) read$snapshot(r2, &(0x7f00000004c0)=""/79, 0x4f) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), r2) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x38, r4, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x100}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010100}]}, 0x38}}, 0xc000) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, r4, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x300}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000855}, 0x20000000) epoll_create1(0x0) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) (async) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) (async) read$snapshot(r2, &(0x7f0000000280)=""/117, 0x75) (async) ioctl$SNAPSHOT_CREATE_IMAGE(r2, 0x40043311, &(0x7f0000000300)) (async) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r2, 0x330f, 0x3) (async) socketpair(0x9, 0x2, 0x2, &(0x7f0000000380)) (async) read$snapshot(r2, &(0x7f00000004c0)=""/79, 0x4f) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), r2) (async) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) (async) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x38, r4, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x100}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010100}]}, 0x38}}, 0xc000) (async) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, r4, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x300}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000855}, 0x20000000) (async) 05:00:20 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 05:00:20 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1) 05:00:20 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1) 05:00:20 executing program 2: ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x1) 05:00:20 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1) 05:00:20 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1) 05:00:20 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1) 05:00:20 executing program 2: ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x1) 05:00:20 executing program 4: r0 = epoll_create1(0x0) (async) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) (async) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) read$snapshot(r2, &(0x7f0000000280)=""/117, 0x75) ioctl$SNAPSHOT_CREATE_IMAGE(r2, 0x40043311, &(0x7f0000000300)) (async) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r2, 0x330f, 0x3) socketpair(0x9, 0x2, 0x2, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) (async) read$snapshot(r2, &(0x7f00000004c0)=""/79, 0x4f) (async) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), r2) (async) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x38, r4, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x100}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010100}]}, 0x38}}, 0xc000) (async) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, r4, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x300}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000855}, 0x20000000) 05:00:20 executing program 2: ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x1) 05:00:20 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1) 05:00:20 executing program 2: ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) 05:00:20 executing program 4: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10e5864299b5eb31}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="84000000", @ANYRES16=r3, @ANYBLOB="08002abd7000ffdbdf250800000014001f00000000000000000000000000000000010c0010000000000000000080050014000400000006001d00f0090000050014004000000006000e0011f6000014002000fe8000000000000000000000000000bb14002000fc01000000000000000000000000000105ecd4e2dd0f00140007000000"], 0x84}, 0x1, 0x0, 0x0, 0x72d41d1394af2add}, 0x0) bind$isdn(0xffffffffffffffff, &(0x7f0000000080)={0x22, 0x72, 0x6, 0x50, 0xa2}, 0x6) 05:00:20 executing program 0: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x1) 05:00:20 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1) 05:00:20 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1) 05:00:20 executing program 2: ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) 05:00:21 executing program 5: r0 = epoll_create1(0x0) r1 = epoll_create(0x6) r2 = syz_open_pts(0xffffffffffffffff, 0x88000) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000000)={0x60000000}) r3 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000001180)) 05:00:21 executing program 4: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10e5864299b5eb31}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="84000000", @ANYRES16=r3, @ANYBLOB="08002abd7000ffdbdf250800000014001f00000000000000000000000000000000010c0010000000000000000080050014000400000006001d00f0090000050014004000000006000e0011f6000014002000fe8000000000000000000000000000bb14002000fc01000000000000000000000000000105ecd4e2dd0f00140007000000"], 0x84}, 0x1, 0x0, 0x0, 0x72d41d1394af2add}, 0x0) bind$isdn(0xffffffffffffffff, &(0x7f0000000080)={0x22, 0x72, 0x6, 0x50, 0xa2}, 0x6) epoll_create1(0x0) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10e5864299b5eb31}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="84000000", @ANYRES16=r3, @ANYBLOB="08002abd7000ffdbdf250800000014001f00000000000000000000000000000000010c0010000000000000000080050014000400000006001d00f0090000050014004000000006000e0011f6000014002000fe8000000000000000000000000000bb14002000fc01000000000000000000000000000105ecd4e2dd0f00140007000000"], 0x84}, 0x1, 0x0, 0x0, 0x72d41d1394af2add}, 0x0) (async) bind$isdn(0xffffffffffffffff, &(0x7f0000000080)={0x22, 0x72, 0x6, 0x50, 0xa2}, 0x6) (async) 05:00:21 executing program 0: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x1) 05:00:21 executing program 5: ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x34) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000040)="2688b799196dc050df5dc73bdb047c90183ec7f2e641846c16b2faebc3998e231900449f3b92ee1dfb62e2ed3e0f4568fb522b64c2ea453c04e8f8ed00d8ea5d760cbe66aedfc58f4fe6a22e", 0x4c, 0x8000, 0x0, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1) 05:00:21 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1) 05:00:21 executing program 2: ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) 05:00:21 executing program 0: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x1) 05:00:21 executing program 4: r0 = epoll_create1(0x0) (async) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10e5864299b5eb31}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) (async) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="84000000", @ANYRES16=r3, @ANYBLOB="08002abd7000ffdbdf250800000014001f00000000000000000000000000000000010c0010000000000000000080050014000400000006001d00f0090000050014004000000006000e0011f6000014002000fe8000000000000000000000000000bb14002000fc01000000000000000000000000000105ecd4e2dd0f00140007000000"], 0x84}, 0x1, 0x0, 0x0, 0x72d41d1394af2add}, 0x0) bind$isdn(0xffffffffffffffff, &(0x7f0000000080)={0x22, 0x72, 0x6, 0x50, 0xa2}, 0x6) 05:00:21 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1) 05:00:21 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1) 05:00:21 executing program 2: ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 05:00:21 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x1) 05:00:21 executing program 5: ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x34) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1) 05:00:21 executing program 2: ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 05:00:21 executing program 4: setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000000)=0x3, 0x4) r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) 05:00:21 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x1) 05:00:21 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/160}) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000001180)={0xc0002004}) 05:00:21 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1) 05:00:21 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x1) 05:00:21 executing program 4: setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000000)=0x3, 0x4) r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000000)=0x3, 0x4) (async) epoll_create1(0x0) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) (async) 05:00:21 executing program 2: ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 05:00:21 executing program 5: ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x34) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1) 05:00:21 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$TCGETS(r1, 0x5401, &(0x7f0000000080)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) 05:00:21 executing program 4: setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000000)=0x3, 0x4) r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000000)=0x3, 0x4) (async) epoll_create1(0x0) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) (async) 05:00:21 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) 05:00:21 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1) 05:00:21 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1) 05:00:21 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) 05:00:21 executing program 5: ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x34) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1) 05:00:21 executing program 4: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)={0x80002007}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r2, &(0x7f0000000500)=[{}], 0x1, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000000)={0x60002001}) 05:00:21 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1) 05:00:21 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) 05:00:21 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1) 05:00:21 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$TCGETS(r1, 0x5401, &(0x7f0000000080)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) 05:00:22 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$TCGETS(r1, 0x5401, &(0x7f0000000080)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) 05:00:22 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 05:00:22 executing program 4: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)={0x80002007}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r2, &(0x7f0000000500)=[{}], 0x1, 0x0) (async) r3 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000000)={0x60002001}) 05:00:22 executing program 1: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x1) 05:00:22 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1) 05:00:22 executing program 1: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x1) 05:00:22 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 05:00:22 executing program 4: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)={0x80002007}) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) epoll_wait(r2, &(0x7f0000000500)=[{}], 0x1, 0x0) (async) r3 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) (async) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000000)={0x60002001}) 05:00:22 executing program 1: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x1) 05:00:22 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$TCGETS(r1, 0x5401, &(0x7f0000000080)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) 05:00:22 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 05:00:22 executing program 2: ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x34) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000040)="2688b799196dc050df5dc73bdb047c90183ec7f2e641846c16b2faebc3998e231900449f3b92ee1dfb62e2ed3e0f4568fb522b64c2ea453c04e8f8ed00d8ea5d760cbe66aedfc58f4fe6a22e", 0x4c, 0x8000, 0x0, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1) 05:00:23 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$TCGETS(r1, 0x5401, &(0x7f0000000080)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) 05:00:23 executing program 4: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) r2 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r2, &(0x7f0000000000)=""/142, 0x8e, 0x3, 0x0, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000100)={0x4, &(0x7f00000000c0)=[{0x3, 0xfff6}, {0x2, 0x200}, {0x200, 0x20}, {0x6e}]}) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, &(0x7f0000000140)) 05:00:23 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x1) 05:00:23 executing program 0: ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x34) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000040)="2688b799196dc050df5dc73bdb047c90183ec7f2e641846c16b2faebc3998e231900449f3b92ee1dfb62e2ed3e0f4568fb522b64c2ea453c04e8f8ed00d8ea5d760cbe66aedfc58f4fe6a22e", 0x4c, 0x8000, 0x0, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10e5864299b5eb31}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1) 05:00:23 executing program 2: ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x34) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000040)="2688b799196dc050df5dc73bdb047c90183ec7f2e641846c16b2faebc3998e231900449f3b92ee1dfb62e2ed3e0f4568fb522b64c2ea453c04e8f8ed00d8ea5d760cbe66aedfc58f4fe6a22e", 0x4c, 0x8000, 0x0, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1) 05:00:23 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$TCGETS(r1, 0x5401, &(0x7f0000000080)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) 05:00:23 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x1) 05:00:23 executing program 4: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) r2 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r2, &(0x7f0000000000)=""/142, 0x8e, 0x3, 0x0, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000100)={0x4, &(0x7f00000000c0)=[{0x3, 0xfff6}, {0x2, 0x200}, {0x200, 0x20}, {0x6e}]}) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, &(0x7f0000000140)) epoll_create1(0x0) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) (async) socket$l2tp(0x2, 0x2, 0x73) (async) recvfrom$l2tp(r2, &(0x7f0000000000)=""/142, 0x8e, 0x3, 0x0, 0x0) (async) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000100)={0x4, &(0x7f00000000c0)=[{0x3, 0xfff6}, {0x2, 0x200}, {0x200, 0x20}, {0x6e}]}) (async) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, &(0x7f0000000140)) (async) 05:00:23 executing program 2: ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x34) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000040)="2688b799196dc050df5dc73bdb047c90183ec7f2e641846c16b2faebc3998e231900449f3b92ee1dfb62e2ed3e0f4568fb522b64c2ea453c04e8f8ed00d8ea5d760cbe66aedfc58f4fe6a22e", 0x4c, 0x8000, 0x0, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1) 05:00:23 executing program 0: ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x34) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000040)="2688b799196dc050df5dc73bdb047c90183ec7f2e641846c16b2faebc3998e231900449f3b92ee1dfb62e2ed3e0f4568fb522b64c2ea453c04e8f8ed00d8ea5d760cbe66aedfc58f4fe6a22e", 0x4c, 0x8000, 0x0, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10e5864299b5eb31}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1) 05:00:23 executing program 4: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) (async) r2 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r2, &(0x7f0000000000)=""/142, 0x8e, 0x3, 0x0, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000100)={0x4, &(0x7f00000000c0)=[{0x3, 0xfff6}, {0x2, 0x200}, {0x200, 0x20}, {0x6e}]}) (async) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, &(0x7f0000000140)) 05:00:23 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x1) 05:00:24 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$TCGETS(r1, 0x5401, &(0x7f0000000080)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) 05:00:24 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) 05:00:24 executing program 4: ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x34) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000040)="2688b799196dc050df5dc73bdb047c90183ec7f2e641846c16b2faebc3998e231900449f3b92ee1dfb62e2ed3e0f4568fb522b64c2ea453c04e8f8ed00d8ea5d760cbe66aedfc58f4fe6a22e", 0x4c, 0x8000, 0x0, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10e5864299b5eb31}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1) 05:00:24 executing program 0: ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x34) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000040)="2688b799196dc050df5dc73bdb047c90183ec7f2e641846c16b2faebc3998e231900449f3b92ee1dfb62e2ed3e0f4568fb522b64c2ea453c04e8f8ed00d8ea5d760cbe66aedfc58f4fe6a22e", 0x4c, 0x8000, 0x0, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1) 05:00:24 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCGETS(r0, 0x5401, &(0x7f0000000080)) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000040)={0x9, &(0x7f0000000000)=[{0x2, 0x200}, {0x2, 0x987}, {0x400, 0x7}, {0x4}, {0x9a42, 0xef}, {0x800, 0x20}, {0x3f, 0xad97}, {0xa0, 0x3}, {0x3ff, 0x9}]}) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)=0x1b) 05:00:24 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$TCGETS(r1, 0x5401, &(0x7f0000000080)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) 05:00:24 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$TCGETS(r1, 0x5401, &(0x7f0000000080)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) 05:00:24 executing program 2: ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x34) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000040)="2688b799196dc050df5dc73bdb047c90183ec7f2e641846c16b2faebc3998e231900449f3b92ee1dfb62e2ed3e0f4568fb522b64c2ea453c04e8f8ed00d8ea5d760cbe66aedfc58f4fe6a22e", 0x4c, 0x8000, 0x0, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10e5864299b5eb31}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1) 05:00:24 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) 05:00:24 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/160}) r1 = epoll_create1(0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000001180)={0xc0002004}) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x37f}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r3 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)={0x20000006}) 05:00:24 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$TCGETS(r1, 0x5401, &(0x7f0000000080)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) 05:00:24 executing program 4: epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) r2 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x3, 0x202101) ioctl$SNDCTL_SEQ_THRESHOLD(r3, 0x4004510d, &(0x7f0000000080)=0xfffffff7) r4 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r4, 0x29, 0x14, &(0x7f00000008c0)={@mcast1}, 0x14) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0xffffffff, 0x238, 0xf8, 0x238, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"dc85"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast2, [0xff, 0xff000000, 0xff, 0xff000000], [0xffffffff, 0xff000000, 0xffffffff, 0xffffffff], 'veth1_virt_wifi\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x33, 0xe6, 0x0, 0x1}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x0, 0x1, [0x4, 0x40, 0xb70, 0x7213, 0x8, 0x0, 0x8001, 0x49bb, 0x4, 0x8000, 0x40, 0x7, 0x80, 0x4, 0x7, 0x7f], 0xd}}, @common=@ipv6header={{0x28}, {0x0, 0x56, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private2, @remote, [0xff000000, 0xff0000ff, 0x0, 0xff], [0xff000000, 0xff, 0xffffffff, 0xff000000], 'syz_tun\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}, 0x2, 0xfb, 0x5}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}, {0x3, 0xff}}, @common=@icmp6={{0x28}, {0x11, '`\f'}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xe0000002}) syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x0) 05:00:24 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) 05:00:24 executing program 2: ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x34) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000040)="2688b799196dc050df5dc73bdb047c90183ec7f2e641846c16b2faebc3998e231900449f3b92ee1dfb62e2ed3e0f4568fb522b64c2ea453c04e8f8ed00d8ea5d760cbe66aedfc58f4fe6a22e", 0x4c, 0x8000, 0x0, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10e5864299b5eb31}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1) 05:00:24 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$TCGETS(r1, 0x5401, &(0x7f0000000080)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) 05:00:24 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) 05:00:24 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) [ 603.759456] x_tables: ip6_tables: mh match: only valid for protocol 135 05:00:25 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) 05:00:25 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000000)={0x2, 0x7, 0x81f8, 0xd5, 0x6, "ecbb7dfbd61ddf77fdd83f7f7f1e2043f5e82c", 0xfff, 0x532a}) 05:00:25 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000000)={0x2, 0x7, 0x81f8, 0xd5, 0x6, "ecbb7dfbd61ddf77fdd83f7f7f1e2043f5e82c", 0xfff, 0x532a}) 05:00:25 executing program 2: sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r0, 0x3309) 05:00:25 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 05:00:25 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000000)={0x2, 0x7, 0x81f8, 0xd5, 0x6, "ecbb7dfbd61ddf77fdd83f7f7f1e2043f5e82c", 0xfff, 0x532a}) 05:00:25 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$TCGETS(r1, 0x5401, &(0x7f0000000080)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) 05:00:25 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 05:00:25 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$TCGETS(r1, 0x5401, &(0x7f0000000080)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) 05:00:25 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$TCGETS(r1, 0x5401, &(0x7f0000000080)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) 05:00:25 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) 05:00:25 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000000)={0x2, 0x7, 0x81f8, 0xd5, 0x6, "ecbb7dfbd61ddf77fdd83f7f7f1e2043f5e82c", 0xfff, 0x532a}) 05:00:26 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000000)={0x2, 0x7, 0x81f8, 0xd5, 0x6, "ecbb7dfbd61ddf77fdd83f7f7f1e2043f5e82c", 0xfff, 0x532a}) 05:00:26 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) 05:00:26 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) 05:00:26 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000000)={0x2, 0x7, 0x81f8, 0xd5, 0x6, "ecbb7dfbd61ddf77fdd83f7f7f1e2043f5e82c", 0xfff, 0x532a}) 05:00:26 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) 05:00:26 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$TCGETS(r1, 0x5401, &(0x7f0000000080)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) 05:00:26 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1b) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000000)={0x2, 0x7, 0x81f8, 0xd5, 0x6, "ecbb7dfbd61ddf77fdd83f7f7f1e2043f5e82c", 0xfff, 0x532a}) 05:00:26 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) 05:00:26 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x2, 0x7, 0x81f8, 0xd5, 0x6, "ecbb7dfbd61ddf77fdd83f7f7f1e2043f5e82c", 0xfff, 0x532a}) 05:00:26 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) 05:00:27 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) 05:00:27 executing program 4: r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x2, 0x7, 0x81f8, 0xd5, 0x6, "ecbb7dfbd61ddf77fdd83f7f7f1e2043f5e82c", 0xfff, 0x532a}) 05:00:27 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) 05:00:27 executing program 4: r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x2, 0x7, 0x81f8, 0xd5, 0x6, "ecbb7dfbd61ddf77fdd83f7f7f1e2043f5e82c", 0xfff, 0x532a}) 05:00:27 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) 05:00:27 executing program 4: r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x2, 0x7, 0x81f8, 0xd5, 0x6, "ecbb7dfbd61ddf77fdd83f7f7f1e2043f5e82c", 0xfff, 0x532a}) 05:00:27 executing program 5: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x15) 05:00:27 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$TCGETS(r1, 0x5401, &(0x7f0000000080)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) 05:00:27 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) 05:00:28 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) 05:00:28 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000000)={0x2, 0x7, 0x81f8, 0xd5, 0x6, "ecbb7dfbd61ddf77fdd83f7f7f1e2043f5e82c", 0xfff, 0x532a}) 05:00:28 executing program 5: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x15) 05:00:28 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000000)={0x2, 0x7, 0x81f8, 0xd5, 0x6, "ecbb7dfbd61ddf77fdd83f7f7f1e2043f5e82c", 0xfff, 0x532a}) 05:00:28 executing program 5: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x15) 05:00:28 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000000)={0x2, 0x7, 0x81f8, 0xd5, 0x6, "ecbb7dfbd61ddf77fdd83f7f7f1e2043f5e82c", 0xfff, 0x532a}) 05:00:28 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x15) 05:00:28 executing program 3: openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xd) 05:00:28 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TCSETS2(r0, 0x402c542b, 0x0) 05:00:28 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x15) 05:00:29 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) 05:00:29 executing program 3: openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xd) 05:00:29 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) 05:00:29 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x15) 05:00:29 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TCSETS2(r0, 0x402c542b, 0x0) 05:00:29 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) 05:00:29 executing program 3: openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xd) 05:00:29 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TCSETS2(r0, 0x402c542b, 0x0) 05:00:29 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) 05:00:29 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x7, 0x81f8, 0xd5, 0x6, "ecbb7dfbd61ddf77fdd83f7f7f1e2043f5e82c", 0xfff, 0x532a}) 05:00:29 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) 05:00:29 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) 05:00:30 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x81f8, 0xd5, 0x6, "ecbb7dfbd61ddf77fdd83f7f7f1e2043f5e82c", 0xfff, 0x532a}) 05:00:30 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) 05:00:30 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) 05:00:30 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) 05:00:30 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) 05:00:30 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xd5, 0x6, "ecbb7dfbd61ddf77fdd83f7f7f1e2043f5e82c", 0xfff, 0x532a}) 05:00:30 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)) 05:00:30 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x6, "ecbb7dfbd61ddf77fdd83f7f7f1e2043f5e82c", 0xfff, 0x532a}) 05:00:30 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)) 05:00:30 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) 05:00:30 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "ecbb7dfbd61ddf77fdd83f7f7f1e2043f5e82c", 0xfff, 0x532a}) 05:00:30 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)) 05:00:30 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "ecbb7dfbd61ddf77fdd83f7f7f1e2043f5e82c", 0x0, 0x532a}) 05:00:30 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) 05:00:31 executing program 0: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x15) 05:00:31 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "ecbb7dfbd61ddf77fdd83f7f7f1e2043f5e82c"}) 05:00:31 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) 05:00:31 executing program 2: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x15) 05:00:31 executing program 1: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xd) 05:00:31 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) 05:00:31 executing program 2: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x15) 05:00:31 executing program 1: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xd) 05:00:31 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) 05:00:31 executing program 0: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x15) 05:00:31 executing program 2: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x15) 05:00:31 executing program 1: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xd) 05:00:31 executing program 0: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x15) 05:00:31 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x15) 05:00:32 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) 05:00:32 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) 05:00:32 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x15) 05:00:32 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) 05:00:32 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x15) 05:00:32 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x15) 05:00:32 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) 05:00:32 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) 05:00:32 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x15) 05:00:32 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) 05:00:32 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x15) 05:00:32 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) 05:00:33 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) 05:00:33 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) 05:00:33 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) 05:00:33 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) 05:00:33 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) 05:00:33 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) 05:00:33 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)) 05:00:33 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) 05:00:33 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) 05:00:33 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) 05:00:33 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) 05:00:33 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) 05:00:34 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) 05:00:34 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)) 05:00:34 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) 05:00:34 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)) 05:00:34 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) 05:00:34 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) 05:00:34 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)) 05:00:34 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) 05:00:34 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)) 05:00:34 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) 05:00:34 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) 05:00:34 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)) 05:00:34 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) 05:00:34 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) 05:00:34 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)) 05:00:34 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) 05:00:34 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) 05:00:34 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) 05:00:35 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) 05:00:35 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xd) 05:00:35 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) 05:00:35 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) 05:00:35 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) 05:00:35 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) 05:00:36 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) 05:00:36 executing program 5: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x15) 05:00:36 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) 05:00:36 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) 05:00:36 executing program 5: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x15) 05:00:36 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) 05:00:36 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) 05:00:36 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xd) 05:00:36 executing program 5: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x15) 05:00:36 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) 05:00:36 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x15) 05:00:36 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xd) 05:00:36 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x15) 05:00:36 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xd) 05:00:37 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) 05:00:37 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xd) 05:00:37 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x15) 05:00:37 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) 05:00:37 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) 05:00:37 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) 05:00:37 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, 0x0) 05:00:37 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xd) 05:00:37 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) 05:00:37 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) 05:00:37 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) 05:00:37 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) 05:00:38 executing program 4: openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xd) 05:00:38 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) 05:00:38 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)) 05:00:38 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) 05:00:38 executing program 4: openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xd) 05:00:38 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)) 05:00:38 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, 0x0) 05:00:38 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, 0x0) 05:00:38 executing program 4: openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xd) 05:00:38 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)) 05:00:38 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) 05:00:38 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xd) 05:00:39 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) 05:00:39 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xd) 05:00:39 executing program 0: openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x15) 05:00:39 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) 05:00:39 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) 05:00:39 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, 0x0) 05:00:39 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, 0x0) 05:00:39 executing program 0: openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x15) 05:00:39 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) 05:00:39 executing program 0: openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x15) 05:00:39 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) 05:00:39 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) 05:00:39 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) 05:00:40 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, 0x0) 05:00:40 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) 05:00:40 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) 05:00:40 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) 05:00:40 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 05:00:40 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, 0x0) 05:00:40 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) 05:00:40 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) 05:00:40 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, 0x0) 05:00:40 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) 05:00:40 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) 05:00:40 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, 0x0) 05:00:41 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, 0x0) 05:00:41 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) 05:00:41 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) 05:00:41 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, 0x0) 05:00:41 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) 05:00:41 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 05:00:41 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xd) 05:00:41 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) 05:00:41 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xd) 05:00:41 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) 05:00:41 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xd) 05:00:41 executing program 2: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xd) 05:00:41 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, 0x0) 05:00:42 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x15) 05:00:42 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, 0x0) 05:00:42 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) 05:00:42 executing program 2: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xd) 05:00:42 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x15) 05:00:42 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) 05:00:42 executing program 2: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xd) 05:00:42 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x15) 05:00:42 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) 05:00:42 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) 05:00:42 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) 05:00:42 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) 05:00:42 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) 05:00:42 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, 0x0) 05:00:42 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) 05:00:42 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) 05:00:42 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) 05:00:43 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) 05:00:43 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) 05:00:43 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)) 05:00:43 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) 05:00:43 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, 0x0) 05:00:43 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)) 05:00:43 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) 05:00:43 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) 05:00:43 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)) 05:00:43 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, 0x0) 05:00:43 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) 05:00:43 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) 05:00:44 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) 05:00:44 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) 05:00:44 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) 05:00:44 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) 05:00:44 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, 0x0) 05:00:44 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 05:00:44 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) 05:00:44 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) 05:00:44 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, 0x0) 05:00:44 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 05:00:44 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xd) 05:00:44 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) 05:00:44 executing program 5: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) 05:00:44 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xd) 05:00:44 executing program 5: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) 05:00:44 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xd) 05:00:45 executing program 5: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) 05:00:45 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 05:00:45 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, 0x0) 05:00:45 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, 0x0) 05:00:45 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 05:00:45 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, 0x0) 05:00:45 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 05:00:45 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 05:00:45 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 05:00:45 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, 0x0) 05:00:45 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 05:00:46 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) 05:00:46 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, 0x0) 05:00:46 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 05:00:46 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, 0x0) 05:00:46 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) 05:00:46 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 05:00:46 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, 0x0) 05:00:46 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) 05:00:46 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) 05:00:46 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 05:00:46 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, 0x0) 05:00:46 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, 0x0) 05:00:46 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)) ioctl$TIOCSETD(r0, 0x5423, 0x0) 05:00:47 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, 0x0) 05:00:47 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)) ioctl$TIOCSETD(r0, 0x5423, 0x0) 05:00:47 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)) ioctl$TIOCSETD(r0, 0x5423, 0x0) 05:00:47 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, 0x0) 05:00:47 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 05:00:47 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) 05:00:47 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) 05:00:47 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 05:00:47 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 05:00:47 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 05:00:47 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, 0x0) 05:00:47 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 05:00:47 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, 0x0) 05:00:48 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 05:00:48 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, 0x0) 05:00:48 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 05:00:48 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) 05:00:48 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) 05:00:48 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, 0x0) 05:00:48 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 05:00:48 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) 05:00:48 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) 05:00:48 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, 0x0) 05:00:48 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) 05:00:48 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, 0x0) 05:00:48 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) 05:00:49 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, 0x0) 05:00:49 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, 0x0) 05:00:49 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) 05:00:49 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, 0x0) 05:00:49 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) 05:00:49 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 05:00:49 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) 05:00:49 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) 05:00:49 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, 0x0) 05:00:49 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) 05:00:49 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, 0x0) 05:00:49 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xd) 05:00:49 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) 05:00:49 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xd) 05:00:49 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xd) 05:00:49 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xd) 05:00:49 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xd) 05:00:50 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) 05:00:50 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) 05:00:50 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xd) 05:00:50 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) 05:00:50 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) 05:00:50 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) 05:00:50 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) 05:00:50 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x15) 05:00:50 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) 05:00:50 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) 05:00:50 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) 05:00:50 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) 05:00:51 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) 05:00:51 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) 05:00:51 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) 05:00:51 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) 05:00:51 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) 05:00:51 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) 05:00:51 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) 05:00:51 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) 05:00:51 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) 05:00:51 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) 05:00:51 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) 05:00:51 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) 05:00:52 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) 05:00:52 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) 05:00:52 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) 05:00:52 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) 05:00:52 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) 05:00:52 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) 05:00:52 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) 05:00:52 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) 05:00:52 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) 05:00:52 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) 05:00:52 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) 05:00:52 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) 05:00:53 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) 05:00:53 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) 05:00:53 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) 05:00:53 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) 05:00:53 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) 05:00:53 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) 05:00:53 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) 05:00:53 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) 05:00:53 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) 05:00:53 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) 05:00:53 executing program 4: r0 = epoll_create1(0x80000) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001180)) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) read$snapshot(r2, &(0x7f0000000280)=""/117, 0x75) ioctl$SNAPSHOT_CREATE_IMAGE(r2, 0x40043311, &(0x7f0000000300)) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r2, 0x330f, 0x3) socketpair(0x9, 0x2, 0x2, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) read$snapshot(r2, &(0x7f00000004c0)=""/79, 0x4f) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), r2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x38, r5, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x100}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010100}]}, 0x38}}, 0xc000) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, r5, 0x65d28663a0b93fa6, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xa5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) 05:00:53 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x4, 0x730, 0xffffffff, 0x360, 0x590, 0x590, 0xffffffff, 0xffffffff, 0x660, 0x660, 0x660, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x320, 0x360, 0x0, {}, [@common=@dst={{0x48}, {0x7, 0x0, 0x1, [0x0, 0x8, 0x0, 0x200, 0x2, 0x8, 0x1, 0x9, 0xa8be, 0xffff, 0x80, 0xd5d, 0xffff, 0x7, 0x6, 0x800], 0x2}}, @common=@unspec=@bpf0={{0x230}, {0x0, [{0x0, 0x0, 0x81, 0x5}], {0x3}}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xffb, 0xbe, 0x1, 0xf890, 0x200, 0x7, 0x655b036b, 0xa56]}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'geneve0\x00', 'tunl0\x00'}, 0x0, 0x208, 0x230, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@private2, @ipv4={'\x00', '\xff\xff', @private}, @empty, @private1, @remote, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, @private0, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, @mcast1, @rand_addr=' \x01\x00']}}, @common=@mh={{0x28}, {'q<'}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x790) [ 632.516844] bpf: check failed: parse error 05:00:54 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) 05:00:54 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x14) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000000)=""/85) 05:00:54 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x14) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000000)=""/85) 05:00:54 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x14) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000000)=""/85) 05:00:54 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x14) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000000)=""/85) 05:00:54 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x4, 0x730, 0xffffffff, 0x360, 0x590, 0x590, 0xffffffff, 0xffffffff, 0x660, 0x660, 0x660, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x320, 0x360, 0x0, {}, [@common=@dst={{0x48}, {0x7, 0x0, 0x1, [0x0, 0x8, 0x0, 0x200, 0x2, 0x8, 0x1, 0x9, 0xa8be, 0xffff, 0x80, 0xd5d, 0xffff, 0x7, 0x6, 0x800], 0x2}}, @common=@unspec=@bpf0={{0x230}, {0x0, [{0x0, 0x59, 0x81, 0x5}, {0x1, 0x4, 0x2, 0x1}], {0x3}}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xffb, 0xbe, 0x1, 0xf890, 0x200, 0x7, 0x655b036b, 0xa56]}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'geneve0\x00', 'tunl0\x00'}, 0x0, 0x208, 0x230, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@private2, @ipv4={'\x00', '\xff\xff', @private}, @empty, @private1, @remote, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, @private0, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, @mcast1, @rand_addr=' \x01\x00']}}, @common=@mh={{0x28}, {'q<'}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x790) 05:00:54 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) (fail_nth: 1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) 05:00:54 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x14) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000000)=""/85) 05:00:54 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x14) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000000)=""/85) 05:00:54 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) (fail_nth: 1) 05:00:54 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) (fail_nth: 1) [ 633.181500] bpf: check failed: parse error 05:00:54 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x14) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000000)=""/85) [ 633.223681] FAULT_INJECTION: forcing a failure. [ 633.223681] name failslab, interval 1, probability 0, space 0, times 0 [ 633.287548] CPU: 1 PID: 11620 Comm: syz-executor.5 Not tainted 4.14.275-syzkaller #0 [ 633.295446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 633.304805] Call Trace: [ 633.307408] dump_stack+0x1b2/0x281 [ 633.311044] should_fail.cold+0x10a/0x149 [ 633.315195] should_failslab+0xd6/0x130 [ 633.319171] kmem_cache_alloc_trace+0x29a/0x3d0 [ 633.323846] gsmld_open+0x9e/0x7b0 [ 633.327387] ? gsm_cleanup_mux+0x3c0/0x3c0 [ 633.331622] tty_ldisc_open+0x6c/0xb0 [ 633.335420] tty_set_ldisc+0x287/0x5d0 [ 633.339308] tty_ioctl+0xa2a/0x1430 [ 633.342930] ? tty_fasync+0x2c0/0x2c0 [ 633.346729] ? proc_fail_nth_write+0x7b/0x180 [ 633.351222] ? trace_hardirqs_on+0x10/0x10 [ 633.355464] ? fsnotify+0x974/0x11b0 [ 633.359174] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 633.364099] ? debug_check_no_obj_freed+0x2c0/0x680 [ 633.369115] ? SyS_write+0x1b7/0x210 [ 633.372825] ? tty_fasync+0x2c0/0x2c0 [ 633.376624] do_vfs_ioctl+0x75a/0xff0 [ 633.380471] ? lock_acquire+0x170/0x3f0 [ 633.384445] ? ioctl_preallocate+0x1a0/0x1a0 [ 633.388851] ? __fget+0x265/0x3e0 [ 633.392297] ? do_vfs_ioctl+0xff0/0xff0 [ 633.396268] ? security_file_ioctl+0x83/0xb0 [ 633.400673] SyS_ioctl+0x7f/0xb0 [ 633.404031] ? do_vfs_ioctl+0xff0/0xff0 [ 633.408003] do_syscall_64+0x1d5/0x640 [ 633.411888] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 633.417074] RIP: 0033:0x7f1146121049 [ 633.420781] RSP: 002b:00007f1144a96168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 633.428484] RAX: ffffffffffffffda RBX: 00007f1146233f60 RCX: 00007f1146121049 [ 633.435748] RDX: 0000000020000280 RSI: 0000000000005423 RDI: 0000000000000003 [ 633.443008] RBP: 00007f1144a961d0 R08: 0000000000000000 R09: 0000000000000000 [ 633.450283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 633.457557] R13: 00007fffcb75541f R14: 00007f1144a96300 R15: 0000000000022000 [ 633.529936] FAULT_INJECTION: forcing a failure. [ 633.529936] name failslab, interval 1, probability 0, space 0, times 0 [ 633.555341] CPU: 1 PID: 11656 Comm: syz-executor.3 Not tainted 4.14.275-syzkaller #0 [ 633.563236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 633.567798] FAULT_INJECTION: forcing a failure. [ 633.567798] name failslab, interval 1, probability 0, space 0, times 0 [ 633.572583] Call Trace: [ 633.572600] dump_stack+0x1b2/0x281 [ 633.572614] should_fail.cold+0x10a/0x149 [ 633.572629] should_failslab+0xd6/0x130 [ 633.598078] kmem_cache_alloc_trace+0x29a/0x3d0 [ 633.602747] ? dev_uevent_filter+0xd0/0xd0 [ 633.606986] kobject_uevent_env+0x20c/0xf30 [ 633.611315] ? wait_for_completion_io+0x10/0x10 [ 633.615998] ? is_acpi_device_node+0x5b/0x70 [ 633.620415] device_del+0x642/0xa80 [ 633.624051] ? __device_links_no_driver+0x1b0/0x1b0 [ 633.629070] device_unregister+0x22/0xc0 [ 633.633126] device_destroy+0x81/0xa0 [ 633.636917] ? root_device_unregister+0x60/0x60 [ 633.641584] tty_unregister_device+0x7e/0x1a0 [ 633.646081] gsmld_close+0xaa/0x1f0 [ 633.649707] ? gsmtty_cleanup+0x150/0x150 [ 633.653856] tty_ldisc_close+0x8c/0xc0 [ 633.657743] tty_set_ldisc+0x1b3/0x5d0 [ 633.661625] tty_ioctl+0xa2a/0x1430 [ 633.665431] ? tty_fasync+0x2c0/0x2c0 [ 633.669242] ? proc_fail_nth_write+0x7b/0x180 [ 633.673735] ? trace_hardirqs_on+0x10/0x10 [ 633.678020] ? fsnotify+0x974/0x11b0 [ 633.681726] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 633.686655] ? __handle_mm_fault+0x80f/0x4620 [ 633.691155] ? SyS_write+0x1b7/0x210 [ 633.694867] ? tty_fasync+0x2c0/0x2c0 [ 633.698666] do_vfs_ioctl+0x75a/0xff0 [ 633.702468] ? lock_acquire+0x170/0x3f0 [ 633.706446] ? ioctl_preallocate+0x1a0/0x1a0 [ 633.710854] ? __fget+0x265/0x3e0 [ 633.714316] ? do_vfs_ioctl+0xff0/0xff0 [ 633.719323] ? security_file_ioctl+0x83/0xb0 [ 633.723731] SyS_ioctl+0x7f/0xb0 [ 633.727088] ? do_vfs_ioctl+0xff0/0xff0 [ 633.731059] do_syscall_64+0x1d5/0x640 [ 633.734952] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 633.740139] RIP: 0033:0x7f44c3351049 [ 633.743837] RSP: 002b:00007f44c1ca5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 633.752495] RAX: ffffffffffffffda RBX: 00007f44c3464030 RCX: 00007f44c3351049 [ 633.759760] RDX: 0000000020000000 RSI: 0000000000005423 RDI: 0000000000000003 [ 633.767034] RBP: 00007f44c1ca51d0 R08: 0000000000000000 R09: 0000000000000000 05:00:54 executing program 2: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x15) 05:00:54 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000000)=""/85) 05:00:54 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x14) 05:00:54 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) (fail_nth: 2) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) 05:00:54 executing program 2: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x15) [ 633.774301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 633.781564] R13: 00007ffd02e4c4ff R14: 00007f44c1ca5300 R15: 0000000000022000 [ 633.810593] CPU: 0 PID: 11712 Comm: syz-executor.0 Not tainted 4.14.275-syzkaller #0 [ 633.818487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 05:00:54 executing program 2: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x15) 05:00:54 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x15) [ 633.820174] FAULT_INJECTION: forcing a failure. [ 633.820174] name failslab, interval 1, probability 0, space 0, times 0 [ 633.827835] Call Trace: [ 633.827852] dump_stack+0x1b2/0x281 [ 633.827865] should_fail.cold+0x10a/0x149 [ 633.827878] should_failslab+0xd6/0x130 [ 633.827890] kmem_cache_alloc_trace+0x29a/0x3d0 [ 633.827900] ? dev_uevent_filter+0xd0/0xd0 [ 633.827910] kobject_uevent_env+0x20c/0xf30 [ 633.827937] ? wait_for_completion_io+0x10/0x10 [ 633.871143] ? is_acpi_device_node+0x5b/0x70 [ 633.875547] device_del+0x642/0xa80 05:00:55 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x15) [ 633.879178] ? __device_links_no_driver+0x1b0/0x1b0 [ 633.884199] device_unregister+0x22/0xc0 [ 633.888429] device_destroy+0x81/0xa0 [ 633.892221] ? root_device_unregister+0x60/0x60 [ 633.896886] tty_unregister_device+0x7e/0x1a0 [ 633.901369] gsmld_close+0xaa/0x1f0 [ 633.904986] ? gsmtty_cleanup+0x150/0x150 [ 633.909121] tty_ldisc_close+0x8c/0xc0 [ 633.913046] tty_set_ldisc+0x1b3/0x5d0 [ 633.916935] tty_ioctl+0xa2a/0x1430 [ 633.920571] ? tty_fasync+0x2c0/0x2c0 [ 633.924365] ? proc_fail_nth_write+0x7b/0x180 05:00:55 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x15) [ 633.928859] ? trace_hardirqs_on+0x10/0x10 [ 633.933097] ? fsnotify+0x974/0x11b0 [ 633.936805] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 633.941723] ? __handle_mm_fault+0x80f/0x4620 [ 633.946210] ? SyS_write+0x1b7/0x210 [ 633.949920] ? tty_fasync+0x2c0/0x2c0 [ 633.953718] do_vfs_ioctl+0x75a/0xff0 [ 633.957520] ? lock_acquire+0x170/0x3f0 [ 633.961488] ? ioctl_preallocate+0x1a0/0x1a0 [ 633.965892] ? __fget+0x265/0x3e0 [ 633.969338] ? do_vfs_ioctl+0xff0/0xff0 [ 633.973303] ? security_file_ioctl+0x83/0xb0 [ 633.977705] SyS_ioctl+0x7f/0xb0 [ 633.981064] ? do_vfs_ioctl+0xff0/0xff0 [ 633.985037] do_syscall_64+0x1d5/0x640 [ 633.988924] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 633.994107] RIP: 0033:0x7ff93921f049 [ 633.997807] RSP: 002b:00007ff937b73168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 634.005499] RAX: ffffffffffffffda RBX: 00007ff939332030 RCX: 00007ff93921f049 [ 634.012938] RDX: 0000000020000000 RSI: 0000000000005423 RDI: 0000000000000003 [ 634.020193] RBP: 00007ff937b731d0 R08: 0000000000000000 R09: 0000000000000000 [ 634.027446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 634.034695] R13: 00007ffe3772434f R14: 00007ff937b73300 R15: 0000000000022000 [ 634.041975] CPU: 1 PID: 11865 Comm: syz-executor.5 Not tainted 4.14.275-syzkaller #0 [ 634.049850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 634.059199] Call Trace: [ 634.061788] dump_stack+0x1b2/0x281 [ 634.065424] should_fail.cold+0x10a/0x149 [ 634.069577] should_failslab+0xd6/0x130 [ 634.073548] kmem_cache_alloc_trace+0x29a/0x3d0 [ 634.078221] gsmld_open+0xe5/0x7b0 [ 634.081760] ? gsm_cleanup_mux+0x3c0/0x3c0 [ 634.085992] tty_ldisc_open+0x6c/0xb0 [ 634.089792] tty_set_ldisc+0x287/0x5d0 [ 634.093680] tty_ioctl+0xa2a/0x1430 [ 634.097304] ? tty_fasync+0x2c0/0x2c0 [ 634.101101] ? proc_fail_nth_write+0x7b/0x180 [ 634.105594] ? trace_hardirqs_on+0x10/0x10 [ 634.109830] ? fsnotify+0x974/0x11b0 [ 634.113536] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 634.118463] ? debug_check_no_obj_freed+0x2c0/0x680 [ 634.123479] ? SyS_write+0x1b7/0x210 [ 634.127189] ? tty_fasync+0x2c0/0x2c0 [ 634.130982] do_vfs_ioctl+0x75a/0xff0 [ 634.134779] ? lock_acquire+0x170/0x3f0 [ 634.138751] ? ioctl_preallocate+0x1a0/0x1a0 [ 634.143164] ? __fget+0x265/0x3e0 [ 634.146616] ? do_vfs_ioctl+0xff0/0xff0 [ 634.150594] ? security_file_ioctl+0x83/0xb0 [ 634.155003] SyS_ioctl+0x7f/0xb0 [ 634.158367] ? do_vfs_ioctl+0xff0/0xff0 [ 634.162337] do_syscall_64+0x1d5/0x640 [ 634.166223] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 634.171404] RIP: 0033:0x7f1146121049 [ 634.175111] RSP: 002b:00007f1144a96168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 634.182821] RAX: ffffffffffffffda RBX: 00007f1146233f60 RCX: 00007f1146121049 [ 634.190092] RDX: 0000000020000280 RSI: 0000000000005423 RDI: 0000000000000003 [ 634.197355] RBP: 00007f1144a961d0 R08: 0000000000000000 R09: 0000000000000000 [ 634.204618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 634.211881] R13: 00007fffcb75541f R14: 00007f1144a96300 R15: 0000000000022000 05:00:55 executing program 3: ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000040)={0x100000, 0x5000, 0x9, 0x1}) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x9, 0x6000c2) epoll_wait(r1, &(0x7f0000000500)=[{}], 0x1, 0x0) ioctl$TIOCSIG(r1, 0x40045436, 0x32) socketpair(0x1e, 0x5, 0x29, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$MISDN_TIME_STAMP(r2, 0x0, 0x1, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) 05:00:55 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000040)) 05:00:55 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) 05:00:55 executing program 4: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x14) 05:00:55 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) (fail_nth: 3) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) 05:00:55 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000000)=""/85) 05:00:55 executing program 4: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x14) 05:00:55 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) 05:00:55 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000000)=""/85) [ 634.584862] FAULT_INJECTION: forcing a failure. [ 634.584862] name failslab, interval 1, probability 0, space 0, times 0 [ 634.651247] CPU: 1 PID: 12057 Comm: syz-executor.5 Not tainted 4.14.275-syzkaller #0 [ 634.659145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 634.668755] Call Trace: [ 634.671347] dump_stack+0x1b2/0x281 [ 634.674978] should_fail.cold+0x10a/0x149 [ 634.679135] should_failslab+0xd6/0x130 [ 634.683109] kmem_cache_alloc_trace+0x29a/0x3d0 [ 634.687776] gsmld_open+0x151/0x7b0 [ 634.691401] ? gsm_cleanup_mux+0x3c0/0x3c0 [ 634.695636] tty_ldisc_open+0x6c/0xb0 [ 634.699438] tty_set_ldisc+0x287/0x5d0 [ 634.703325] tty_ioctl+0xa2a/0x1430 [ 634.706947] ? tty_fasync+0x2c0/0x2c0 [ 634.710743] ? proc_fail_nth_write+0x7b/0x180 [ 634.715238] ? trace_hardirqs_on+0x10/0x10 [ 634.719566] ? fsnotify+0x974/0x11b0 [ 634.723277] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 634.728202] ? debug_check_no_obj_freed+0x2c0/0x680 [ 634.733214] ? SyS_write+0x1b7/0x210 [ 634.736928] ? tty_fasync+0x2c0/0x2c0 [ 634.740726] do_vfs_ioctl+0x75a/0xff0 [ 634.744527] ? lock_acquire+0x170/0x3f0 [ 634.748527] ? ioctl_preallocate+0x1a0/0x1a0 [ 634.752941] ? __fget+0x265/0x3e0 [ 634.756398] ? do_vfs_ioctl+0xff0/0xff0 [ 634.760373] ? security_file_ioctl+0x83/0xb0 [ 634.764786] SyS_ioctl+0x7f/0xb0 [ 634.769471] ? do_vfs_ioctl+0xff0/0xff0 [ 634.773447] do_syscall_64+0x1d5/0x640 [ 634.777340] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 634.782522] RIP: 0033:0x7f1146121049 [ 634.786224] RSP: 002b:00007f1144a96168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 634.793943] RAX: ffffffffffffffda RBX: 00007f1146233f60 RCX: 00007f1146121049 05:00:55 executing program 4: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x14) 05:00:55 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x14) 05:00:55 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x14) [ 634.801207] RDX: 0000000020000280 RSI: 0000000000005423 RDI: 0000000000000003 [ 634.808474] RBP: 00007f1144a961d0 R08: 0000000000000000 R09: 0000000000000000 [ 634.815739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 634.823006] R13: 00007fffcb75541f R14: 00007f1144a96300 R15: 0000000000022000 05:00:56 executing program 3: ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000040)={0x100000, 0x5000, 0x9, 0x1}) (async) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) (async) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x9, 0x6000c2) epoll_wait(r1, &(0x7f0000000500)=[{}], 0x1, 0x0) (async) ioctl$TIOCSIG(r1, 0x40045436, 0x32) socketpair(0x1e, 0x5, 0x29, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$MISDN_TIME_STAMP(r2, 0x0, 0x1, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) (async, rerun: 64) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) (rerun: 64) 05:00:56 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x20000, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) (async, rerun: 32) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) (async, rerun: 32) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000040)) 05:00:56 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x14) 05:00:56 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) 05:00:56 executing program 1: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x14) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000000000)=""/85) 05:00:56 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) (fail_nth: 4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) 05:00:56 executing program 3: ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000040)={0x100000, 0x5000, 0x9, 0x1}) (async) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) (async) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x9, 0x6000c2) epoll_wait(r1, &(0x7f0000000500)=[{}], 0x1, 0x0) ioctl$TIOCSIG(r1, 0x40045436, 0x32) (async, rerun: 64) socketpair(0x1e, 0x5, 0x29, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) getsockopt$MISDN_TIME_STAMP(r2, 0x0, 0x1, &(0x7f0000000100), &(0x7f0000000140)=0x4) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) 05:00:56 executing program 1: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x14) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000000000)=""/85) [ 635.266301] FAULT_INJECTION: forcing a failure. [ 635.266301] name failslab, interval 1, probability 0, space 0, times 0 [ 635.305869] CPU: 1 PID: 12333 Comm: syz-executor.5 Not tainted 4.14.275-syzkaller #0 [ 635.313768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 635.323116] Call Trace: [ 635.325708] dump_stack+0x1b2/0x281 [ 635.329349] should_fail.cold+0x10a/0x149 [ 635.333497] ? gsm_activate_mux+0x224/0x2e0 [ 635.337819] should_failslab+0xd6/0x130 [ 635.341798] kmem_cache_alloc_trace+0x47/0x3d0 [ 635.346380] gsm_dlci_alloc+0x46/0x460 [ 635.350268] gsm_activate_mux+0x22e/0x2e0 [ 635.354411] gsmld_open+0x4ed/0x7b0 [ 635.358037] ? gsm_cleanup_mux+0x3c0/0x3c0 [ 635.362266] tty_ldisc_open+0x6c/0xb0 [ 635.366063] tty_set_ldisc+0x287/0x5d0 [ 635.369949] tty_ioctl+0xa2a/0x1430 [ 635.373573] ? tty_fasync+0x2c0/0x2c0 [ 635.378239] ? proc_fail_nth_write+0x7b/0x180 [ 635.382739] ? trace_hardirqs_on+0x10/0x10 [ 635.386976] ? fsnotify+0x974/0x11b0 [ 635.390682] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 635.395604] ? debug_check_no_obj_freed+0x2c0/0x680 [ 635.400613] ? SyS_write+0x1b7/0x210 [ 635.404335] ? tty_fasync+0x2c0/0x2c0 [ 635.409000] do_vfs_ioctl+0x75a/0xff0 [ 635.412812] ? lock_acquire+0x170/0x3f0 [ 635.416784] ? ioctl_preallocate+0x1a0/0x1a0 [ 635.421199] ? __fget+0x265/0x3e0 [ 635.424651] ? do_vfs_ioctl+0xff0/0xff0 [ 635.428627] ? security_file_ioctl+0x83/0xb0 [ 635.433483] SyS_ioctl+0x7f/0xb0 [ 635.436845] ? do_vfs_ioctl+0xff0/0xff0 [ 635.440817] do_syscall_64+0x1d5/0x640 [ 635.444705] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 635.449890] RIP: 0033:0x7f1146121049 [ 635.453589] RSP: 002b:00007f1144a96168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 05:00:56 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) 05:00:56 executing program 1: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x14) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000000000)=""/85) 05:00:56 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x14) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000000)=""/85) 05:00:56 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x14) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000000)=""/85) 05:00:56 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x14) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000000)=""/85) [ 635.461291] RAX: ffffffffffffffda RBX: 00007f1146233f60 RCX: 00007f1146121049 [ 635.468554] RDX: 0000000020000280 RSI: 0000000000005423 RDI: 0000000000000003 [ 635.475824] RBP: 00007f1144a961d0 R08: 0000000000000000 R09: 0000000000000000 [ 635.483097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 635.490365] R13: 00007fffcb75541f R14: 00007f1144a96300 R15: 0000000000022000 05:00:57 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x20000, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) (async) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000040)) 05:00:57 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000000)=""/85) 05:00:57 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)) 05:00:57 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) 05:00:57 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) (fail_nth: 5) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) 05:00:57 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x15) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) 05:00:57 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000000)=""/85) 05:00:57 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)) 05:00:57 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) [ 636.422239] FAULT_INJECTION: forcing a failure. [ 636.422239] name failslab, interval 1, probability 0, space 0, times 0 [ 636.488524] CPU: 0 PID: 12881 Comm: syz-executor.5 Not tainted 4.14.275-syzkaller #0 [ 636.496437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 636.506653] Call Trace: [ 636.509239] dump_stack+0x1b2/0x281 [ 636.512867] should_fail.cold+0x10a/0x149 [ 636.517014] should_failslab+0xd6/0x130 [ 636.520986] __kmalloc+0x2c1/0x400 [ 636.524521] ? __kfifo_alloc+0xdc/0x240 [ 636.528491] __kfifo_alloc+0xdc/0x240 [ 636.532290] gsm_dlci_alloc+0xd4/0x460 [ 636.536176] gsm_activate_mux+0x22e/0x2e0 [ 636.540326] gsmld_open+0x4ed/0x7b0 [ 636.543950] ? gsm_cleanup_mux+0x3c0/0x3c0 [ 636.548186] tty_ldisc_open+0x6c/0xb0 [ 636.551981] tty_set_ldisc+0x287/0x5d0 [ 636.555870] tty_ioctl+0xa2a/0x1430 [ 636.559497] ? tty_fasync+0x2c0/0x2c0 [ 636.563301] ? proc_fail_nth_write+0x7b/0x180 [ 636.567794] ? trace_hardirqs_on+0x10/0x10 [ 636.572028] ? fsnotify+0x974/0x11b0 [ 636.575997] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 636.580923] ? debug_check_no_obj_freed+0x2c0/0x680 [ 636.585936] ? SyS_write+0x1b7/0x210 [ 636.589650] ? tty_fasync+0x2c0/0x2c0 [ 636.593454] do_vfs_ioctl+0x75a/0xff0 [ 636.597265] ? lock_acquire+0x170/0x3f0 [ 636.601237] ? ioctl_preallocate+0x1a0/0x1a0 [ 636.605643] ? __fget+0x265/0x3e0 [ 636.609091] ? do_vfs_ioctl+0xff0/0xff0 [ 636.613066] ? security_file_ioctl+0x83/0xb0 [ 636.617474] SyS_ioctl+0x7f/0xb0 [ 636.620845] ? do_vfs_ioctl+0xff0/0xff0 [ 636.624818] do_syscall_64+0x1d5/0x640 [ 636.628708] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 636.633907] RIP: 0033:0x7f1146121049 05:00:57 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000000)=""/85) 05:00:57 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)) [ 636.637611] RSP: 002b:00007f1144a96168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 636.645323] RAX: ffffffffffffffda RBX: 00007f1146233f60 RCX: 00007f1146121049 [ 636.652589] RDX: 0000000020000280 RSI: 0000000000005423 RDI: 0000000000000003 [ 636.659852] RBP: 00007f1144a961d0 R08: 0000000000000000 R09: 0000000000000000 [ 636.667114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 636.674368] R13: 00007fffcb75541f R14: 00007f1144a96300 R15: 0000000000022000 05:00:57 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)) 05:00:58 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/209}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000200)) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000040)={0x1, 0x0, 0xb, 0x5, 0xe0, &(0x7f00000002c0)}) 05:00:58 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) (fail_nth: 6) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) 05:00:58 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x15) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) [ 637.043026] FAULT_INJECTION: forcing a failure. [ 637.043026] name failslab, interval 1, probability 0, space 0, times 0 05:00:58 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)) [ 637.129848] CPU: 1 PID: 13163 Comm: syz-executor.5 Not tainted 4.14.275-syzkaller #0 [ 637.137748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 637.147097] Call Trace: [ 637.149693] dump_stack+0x1b2/0x281 [ 637.153323] should_fail.cold+0x10a/0x149 [ 637.157481] should_failslab+0xd6/0x130 [ 637.161459] kmem_cache_alloc_trace+0x29a/0x3d0 [ 637.166249] tty_register_device_attr+0x1d2/0x710 [ 637.171093] ? redirected_tty_write+0xb0/0xb0 [ 637.175585] ? __raw_spin_lock_init+0x28/0x100 [ 637.180170] ? tty_port_init+0xa2/0x190 [ 637.184140] ? gsm_dlci_alloc+0x390/0x460 [ 637.188289] gsmld_open+0x548/0x7b0 [ 637.191920] ? gsm_cleanup_mux+0x3c0/0x3c0 [ 637.196152] tty_ldisc_open+0x6c/0xb0 [ 637.199953] tty_set_ldisc+0x287/0x5d0 [ 637.203931] tty_ioctl+0xa2a/0x1430 [ 637.207553] ? tty_fasync+0x2c0/0x2c0 [ 637.211349] ? proc_fail_nth_write+0x7b/0x180 [ 637.215842] ? trace_hardirqs_on+0x10/0x10 [ 637.220076] ? fsnotify+0x974/0x11b0 [ 637.223784] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 637.228708] ? debug_check_no_obj_freed+0x2c0/0x680 [ 637.233729] ? SyS_write+0x1b7/0x210 [ 637.237445] ? tty_fasync+0x2c0/0x2c0 [ 637.241243] do_vfs_ioctl+0x75a/0xff0 [ 637.245044] ? lock_acquire+0x170/0x3f0 [ 637.249017] ? ioctl_preallocate+0x1a0/0x1a0 [ 637.253428] ? __fget+0x265/0x3e0 [ 637.256879] ? do_vfs_ioctl+0xff0/0xff0 [ 637.260852] ? security_file_ioctl+0x83/0xb0 [ 637.265257] SyS_ioctl+0x7f/0xb0 [ 637.268626] ? do_vfs_ioctl+0xff0/0xff0 [ 637.272598] do_syscall_64+0x1d5/0x640 05:00:58 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000000)=""/85) 05:00:58 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)) [ 637.276491] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 637.281673] RIP: 0033:0x7f1146121049 [ 637.285377] RSP: 002b:00007f1144a96168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 637.293085] RAX: ffffffffffffffda RBX: 00007f1146233f60 RCX: 00007f1146121049 [ 637.300350] RDX: 0000000020000280 RSI: 0000000000005423 RDI: 0000000000000003 [ 637.307620] RBP: 00007f1144a961d0 R08: 0000000000000000 R09: 0000000000000000 [ 637.314889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 637.322155] R13: 00007fffcb75541f R14: 00007f1144a96300 R15: 0000000000022000 05:00:58 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)) 05:00:58 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x15) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) 05:00:58 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000000)=""/85) 05:00:58 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)) 05:00:58 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000000)=""/85) 05:00:58 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) [ 637.970456] kasan: CONFIG_KASAN_INLINE enabled [ 638.010459] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 638.045023] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 638.051264] Modules linked in: [ 638.054452] CPU: 1 PID: 13163 Comm: syz-executor.5 Not tainted 4.14.275-syzkaller #0 [ 638.062331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 638.071684] task: ffff8880a23404c0 task.stack: ffff8880b4a98000 [ 638.077740] RIP: 0010:cdev_del+0x22/0x90 [ 638.081795] RSP: 0018:ffff8880b4a9fa20 EFLAGS: 00010207 [ 638.087156] RAX: dffffc0000000000 RBX: ffff8880b09d0400 RCX: ffffc900083f6000 [ 638.094416] RDX: 000000000000000c RSI: ffffffff8187ae5d RDI: 0000000000000064 [ 638.101711] RBP: 0000000000000000 R08: ffffffff8b9b5b98 R09: 0000000000000000 [ 638.108973] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880b09d0408 [ 638.116233] R13: ffff8880af798848 R14: ffff8880a99be9c0 R15: ffff8880a341e3a8 [ 638.123496] FS: 00007f1144a96700(0000) GS:ffff8880ba500000(0000) knlGS:0000000000000000 [ 638.131712] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 638.137585] CR2: 00007ffeb92b99b0 CR3: 000000009f423000 CR4: 00000000003406e0 [ 638.144847] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 638.152114] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 638.159377] Call Trace: [ 638.161963] tty_unregister_device+0x101/0x1a0 [ 638.166542] gsmld_close+0xaa/0x1f0 [ 638.170170] ? gsmtty_cleanup+0x150/0x150 [ 638.174318] tty_ldisc_close+0x8c/0xc0 [ 638.178200] tty_ldisc_release+0xe8/0x400 [ 638.182339] tty_release_struct+0x20/0xe0 [ 638.186478] tty_release+0xb3f/0x10d0 [ 638.190277] ? do_tty_hangup+0x30/0x30 [ 638.194164] __fput+0x25f/0x7a0 [ 638.197442] task_work_run+0x11f/0x190 [ 638.201326] get_signal+0x18a3/0x1ca0 [ 638.205120] ? tty_fasync+0x2c0/0x2c0 [ 638.208921] ? proc_fail_nth_write+0x7b/0x180 [ 638.213407] ? trace_hardirqs_on+0x10/0x10 [ 638.217639] do_signal+0x7c/0x1550 [ 638.221177] ? fsnotify+0x974/0x11b0 [ 638.224889] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 638.229808] ? debug_check_no_obj_freed+0x2c0/0x680 [ 638.234813] ? SyS_write+0x1b7/0x210 [ 638.238523] ? setup_sigcontext+0x820/0x820 [ 638.242833] ? tty_fasync+0x2c0/0x2c0 [ 638.246651] ? do_vfs_ioctl+0xe2/0xff0 [ 638.250537] ? lock_acquire+0x170/0x3f0 [ 638.254502] ? ioctl_preallocate+0x1a0/0x1a0 [ 638.258904] ? check_preemption_disabled+0x35/0x240 [ 638.263915] ? kick_process+0xe4/0x170 [ 638.267795] ? task_work_add+0x87/0xe0 [ 638.271692] ? exit_to_usermode_loop+0x41/0x200 [ 638.276361] exit_to_usermode_loop+0x160/0x200 [ 638.280944] ? SyS_ioctl+0x5c/0xb0 [ 638.284479] do_syscall_64+0x4a3/0x640 [ 638.288362] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 638.293545] RIP: 0033:0x7f1146121049 [ 638.297244] RSP: 002b:00007f1144a96168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 638.304952] RAX: 0000000000000000 RBX: 00007f1146233f60 RCX: 00007f1146121049 [ 638.312213] RDX: 0000000020000280 RSI: 0000000000005423 RDI: 0000000000000003 [ 638.319476] RBP: 00007f1144a961d0 R08: 0000000000000000 R09: 0000000000000000 [ 638.326741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 638.334000] R13: 00007fffcb75541f R14: 00007f1144a96300 R15: 0000000000022000 [ 638.341271] Code: e5 44 f7 ff eb d2 0f 1f 00 55 48 89 fd 48 83 ec 08 e8 e3 93 cd ff 48 8d 7d 64 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 04 84 d2 75 4f 05:00:59 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/209}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000200)) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000040)={0x1, 0x0, 0xb, 0x5, 0xe0, &(0x7f00000002c0)}) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x20000, 0x0) (async) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/209}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) (async) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000200)) (async) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000040)={0x1, 0x0, 0xb, 0x5, 0xe0, &(0x7f00000002c0)}) (async) [ 638.360455] RIP: cdev_del+0x22/0x90 RSP: ffff8880b4a9fa20 [ 638.433491] ---[ end trace 5a179b94473b7804 ]--- [ 638.440401] Kernel panic - not syncing: Fatal exception [ 638.445940] Kernel Offset: disabled [ 638.449557] Rebooting in 86400 seconds..