r$trusted_overlay_origin(r1, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r2 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}}, 0x4)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x2, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44080}, 0x4000844)
bind$phonet(0xffffffffffffffff, &(0x7f00000008c0)={0x23, 0x17, 0x80, 0x7}, 0x10)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:27 executing program 2:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r1=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r2 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}}, 0x4)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x2, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44080}, 0x4000844)
bind$phonet(0xffffffffffffffff, &(0x7f00000008c0)={0x23, 0x17, 0x80, 0x7}, 0x10)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:27 executing program 0:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe, 0xaea})
socket$inet6_udplite(0xa, 0x2, 0x88)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3, r3]}, 0x80)

18:37:27 executing program 1:
pipe2$watch_queue(0x0, 0x80)
r0 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r1, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r2=>r0, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r2, 0x28, 0x0, &(0x7f00000001c0), 0x8)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
socket$inet6_udplite(0xa, 0x2, 0x88)

18:37:27 executing program 4:
pipe2$watch_queue(0x0, 0x80)
r0 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r1, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r2=>r0, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r2, 0x28, 0x0, &(0x7f00000001c0), 0x8)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe, 0xaea})
socket$inet6_udplite(0xa, 0x2, 0x88)

18:37:27 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r1=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r2 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}}, 0x4)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x2, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44080}, 0x4000844)
bind$phonet(0xffffffffffffffff, &(0x7f00000008c0)={0x23, 0x17, 0x80, 0x7}, 0x10)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:27 executing program 2:
r0 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r1, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r2=>r0, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r2, 0x28, 0x0, &(0x7f00000001c0), 0x8)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe, 0xaea})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
epoll_create1(0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = open_tree(0xffffffffffffffff, &(0x7f0000000c00)='./file0\x00', 0x1000)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[0xffffffffffffffff, r3, 0xffffffffffffffff, r2, r2]}, 0x80)

18:37:27 executing program 5:
pipe2$watch_queue(&(0x7f0000000000), 0x80)
socket$inet6_udplite(0xa, 0x2, 0x88)

18:37:27 executing program 1:
pipe2$watch_queue(0x0, 0x80)
r0 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r1, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r2=>r0, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r2, 0x28, 0x0, &(0x7f00000001c0), 0x8)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
socket$inet6_udplite(0xa, 0x2, 0x88)

18:37:27 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}}, 0x4)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x2, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r1, 0x0, 0x4000844)
bind$phonet(0xffffffffffffffff, &(0x7f00000008c0)={0x23, 0x17, 0x80, 0x7}, 0x10)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:27 executing program 0:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe, 0xaea})
socket$inet6_udplite(0xa, 0x2, 0x88)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3, r3]}, 0x80)

18:37:27 executing program 4:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe, 0xaea})
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_udplite(0xa, 0x2, 0x88)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3, r3]}, 0x80)

18:37:27 executing program 5:
socket$inet6_udplite(0xa, 0x2, 0x88)

18:37:27 executing program 1:
pipe2$watch_queue(0x0, 0x80)
r0 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r1, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r2=>r0, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r2, 0x28, 0x0, &(0x7f00000001c0), 0x8)
socket$inet6_udplite(0xa, 0x2, 0x88)

18:37:27 executing program 2:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe, 0xaea})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
epoll_create1(0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3, r3]}, 0x80)

18:37:27 executing program 0:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe, 0xaea})
socket$inet6_udplite(0xa, 0x2, 0x88)

18:37:27 executing program 4:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe, 0xaea})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
epoll_create1(0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3, r3]}, 0x80)

18:37:27 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}}, 0x4)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x2, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r1, 0x0, 0x4000844)
bind$phonet(0xffffffffffffffff, &(0x7f00000008c0)={0x23, 0x17, 0x80, 0x7}, 0x10)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:27 executing program 5:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}}, 0x4)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x2, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r1, 0x0, 0x4000844)
bind$phonet(0xffffffffffffffff, &(0x7f00000008c0)={0x23, 0x17, 0x80, 0x7}, 0x10)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:27 executing program 2:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe, 0xaea})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
epoll_create1(0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r4 = open_tree(0xffffffffffffffff, &(0x7f0000000c00)='./file0\x00', 0x1000)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[0xffffffffffffffff, r4, 0xffffffffffffffff, r3, r3]}, 0x80)

18:37:27 executing program 0:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
socket$inet6_udplite(0xa, 0x2, 0x88)

18:37:27 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}}, 0x4)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x2, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r1, 0x0, 0x4000844)
bind$phonet(0xffffffffffffffff, &(0x7f00000008c0)={0x23, 0x17, 0x80, 0x7}, 0x10)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:27 executing program 1:
pipe2$watch_queue(0x0, 0x80)
r0 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r1, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x200}}, './file0\x00'})
socket$inet6_udplite(0xa, 0x2, 0x88)

18:37:27 executing program 4:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r6 = ioctl$NS_GET_PARENT(r4, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000380)={r6, 0x7, 0xfffffffffffffffe, 0xaea})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r4, 0xffffffffffffffff, 0xffffffffffffffff, r3, r3]}, 0x80)

18:37:27 executing program 0:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
socket$inet6_udplite(0xa, 0x2, 0x88)

18:37:27 executing program 5:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r4=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r4, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r5=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r5, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r7 = ioctl$NS_GET_PARENT(r5, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000380)={r7, 0x7, 0xfffffffffffffffe, 0xaea})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
sendmsg$L2TP_CMD_NOOP(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44080}, 0x4000844)
bind$phonet(0xffffffffffffffff, &(0x7f00000008c0)={0x23, 0x17, 0x80, 0x7}, 0x10)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))

18:37:27 executing program 2:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
epoll_create1(0x0)
bind$phonet(0xffffffffffffffff, &(0x7f00000008c0)={0x23, 0x17, 0x80, 0x7}, 0x10)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
fcntl$setown(r5, 0x8, 0x0)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r4, 0xffffffffffffffff, 0xffffffffffffffff, r3, r3]}, 0x80)

18:37:27 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}}, 0x4)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x2, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44080}, 0x4000844)
bind$phonet(0xffffffffffffffff, &(0x7f00000008c0)={0x23, 0x17, 0x80, 0x7}, 0x10)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:27 executing program 0:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
socket$inet6_udplite(0xa, 0x2, 0x88)

18:37:27 executing program 1:
pipe2$watch_queue(0x0, 0x80)
r0 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r1, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
socket$inet6_udplite(0xa, 0x2, 0x88)

18:37:27 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}}, 0x4)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x2, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44080}, 0x4000844)
bind$phonet(0xffffffffffffffff, &(0x7f00000008c0)={0x23, 0x17, 0x80, 0x7}, 0x10)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:27 executing program 5:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r4=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r4, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r5=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r5, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r7 = ioctl$NS_GET_PARENT(r5, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000380)={r7, 0x7, 0xfffffffffffffffe, 0xaea})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
sendmsg$L2TP_CMD_NOOP(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44080}, 0x4000844)
bind$phonet(0xffffffffffffffff, &(0x7f00000008c0)={0x23, 0x17, 0x80, 0x7}, 0x10)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))

18:37:27 executing program 1:
pipe2$watch_queue(0x0, 0x80)
r0 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r1, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
socket$inet6_udplite(0xa, 0x2, 0x88)

18:37:27 executing program 4:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r4=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r4, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r5=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r5, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe, 0xaea})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
sendmsg$L2TP_CMD_NOOP(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44080}, 0x4000844)
bind$phonet(0xffffffffffffffff, &(0x7f00000008c0)={0x23, 0x17, 0x80, 0x7}, 0x10)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r5, 0xffffffffffffffff, 0xffffffffffffffff, r4, r4]}, 0x80)

18:37:27 executing program 0:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0x200}}, './file0\x00'})
socket$inet6_udplite(0xa, 0x2, 0x88)

18:37:27 executing program 0:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
socket$inet6_udplite(0xa, 0x2, 0x88)

18:37:27 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}}, 0x4)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x2, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44080}, 0x4000844)
bind$phonet(0xffffffffffffffff, &(0x7f00000008c0)={0x23, 0x17, 0x80, 0x7}, 0x10)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:27 executing program 1:
pipe2$watch_queue(0x0, 0x80)
r0 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'})
socket$inet6_udplite(0xa, 0x2, 0x88)

18:37:27 executing program 2:
msgctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/36)
r0 = msgget$private(0x0, 0x508)
msgctl$MSG_INFO(r0, 0xc, &(0x7f0000000040)=""/66)
msgget$private(0x0, 0x0)

18:37:27 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}}, 0x4)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x2, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000840)={&(0x7f0000000780), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44080}, 0x4000844)
bind$phonet(0xffffffffffffffff, &(0x7f00000008c0)={0x23, 0x17, 0x80, 0x7}, 0x10)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:27 executing program 1:
pipe2$watch_queue(0x0, 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
socket$inet6_udplite(0xa, 0x2, 0x88)

18:37:27 executing program 0:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'})
socket$inet6_udplite(0xa, 0x2, 0x88)

18:37:27 executing program 1:
pipe2$watch_queue(0x0, 0x80)
socket$inet6_udplite(0xa, 0x2, 0x88)

18:37:27 executing program 5:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r4=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r4, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r5=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r5, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r7 = ioctl$NS_GET_PARENT(r5, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000380)={r7, 0x7, 0xfffffffffffffffe, 0xaea})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
sendmsg$L2TP_CMD_NOOP(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44080}, 0x4000844)
bind$phonet(0xffffffffffffffff, &(0x7f00000008c0)={0x23, 0x17, 0x80, 0x7}, 0x10)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))

18:37:27 executing program 2:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r4=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r4, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r5=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r5, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe, 0xaea})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
sendmsg$L2TP_CMD_NOOP(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44080}, 0x4000844)
bind$phonet(0xffffffffffffffff, &(0x7f00000008c0)={0x23, 0x17, 0x80, 0x7}, 0x10)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r5, 0xffffffffffffffff, 0xffffffffffffffff, r4, r4]}, 0x80)

18:37:27 executing program 4:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r4=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r4, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r5=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r5, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe, 0xaea})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
sendmsg$L2TP_CMD_NOOP(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44080}, 0x4000844)
bind$phonet(0xffffffffffffffff, &(0x7f00000008c0)={0x23, 0x17, 0x80, 0x7}, 0x10)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r5, 0xffffffffffffffff, 0xffffffffffffffff, r4, r4]}, 0x80)

18:37:27 executing program 1:
socket$inet6_udplite(0xa, 0x2, 0x88)

18:37:27 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}}, 0x4)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x2, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000840)={&(0x7f0000000780), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44080}, 0x4000844)
bind$phonet(0xffffffffffffffff, &(0x7f00000008c0)={0x23, 0x17, 0x80, 0x7}, 0x10)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:27 executing program 0:
pipe2$watch_queue(&(0x7f0000000000), 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
socket$inet6_udplite(0xa, 0x2, 0x88)

18:37:27 executing program 2:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r4=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r4, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r5=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r5, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r7 = ioctl$NS_GET_PARENT(r5, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000380)={r7, 0x7, 0xfffffffffffffffe, 0xaea})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
sendmsg$L2TP_CMD_NOOP(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44080}, 0x4000844)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r5, 0xffffffffffffffff, 0xffffffffffffffff, r4, r4]}, 0x80)

18:37:27 executing program 5:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r4=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r4, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r5=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r5, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r7 = ioctl$NS_GET_PARENT(r5, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000380)={r7, 0x7, 0xfffffffffffffffe, 0xaea})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
sendmsg$L2TP_CMD_NOOP(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44080}, 0x4000844)
bind$phonet(0xffffffffffffffff, &(0x7f00000008c0)={0x23, 0x17, 0x80, 0x7}, 0x10)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))

18:37:27 executing program 0:
pipe2$watch_queue(&(0x7f0000000000), 0x80)
socket$inet6_udplite(0xa, 0x2, 0x88)

18:37:27 executing program 1:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0, {0x10000}}, './file0\x00'})
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe, 0xaea})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
epoll_create1(0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r5 = open_tree(0xffffffffffffffff, &(0x7f0000000c00)='./file0\x00', 0x1000)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r4, r5, 0xffffffffffffffff, r3, r3]}, 0x80)

18:37:27 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}}, 0x4)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x2, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000840)={&(0x7f0000000780), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44080}, 0x4000844)
bind$phonet(0xffffffffffffffff, &(0x7f00000008c0)={0x23, 0x17, 0x80, 0x7}, 0x10)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:27 executing program 1:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe, 0xaea})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
epoll_create1(0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r5 = open_tree(0xffffffffffffffff, &(0x7f0000000c00)='./file0\x00', 0x1000)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r4, r5, 0xffffffffffffffff, r3, r3]}, 0x80)

18:37:27 executing program 0:
socket$inet6_udplite(0xa, 0x2, 0x88)

18:37:27 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}}, 0x4)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x2, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x44080}, 0x4000844)
bind$phonet(0xffffffffffffffff, &(0x7f00000008c0)={0x23, 0x17, 0x80, 0x7}, 0x10)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:27 executing program 4:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
epoll_create1(0x0)
bind$phonet(0xffffffffffffffff, &(0x7f00000008c0)={0x23, 0x17, 0x80, 0x7}, 0x10)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
fcntl$setown(r5, 0x8, 0x0)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r4, 0xffffffffffffffff, 0xffffffffffffffff, r3, r3]}, 0x80)

18:37:27 executing program 2:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
socket$nl_generic(0x10, 0x3, 0x10)
epoll_create1(0x0)
bind$phonet(0xffffffffffffffff, &(0x7f00000008c0)={0x23, 0x17, 0x80, 0x7}, 0x10)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
fcntl$setown(r5, 0x8, 0x0)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r4, 0xffffffffffffffff, 0xffffffffffffffff, r3, r3]}, 0x80)

18:37:27 executing program 1:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r4=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r4, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r5=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r5, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r7 = ioctl$NS_GET_PARENT(r5, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000380)={r7, 0x7, 0xfffffffffffffffe, 0xaea})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
sendmsg$L2TP_CMD_NOOP(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44080}, 0x4000844)
bind$phonet(0xffffffffffffffff, &(0x7f00000008c0)={0x23, 0x17, 0x80, 0x7}, 0x10)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r5, 0xffffffffffffffff, 0xffffffffffffffff, r4, r4]}, 0x80)

18:37:27 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}}, 0x4)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x2, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x44080}, 0x4000844)
bind$phonet(0xffffffffffffffff, &(0x7f00000008c0)={0x23, 0x17, 0x80, 0x7}, 0x10)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:27 executing program 0:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r6 = ioctl$NS_GET_PARENT(r4, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000380)={r6, 0x7, 0xfffffffffffffffe, 0xaea})
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
epoll_create1(0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r7 = open_tree(0xffffffffffffffff, &(0x7f0000000c00)='./file0\x00', 0x1000)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r4, r7, 0xffffffffffffffff, r3, r3]}, 0x80)

18:37:27 executing program 5:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r4=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r4, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r5=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r5, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r7 = ioctl$NS_GET_PARENT(r5, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000380)={r7, 0x7, 0xfffffffffffffffe, 0xaea})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
sendmsg$L2TP_CMD_NOOP(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44080}, 0x4000844)
bind$phonet(0xffffffffffffffff, &(0x7f00000008c0)={0x23, 0x17, 0x80, 0x7}, 0x10)

18:37:27 executing program 2:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r6 = ioctl$NS_GET_PARENT(r4, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000380)={r6, 0x7, 0xfffffffffffffffe, 0xaea})
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
epoll_create1(0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r7 = open_tree(0xffffffffffffffff, &(0x7f0000000c00)='./file0\x00', 0x1000)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r4, r7, 0xffffffffffffffff, r3, r3]}, 0x80)

18:37:27 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}}, 0x4)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x2, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x44080}, 0x4000844)
bind$phonet(0xffffffffffffffff, &(0x7f00000008c0)={0x23, 0x17, 0x80, 0x7}, 0x10)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:27 executing program 1:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r6 = ioctl$NS_GET_PARENT(r4, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000380)={r6, 0x7, 0xfffffffffffffffe, 0xaea})
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
epoll_create1(0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r7 = open_tree(0xffffffffffffffff, &(0x7f0000000c00)='./file0\x00', 0x1000)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r4, r7, 0xffffffffffffffff, r3, r3]}, 0x80)

18:37:27 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}}, 0x4)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x2, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={0x0}, 0x1, 0x0, 0x0, 0x44080}, 0x4000844)
bind$phonet(0xffffffffffffffff, &(0x7f00000008c0)={0x23, 0x17, 0x80, 0x7}, 0x10)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:27 executing program 4:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
ioctl$NS_GET_PARENT(r4, 0xb702, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
epoll_create1(0x0)
bind$phonet(0xffffffffffffffff, &(0x7f00000008c0)={0x23, 0x17, 0x80, 0x7}, 0x10)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
fcntl$setown(r5, 0x8, 0x0)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r4, 0xffffffffffffffff, 0xffffffffffffffff, r3, r3]}, 0x80)

18:37:27 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}}, 0x4)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x2, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={0x0}, 0x1, 0x0, 0x0, 0x44080}, 0x4000844)
bind$phonet(0xffffffffffffffff, &(0x7f00000008c0)={0x23, 0x17, 0x80, 0x7}, 0x10)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:27 executing program 0:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r4=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r4, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r5=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r5, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r7 = ioctl$NS_GET_PARENT(r5, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000380)={r7, 0x7, 0xfffffffffffffffe, 0xaea})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r8, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44080}, 0x4000844)
bind$phonet(0xffffffffffffffff, &(0x7f00000008c0)={0x23, 0x17, 0x80, 0x7}, 0x10)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r5, 0xffffffffffffffff, 0xffffffffffffffff, r4, r4]}, 0x80)

18:37:27 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}}, 0x4)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x2, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={0x0}, 0x1, 0x0, 0x0, 0x44080}, 0x4000844)
bind$phonet(0xffffffffffffffff, &(0x7f00000008c0)={0x23, 0x17, 0x80, 0x7}, 0x10)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:27 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}}, 0x4)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x2, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x0, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44080}, 0x4000844)
bind$phonet(0xffffffffffffffff, &(0x7f00000008c0)={0x23, 0x17, 0x80, 0x7}, 0x10)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:27 executing program 2:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r4=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r4, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r5=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r5, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r7 = ioctl$NS_GET_PARENT(r5, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000380)={r7, 0x7, 0xfffffffffffffffe, 0xaea})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r8, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44080}, 0x4000844)
bind$phonet(0xffffffffffffffff, &(0x7f00000008c0)={0x23, 0x17, 0x80, 0x7}, 0x10)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r5, 0xffffffffffffffff, 0xffffffffffffffff, r4, r4]}, 0x80)

18:37:27 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}}, 0x4)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x2, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x0, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44080}, 0x4000844)
bind$phonet(0xffffffffffffffff, &(0x7f00000008c0)={0x23, 0x17, 0x80, 0x7}, 0x10)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:27 executing program 5:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r4=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r4, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r5=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r5, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r7 = ioctl$NS_GET_PARENT(r5, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000380)={r7, 0x7, 0xfffffffffffffffe, 0xaea})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
sendmsg$L2TP_CMD_NOOP(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44080}, 0x4000844)

18:37:27 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}}, 0x4)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x2, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x0, 0x0, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44080}, 0x4000844)
bind$phonet(0xffffffffffffffff, &(0x7f00000008c0)={0x23, 0x17, 0x80, 0x7}, 0x10)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:27 executing program 1:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r6 = ioctl$NS_GET_PARENT(r4, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000380)={r6, 0x7, 0xfffffffffffffffe, 0xaea})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
epoll_create1(0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r7 = open_tree(0xffffffffffffffff, &(0x7f0000000c00)='./file0\x00', 0x1000)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r4, r7, 0xffffffffffffffff, r3, r3]}, 0x80)

18:37:27 executing program 4:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r6 = ioctl$NS_GET_PARENT(r4, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000380)={r6, 0x7, 0xfffffffffffffffe, 0xaea})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
epoll_create1(0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r7 = open_tree(0xffffffffffffffff, &(0x7f0000000c00)='./file0\x00', 0x1000)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r4, r7, 0xffffffffffffffff, r3, r3]}, 0x80)

18:37:27 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}}, 0x4)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x2, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44080}, 0x4000844)
bind$phonet(0xffffffffffffffff, &(0x7f00000008c0)={0x23, 0x17, 0x80, 0x7}, 0x10)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:27 executing program 0:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r4=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r4, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r5=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r5, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r7 = ioctl$NS_GET_PARENT(r5, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000380)={r7, 0x7, 0xfffffffffffffffe, 0xaea})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r8, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44080}, 0x4000844)
bind$phonet(0xffffffffffffffff, &(0x7f00000008c0)={0x23, 0x17, 0x80, 0x7}, 0x10)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r5, 0xffffffffffffffff, 0xffffffffffffffff, r4, r4]}, 0x80)

18:37:28 executing program 2:
msgctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/36)
r0 = msgget$private(0x0, 0x508)
msgctl$MSG_INFO(r0, 0xc, &(0x7f0000000040)=""/66)
r1 = msgget$private(0x0, 0x0)
msgsnd(r1, &(0x7f00000000c0)={0x1, "a897bd4900492c680788983b6a31da6de3d047af910c3d41204c090ed98171fe9b749dad87"}, 0x2d, 0x800)
r2 = msgget$private(0x0, 0x1)
msgsnd(r2, &(0x7f0000000100)={0x3, "54800ae0bbd7c68f51fc928c8b875074a03af0b0207296e070141e01dfcb5ab3e2bc1b2915c015053f08e5c18f78ca8469f2e5e643732925264278695c092bef7252a47d4be11d7dad644ee605f01aca90cbbc2be051013b1aa0e0b2e747fc070db9a99af83a581ec740b6105e2c6238ded6793e7668"}, 0x7e, 0x800)
msgctl$IPC_RMID(r2, 0x0)
msgctl$MSG_INFO(r2, 0xc, &(0x7f0000000180)=""/177)
r3 = msgget$private(0x0, 0xc8)
msgctl$MSG_INFO(r3, 0xc, &(0x7f0000000240)=""/212)
msgsnd(r2, &(0x7f0000000340)={0x3, "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"}, 0x102, 0x800)
msgrcv(r0, &(0x7f0000000480)={0x0, ""/231}, 0xef, 0x1, 0x2000)
msgget$private(0x0, 0x0)
msgsnd(r3, &(0x7f0000000580)={0x0, "d5f3927f185092e9c493f497ac8ab6d143b7acfe48146182e97f4f263776cc91b3d409aa07fa8e385e79658658472b3b553cb67dbc588b55f062aa"}, 0x43, 0x800)
msgctl$MSG_STAT_ANY(0xffffffffffffffff, 0xd, &(0x7f0000000600)=""/8)
msgsnd(r3, &(0x7f0000000640)={0x0, "1f02d0731477ef55e41e39983a638b90dcfab3a02539245facee9a1ce701d0bf926f825872f8c87fe4428aa48ec0e5413e03d2d140ee75c335b0ecb225e11eedac955ba94541ae575abe9b37c29b9e90a3dfac5551727d5965b91e5e632e9e70d6a842d2a41c2f"}, 0x6f, 0x0)
r4 = msgget$private(0x0, 0x400)
msgrcv(r4, &(0x7f00000006c0)={0x0, ""/87}, 0x5f, 0x0, 0x0)
msgsnd(r1, &(0x7f0000000740)={0x3, "998360e1ae5f093f8540b346fa21ea3d44fd6b0cdfee4f5b7742c0d11450047fd08d42a8fb5d2aebca88141866aacba942548a6b8634b4d60ec6b7db848fcc2415a3b54672c20f02197fea27ba45e0b83bfd4147d07eb06c590bee8832ea6c6f8d84e21db14dc8c1faca479044"}, 0x75, 0x0)

18:37:28 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}}, 0x4)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x2, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44080}, 0x4000844)
bind$phonet(0xffffffffffffffff, &(0x7f00000008c0)={0x23, 0x17, 0x80, 0x7}, 0x10)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:28 executing program 1:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r6 = ioctl$NS_GET_PARENT(r4, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000380)={r6, 0x7, 0xfffffffffffffffe, 0xaea})
epoll_create1(0x0)
bind$phonet(0xffffffffffffffff, &(0x7f00000008c0)={0x23, 0x17, 0x80, 0x7}, 0x10)
r7 = socket$inet6_udplite(0xa, 0x2, 0x88)
fcntl$setown(r7, 0x8, 0x0)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r4, 0xffffffffffffffff, 0xffffffffffffffff, r3, r3]}, 0x80)

18:37:28 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}}, 0x4)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x2, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44080}, 0x4000844)
bind$phonet(0xffffffffffffffff, &(0x7f00000008c0)={0x23, 0x17, 0x80, 0x7}, 0x10)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:28 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}}, 0x4)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x2, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x14}, 0x14}, 0x1, 0x0, 0x0, 0x44080}, 0x4000844)
bind$phonet(0xffffffffffffffff, &(0x7f00000008c0)={0x23, 0x17, 0x80, 0x7}, 0x10)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:28 executing program 5:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r6 = ioctl$NS_GET_PARENT(r4, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000380)={r6, 0x7, 0xfffffffffffffffe, 0xaea})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
sendmsg$L2TP_CMD_NOOP(r4, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)

18:37:28 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}}, 0x4)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x2, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x14}, 0x14}, 0x1, 0x0, 0x0, 0x44080}, 0x4000844)
bind$phonet(0xffffffffffffffff, &(0x7f00000008c0)={0x23, 0x17, 0x80, 0x7}, 0x10)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:28 executing program 4:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}}, 0x4)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x2, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44080}, 0x4000844)
bind$phonet(0xffffffffffffffff, &(0x7f00000008c0)={0x23, 0x17, 0x80, 0x7}, 0x10)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:28 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}}, 0x4)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x2, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x14}, 0x14}, 0x1, 0x0, 0x0, 0x44080}, 0x4000844)
bind$phonet(0xffffffffffffffff, &(0x7f00000008c0)={0x23, 0x17, 0x80, 0x7}, 0x10)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:28 executing program 4:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r6 = ioctl$NS_GET_PARENT(r4, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000380)={r6, 0x7, 0xfffffffffffffffe, 0xaea})
epoll_create1(0x0)
bind$phonet(0xffffffffffffffff, &(0x7f00000008c0)={0x23, 0x17, 0x80, 0x7}, 0x10)
r7 = socket$inet6_udplite(0xa, 0x2, 0x88)
fcntl$setown(r7, 0x8, 0x0)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r4, 0xffffffffffffffff, 0xffffffffffffffff, r3, r3]}, 0x80)

18:37:28 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}}, 0x4)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x2, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_SPORT={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44080}, 0x4000844)
bind$phonet(0xffffffffffffffff, &(0x7f00000008c0)={0x23, 0x17, 0x80, 0x7}, 0x10)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:28 executing program 0:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r4=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r4, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r5=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r5, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r7 = ioctl$NS_GET_PARENT(r5, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000380)={r7, 0x7, 0xfffffffffffffffe, 0xaea})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r8, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44080}, 0x4000844)
bind$phonet(0xffffffffffffffff, &(0x7f00000008c0)={0x23, 0x17, 0x80, 0x7}, 0x10)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r5, 0xffffffffffffffff, 0xffffffffffffffff, r4, r4]}, 0x80)

18:37:28 executing program 2:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r6 = ioctl$NS_GET_PARENT(r4, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000380)={r6, 0x7, 0xfffffffffffffffe, 0xaea})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
socket$inet6_udplite(0xa, 0x2, 0x88)
r8 = open_tree(0xffffffffffffffff, &(0x7f0000000c00)='./file0\x00', 0x1000)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r4, r8, 0xffffffffffffffff, r3, r3]}, 0x80)

18:37:28 executing program 1:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r6 = ioctl$NS_GET_PARENT(r4, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000380)={r6, 0x7, 0xfffffffffffffffe, 0xaea})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
socket$inet6_udplite(0xa, 0x2, 0x88)
r8 = open_tree(0xffffffffffffffff, &(0x7f0000000c00)='./file0\x00', 0x1000)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r4, r8, 0xffffffffffffffff, r3, r3]}, 0x80)

18:37:28 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}}, 0x4)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x2, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_SPORT={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44080}, 0x4000844)
bind$phonet(0xffffffffffffffff, &(0x7f00000008c0)={0x23, 0x17, 0x80, 0x7}, 0x10)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:28 executing program 5:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r6 = ioctl$NS_GET_PARENT(r4, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000380)={r6, 0x7, 0xfffffffffffffffe, 0xaea})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
sendmsg$L2TP_CMD_NOOP(r4, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)

18:37:28 executing program 4:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r6 = ioctl$NS_GET_PARENT(r4, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000380)={r6, 0x7, 0xfffffffffffffffe, 0xaea})
epoll_create1(0x0)
bind$phonet(0xffffffffffffffff, &(0x7f00000008c0)={0x23, 0x17, 0x80, 0x7}, 0x10)
r7 = socket$inet6_udplite(0xa, 0x2, 0x88)
fcntl$setown(r7, 0x8, 0x0)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r4, 0xffffffffffffffff, 0xffffffffffffffff, r3, r3]}, 0x80)

18:37:28 executing program 0:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r4=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r4, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r5=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r5, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r7 = ioctl$NS_GET_PARENT(r5, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000380)={r7, 0x7, 0xfffffffffffffffe, 0xaea})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r8, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
epoll_create1(0x0)
sendmsg$L2TP_CMD_NOOP(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44080}, 0x4000844)
bind$phonet(0xffffffffffffffff, &(0x7f00000008c0)={0x23, 0x17, 0x80, 0x7}, 0x10)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r5, 0xffffffffffffffff, 0xffffffffffffffff, r4, r4]}, 0x80)

18:37:28 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}}, 0x4)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x2, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_SPORT={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44080}, 0x4000844)
bind$phonet(0xffffffffffffffff, &(0x7f00000008c0)={0x23, 0x17, 0x80, 0x7}, 0x10)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:28 executing program 1:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r6 = ioctl$NS_GET_PARENT(r4, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000380)={r6, 0x7, 0xfffffffffffffffe, 0xaea})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
epoll_create1(0x0)
bind$phonet(0xffffffffffffffff, &(0x7f00000008c0)={0x23, 0x17, 0x80, 0x7}, 0x10)
r8 = socket$inet6_udplite(0xa, 0x2, 0x88)
fcntl$setown(r8, 0x8, 0x0)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r4, 0xffffffffffffffff, 0xffffffffffffffff, r3, r3]}, 0x80)

18:37:28 executing program 2:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r6 = ioctl$NS_GET_PARENT(r4, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000380)={r6, 0x7, 0xfffffffffffffffe, 0xaea})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
socket$inet6_udplite(0xa, 0x2, 0x88)
r8 = open_tree(0xffffffffffffffff, &(0x7f0000000c00)='./file0\x00', 0x1000)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r4, r8, 0xffffffffffffffff, r3, r3]}, 0x80)

18:37:28 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}}, 0x4)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x2, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}}, 0x4000844)
bind$phonet(0xffffffffffffffff, &(0x7f00000008c0)={0x23, 0x17, 0x80, 0x7}, 0x10)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:28 executing program 4:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r6 = ioctl$NS_GET_PARENT(r4, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000380)={r6, 0x7, 0xfffffffffffffffe, 0xaea})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
socket$inet6_udplite(0xa, 0x2, 0x88)
r8 = open_tree(0xffffffffffffffff, &(0x7f0000000c00)='./file0\x00', 0x1000)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r4, r8, 0xffffffffffffffff, r3, r3]}, 0x80)

18:37:28 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}}, 0x4)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x2, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}}, 0x4000844)
bind$phonet(0xffffffffffffffff, &(0x7f00000008c0)={0x23, 0x17, 0x80, 0x7}, 0x10)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:28 executing program 0:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r6 = ioctl$NS_GET_PARENT(r4, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000380)={r6, 0x7, 0xfffffffffffffffe, 0xaea})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
bind$phonet(0xffffffffffffffff, &(0x7f00000008c0)={0x23, 0x17, 0x80, 0x7}, 0x10)
r8 = socket$inet6_udplite(0xa, 0x2, 0x88)
fcntl$setown(r8, 0x8, 0x0)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r4, 0xffffffffffffffff, 0xffffffffffffffff, r3, r3]}, 0x80)

18:37:28 executing program 5:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r6 = ioctl$NS_GET_PARENT(r4, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000380)={r6, 0x7, 0xfffffffffffffffe, 0xaea})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)

18:37:28 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}}, 0x4)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x2, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}}, 0x4000844)
bind$phonet(0xffffffffffffffff, &(0x7f00000008c0)={0x23, 0x17, 0x80, 0x7}, 0x10)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:28 executing program 1:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r6 = ioctl$NS_GET_PARENT(r4, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000380)={r6, 0x7, 0xfffffffffffffffe, 0xaea})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
epoll_create1(0x0)
bind$phonet(0xffffffffffffffff, &(0x7f00000008c0)={0x23, 0x17, 0x80, 0x7}, 0x10)
r8 = socket$inet6_udplite(0xa, 0x2, 0x88)
fcntl$setown(r8, 0x8, 0x0)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r4, 0xffffffffffffffff, 0xffffffffffffffff, r3, r3]}, 0x80)

18:37:29 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}}, 0x4)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x2, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}}, 0x0)
bind$phonet(0xffffffffffffffff, &(0x7f00000008c0)={0x23, 0x17, 0x80, 0x7}, 0x10)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:29 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}}, 0x4)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x2, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}}, 0x0)
bind$phonet(0xffffffffffffffff, 0x0, 0x0)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:29 executing program 2:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r4=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r4, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r5=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r5, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r7 = ioctl$NS_GET_PARENT(r5, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000380)={r7, 0x7, 0xfffffffffffffffe, 0xaea})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r8, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
r9 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_MOD(r9, 0x3, r5, &(0x7f0000000600)={0x3})
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44080}, 0x4000844)
bind$phonet(0xffffffffffffffff, &(0x7f00000008c0)={0x23, 0x17, 0x80, 0x7}, 0x10)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r5, 0xffffffffffffffff, 0xffffffffffffffff, r4, r4]}, 0x80)

18:37:29 executing program 0:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r6 = ioctl$NS_GET_PARENT(r4, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000380)={r6, 0x7, 0xfffffffffffffffe, 0xaea})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
epoll_create1(0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r8 = open_tree(0xffffffffffffffff, &(0x7f0000000c00)='./file0\x00', 0x1000)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r4, r8, 0xffffffffffffffff, r3, r3]}, 0x80)

18:37:29 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}}, 0x4)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x2, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}}, 0x0)
bind$phonet(0xffffffffffffffff, 0x0, 0x0)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:29 executing program 4:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r6 = ioctl$NS_GET_PARENT(r4, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000380)={r6, 0x7, 0xfffffffffffffffe, 0xaea})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
socket$inet6_udplite(0xa, 0x2, 0x88)
r8 = open_tree(0xffffffffffffffff, &(0x7f0000000c00)='./file0\x00', 0x1000)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r4, r8, 0xffffffffffffffff, r3, r3]}, 0x80)

18:37:29 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}}, 0x4)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x2, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}}, 0x0)
bind$phonet(0xffffffffffffffff, 0x0, 0x0)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:29 executing program 5:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r6 = ioctl$NS_GET_PARENT(r4, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000380)={r6, 0x7, 0xfffffffffffffffe, 0xaea})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)

18:37:29 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}}, 0x4)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x2, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}}, 0x0)
bind$phonet(0xffffffffffffffff, 0x0, 0x0)
io_cancel(0x0, 0x0, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:29 executing program 1:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r6 = ioctl$NS_GET_PARENT(r4, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000380)={r6, 0x7, 0xfffffffffffffffe, 0xaea})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
bind$phonet(0xffffffffffffffff, &(0x7f00000008c0)={0x23, 0x17, 0x80, 0x7}, 0x10)
r8 = socket$inet6_udplite(0xa, 0x2, 0x88)
fcntl$setown(r8, 0x8, 0x0)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r4, 0xffffffffffffffff, 0xffffffffffffffff, r3, r3]}, 0x80)

18:37:29 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}}, 0x4)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x2, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}}, 0x0)
bind$phonet(0xffffffffffffffff, 0x0, 0x0)
io_cancel(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:29 executing program 4:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r6 = ioctl$NS_GET_PARENT(r4, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000380)={r6, 0x7, 0xfffffffffffffffe, 0xaea})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
socket$inet6_udplite(0xa, 0x2, 0x88)
r8 = open_tree(0xffffffffffffffff, &(0x7f0000000c00)='./file0\x00', 0x1000)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r4, r8, 0xffffffffffffffff, r3, r3]}, 0x80)

18:37:29 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}}, 0x4)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x2, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}}, 0x0)
bind$phonet(0xffffffffffffffff, 0x0, 0x0)
io_cancel(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:29 executing program 0:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r6 = ioctl$NS_GET_PARENT(r4, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000380)={r6, 0x7, 0xfffffffffffffffe, 0xaea})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
epoll_create1(0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r8 = open_tree(0xffffffffffffffff, &(0x7f0000000c00)='./file0\x00', 0x1000)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r4, r8, 0xffffffffffffffff, r3, r3]}, 0x80)

18:37:29 executing program 2:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r6 = ioctl$NS_GET_PARENT(r4, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000380)={r6, 0x7, 0xfffffffffffffffe, 0xaea})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
epoll_create1(0x0)
bind$phonet(0xffffffffffffffff, &(0x7f00000008c0)={0x23, 0x17, 0x80, 0x7}, 0x10)
r8 = socket$inet6_udplite(0xa, 0x2, 0x88)
fcntl$setown(r8, 0x8, 0x0)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r4, 0xffffffffffffffff, 0xffffffffffffffff, r3, r3]}, 0x80)

18:37:29 executing program 5:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r6 = ioctl$NS_GET_PARENT(r4, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000380)={r6, 0x7, 0xfffffffffffffffe, 0xaea})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)

18:37:29 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}}, 0x4)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x2, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}}, 0x0)
bind$phonet(0xffffffffffffffff, 0x0, 0x0)
io_cancel(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)

18:37:29 executing program 1:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r6 = ioctl$NS_GET_PARENT(r4, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000380)={r6, 0x7, 0xfffffffffffffffe, 0xaea})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
r8 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r4, &(0x7f0000000600)={0x3})
socket$inet6_udplite(0xa, 0x2, 0x88)
r9 = open_tree(0xffffffffffffffff, &(0x7f0000000c00)='./file0\x00', 0x1000)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r4, r9, 0xffffffffffffffff, r3, r3]}, 0x80)

18:37:29 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}}, 0x4)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x2, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}}, 0x0)
bind$phonet(0xffffffffffffffff, 0x0, 0x0)
io_cancel(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)

18:37:29 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}}, 0x4)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x2, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}}, 0x0)
bind$phonet(0xffffffffffffffff, 0x0, 0x0)
io_cancel(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)

18:37:29 executing program 4:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r6 = ioctl$NS_GET_PARENT(r4, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000380)={r6, 0x7, 0xfffffffffffffffe, 0xaea})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
r8 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r4, &(0x7f0000000600)={0x3})
sendmsg$L2TP_CMD_NOOP(r4, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
bind$phonet(0xffffffffffffffff, &(0x7f00000008c0)={0x23, 0x17, 0x80, 0x7}, 0x10)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r4, 0xffffffffffffffff, 0xffffffffffffffff, r3, r3]}, 0x80)

18:37:29 executing program 0:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r6 = ioctl$NS_GET_PARENT(r4, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000380)={r6, 0x7, 0xfffffffffffffffe, 0xaea})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
r8 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r4, &(0x7f0000000600)={0x3})
sendmsg$L2TP_CMD_NOOP(r4, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
bind$phonet(0xffffffffffffffff, &(0x7f00000008c0)={0x23, 0x17, 0x80, 0x7}, 0x10)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r4, 0xffffffffffffffff, 0xffffffffffffffff, r3, r3]}, 0x80)

18:37:29 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}}, 0x4)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x2, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}}, 0x0)
bind$phonet(0xffffffffffffffff, 0x0, 0x0)
io_cancel(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x0, 0x0, &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:29 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}}, 0x4)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x2, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}}, 0x0)
bind$phonet(0xffffffffffffffff, 0x0, 0x0)
io_cancel(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x0, 0x0, &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:29 executing program 5:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r6 = ioctl$NS_GET_PARENT(r4, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000380)={r6, 0x7, 0xfffffffffffffffe, 0xaea})

18:37:29 executing program 2:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r6 = ioctl$NS_GET_PARENT(r4, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000380)={r6, 0x7, 0xfffffffffffffffe, 0xaea})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
r8 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r4, &(0x7f0000000600)={0x3})
bind$phonet(0xffffffffffffffff, &(0x7f00000008c0)={0x23, 0x17, 0x80, 0x7}, 0x10)
r9 = socket$inet6_udplite(0xa, 0x2, 0x88)
fcntl$setown(r9, 0x8, 0x0)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r4, 0xffffffffffffffff, 0xffffffffffffffff, r3, r3]}, 0x80)

18:37:29 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}}, 0x4)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x2, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}}, 0x0)
bind$phonet(0xffffffffffffffff, 0x0, 0x0)
io_cancel(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x0, 0x0, &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:29 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}}, 0x4)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x2, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}}, 0x0)
bind$phonet(0xffffffffffffffff, 0x0, 0x0)
io_cancel(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x7, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:29 executing program 1:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r6 = ioctl$NS_GET_PARENT(r4, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000380)={r6, 0x7, 0xfffffffffffffffe, 0xaea})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
r8 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r4, &(0x7f0000000600)={0x3})
bind$phonet(0xffffffffffffffff, &(0x7f00000008c0)={0x23, 0x17, 0x80, 0x7}, 0x10)
r9 = socket$inet6_udplite(0xa, 0x2, 0x88)
fcntl$setown(r9, 0x8, 0x0)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r4, 0xffffffffffffffff, 0xffffffffffffffff, r3, r3]}, 0x80)

18:37:29 executing program 4:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r4=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r4, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r5=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r5, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r7 = ioctl$NS_GET_PARENT(r5, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000380)={r7, 0x7, 0xfffffffffffffffe, 0xaea})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r8, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
r9 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_MOD(r9, 0x3, r5, &(0x7f0000000600)={0x3})
sendmsg$L2TP_CMD_NOOP(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44080}, 0x4000844)
bind$phonet(0xffffffffffffffff, &(0x7f00000008c0)={0x23, 0x17, 0x80, 0x7}, 0x10)
r10 = socket$inet6_udplite(0xa, 0x2, 0x88)
fcntl$setown(r10, 0x8, 0x0)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r5, 0xffffffffffffffff, 0xffffffffffffffff, r4, r4]}, 0x80)

18:37:29 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}}, 0x4)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x2, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}}, 0x0)
bind$phonet(0xffffffffffffffff, 0x0, 0x0)
io_cancel(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x7, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:29 executing program 0:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r4=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r4, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r5=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r5, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r7 = ioctl$NS_GET_PARENT(r5, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000380)={r7, 0x7, 0xfffffffffffffffe, 0xaea})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r8, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
r9 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_MOD(r9, 0x3, r5, &(0x7f0000000600)={0x3})
sendmsg$L2TP_CMD_NOOP(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44080}, 0x4000844)
bind$phonet(0xffffffffffffffff, &(0x7f00000008c0)={0x23, 0x17, 0x80, 0x7}, 0x10)
r10 = socket$inet6_udplite(0xa, 0x2, 0x88)
fcntl$setown(r10, 0x8, 0x0)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r5, 0xffffffffffffffff, 0xffffffffffffffff, r4, r4]}, 0x80)

18:37:29 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}}, 0x4)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x2, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}}, 0x0)
bind$phonet(0xffffffffffffffff, 0x0, 0x0)
io_cancel(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x7, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:29 executing program 5:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
ioctl$NS_GET_PARENT(r4, 0xb702, 0x0)

18:37:29 executing program 2:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r4=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r4, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r5=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r5, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r7 = ioctl$NS_GET_PARENT(r5, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000380)={<r8=>r7, 0x7, 0xfffffffffffffffe, 0xaea})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r9, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
r10 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_MOD(r10, 0x3, r5, &(0x7f0000000600)={0x3})
sendmsg$L2TP_CMD_NOOP(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44080}, 0x4000844)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000880)={{0x1, 0x1, 0x18, r8, {0xffffffff}}, './file0\x00'})
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r5, 0xffffffffffffffff, 0xffffffffffffffff, r4, r4]}, 0x80)

18:37:29 executing program 1:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r4=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r4, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r5=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r5, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r7 = ioctl$NS_GET_PARENT(r5, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000380)={<r8=>r7, 0x7, 0xfffffffffffffffe, 0xaea})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r9, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
r10 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_MOD(r10, 0x3, r5, &(0x7f0000000600)={0x3})
sendmsg$L2TP_CMD_NOOP(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44080}, 0x4000844)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000880)={{0x1, 0x1, 0x18, r8, {0xffffffff}}, './file0\x00'})
r11 = socket$inet6_udplite(0xa, 0x2, 0x88)
fcntl$setown(r11, 0x8, 0x0)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r5, 0xffffffffffffffff, 0xffffffffffffffff, r4, r4]}, 0x80)

18:37:29 executing program 4:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r4=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r4, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r5=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r5, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r7 = ioctl$NS_GET_PARENT(r5, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000380)={<r8=>r7, 0x7, 0xfffffffffffffffe, 0xaea})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r9, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
r10 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_MOD(r10, 0x3, r5, &(0x7f0000000600)={0x3})
sendmsg$L2TP_CMD_NOOP(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44080}, 0x4000844)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000880)={{0x1, 0x1, 0x18, <r11=>r8, {0xffffffff}}, './file0\x00'})
socket$inet6_udplite(0xa, 0x2, 0x88)
r12 = open_tree(r11, &(0x7f0000000c00)='./file0\x00', 0x1000)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r5, r12, 0xffffffffffffffff, r4, r4]}, 0x80)

18:37:29 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}}, 0x4)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x2, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}}, 0x0)
bind$phonet(0xffffffffffffffff, 0x0, 0x0)
io_cancel(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:29 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}}, 0x4)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x2, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}}, 0x0)
bind$phonet(0xffffffffffffffff, 0x0, 0x0)
io_cancel(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:29 executing program 0:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r4=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r4, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r5=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r5, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r7 = ioctl$NS_GET_PARENT(r5, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000380)={r7, 0x7, 0xfffffffffffffffe, 0xaea})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r8, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
r9 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_MOD(r9, 0x3, r5, &(0x7f0000000600)={0x3})
sendmsg$L2TP_CMD_NOOP(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44080}, 0x4000844)
bind$phonet(0xffffffffffffffff, &(0x7f00000008c0)={0x23, 0x17, 0x80, 0x7}, 0x10)
r10 = socket$inet6_udplite(0xa, 0x2, 0x88)
fcntl$setown(r10, 0x8, 0x0)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r5, 0xffffffffffffffff, 0xffffffffffffffff, r4, r4]}, 0x80)

18:37:29 executing program 5:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
ioctl$NS_GET_PARENT(r4, 0xb702, 0x0)

18:37:29 executing program 2:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r4=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r4, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r5=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r5, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r7 = ioctl$NS_GET_PARENT(r5, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000380)={<r8=>r7, 0x7, 0xfffffffffffffffe, 0xaea})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r9, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
r10 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_MOD(r10, 0x3, r5, &(0x7f0000000600)={0x3})
sendmsg$L2TP_CMD_NOOP(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44080}, 0x4000844)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000880)={{0x1, 0x1, 0x18, r8, {0xffffffff}}, './file0\x00'})
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r5, 0xffffffffffffffff, 0xffffffffffffffff, r4, r4]}, 0x80)

18:37:29 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}}, 0x4)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x2, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}}, 0x0)
bind$phonet(0xffffffffffffffff, 0x0, 0x0)
io_cancel(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:29 executing program 4:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}}, 0x4)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x2, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}}, 0x0)
bind$phonet(0xffffffffffffffff, 0x0, 0x0)
io_cancel(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:29 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}}, 0x4)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x2, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}}, 0x0)
bind$phonet(0xffffffffffffffff, 0x0, 0x0)
io_cancel(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:29 executing program 1:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r4=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r4, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r5=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r5, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r7 = ioctl$NS_GET_PARENT(r5, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000380)={<r8=>r7, 0x7, 0xfffffffffffffffe, 0xaea})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r9, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
r10 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_MOD(r10, 0x3, r5, &(0x7f0000000600)={0x3})
sendmsg$L2TP_CMD_NOOP(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44080}, 0x4000844)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000880)={{0x1, 0x1, 0x18, r8, {0xffffffff}}, './file0\x00'})
r11 = socket$inet6_udplite(0xa, 0x2, 0x88)
fcntl$setown(r11, 0x8, 0x0)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r5, 0xffffffffffffffff, 0xffffffffffffffff, r4, r4]}, 0x80)

18:37:29 executing program 4:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r4=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r4, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r5=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r5, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r7 = ioctl$NS_GET_PARENT(r5, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000380)={<r8=>r7, 0x7, 0xfffffffffffffffe, 0xaea})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r9, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
r10 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_MOD(r10, 0x3, r5, &(0x7f0000000600)={0x3})
sendmsg$L2TP_CMD_NOOP(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44080}, 0x4000844)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000880)={{0x1, 0x1, 0x18, r8, {0xffffffff}}, './file0\x00'})
r11 = socket$inet6_udplite(0xa, 0x2, 0x88)
fcntl$setown(r11, 0x8, 0x0)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r5, 0xffffffffffffffff, 0xffffffffffffffff, r4, r4]}, 0x80)

18:37:29 executing program 0:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r4=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r4, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r5=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r5, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r7 = ioctl$NS_GET_PARENT(r5, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000380)={<r8=>r7, 0x7, 0xfffffffffffffffe, 0xaea})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r9, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
r10 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_MOD(r10, 0x3, r5, &(0x7f0000000600)={0x3})
sendmsg$L2TP_CMD_NOOP(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44080}, 0x4000844)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000880)={{0x1, 0x1, 0x18, <r11=>r8, {0xffffffff}}, './file0\x00'})
bind$phonet(r11, &(0x7f00000008c0)={0x23, 0x17, 0x80, 0x7}, 0x10)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r5, 0xffffffffffffffff, 0xffffffffffffffff, r4, r4]}, 0x80)

18:37:29 executing program 2:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r4=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r4, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r5=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r5, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r7 = ioctl$NS_GET_PARENT(r5, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000380)={<r8=>r7, 0x7, 0xfffffffffffffffe, 0xaea})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r9, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
r10 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_MOD(r10, 0x3, r5, &(0x7f0000000600)={0x3})
sendmsg$L2TP_CMD_NOOP(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44080}, 0x4000844)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000880)={{0x1, 0x1, 0x18, r8, {0xffffffff}}, './file0\x00'})
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r5, 0xffffffffffffffff, 0xffffffffffffffff, r4, r4]}, 0x80)

18:37:29 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}}, 0x4)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x2, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}}, 0x0)
bind$phonet(0xffffffffffffffff, 0x0, 0x0)
io_cancel(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:29 executing program 5:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)

18:37:29 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}}, 0x4)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x2, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}}, 0x0)
bind$phonet(0xffffffffffffffff, 0x0, 0x0)
io_cancel(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x7, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:29 executing program 1:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r4=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r4, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r5=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r5, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r7 = ioctl$NS_GET_PARENT(r5, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000380)={<r8=>r7, 0x7, 0xfffffffffffffffe, 0xaea})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r9, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
r10 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_MOD(r10, 0x3, r5, &(0x7f0000000600)={0x3})
sendmsg$L2TP_CMD_NOOP(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44080}, 0x4000844)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000880)={{0x1, 0x1, 0x18, <r11=>r8, {0xffffffff}}, './file0\x00'})
bind$phonet(r11, &(0x7f00000008c0)={0x23, 0x17, 0x80, 0x7}, 0x10)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r5, 0xffffffffffffffff, 0xffffffffffffffff, r4, r4]}, 0x80)

18:37:29 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}}, 0x4)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x2, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}}, 0x0)
bind$phonet(0xffffffffffffffff, 0x0, 0x0)
io_cancel(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x7, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:29 executing program 2:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r4=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r4, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r5=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r5, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r7 = ioctl$NS_GET_PARENT(r5, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000380)={<r8=>r7, 0x7, 0xfffffffffffffffe, 0xaea})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r9, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
r10 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_MOD(r10, 0x3, r5, &(0x7f0000000600)={0x3})
sendmsg$L2TP_CMD_NOOP(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44080}, 0x4000844)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000880)={{0x1, 0x1, 0x18, r8, {0xffffffff}}, './file0\x00'})
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))

18:37:29 executing program 0:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r4=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r4, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r5=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r5, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r7 = ioctl$NS_GET_PARENT(r5, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000380)={<r8=>r7, 0x7, 0xfffffffffffffffe, 0xaea})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r9, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
r10 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_MOD(r10, 0x3, r5, &(0x7f0000000600)={0x3})
sendmsg$L2TP_CMD_NOOP(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44080}, 0x4000844)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000880)={{0x1, 0x1, 0x18, <r11=>r8, {0xffffffff}}, './file0\x00'})
bind$phonet(r11, &(0x7f00000008c0)={0x23, 0x17, 0x80, 0x7}, 0x10)
r12 = open_tree(r11, &(0x7f0000000c00)='./file0\x00', 0x1000)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r5, r12, 0xffffffffffffffff, r4, r4]}, 0x80)

18:37:29 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}}, 0x4)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x2, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}}, 0x0)
bind$phonet(0xffffffffffffffff, 0x0, 0x0)
io_cancel(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x7, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:29 executing program 4:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r4=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r4, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r5=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r5, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r7 = ioctl$NS_GET_PARENT(r5, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000380)={<r8=>r7, 0x7, 0xfffffffffffffffe, 0xaea})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r9, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
r10 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_MOD(r10, 0x3, r5, &(0x7f0000000600)={0x3})
sendmsg$L2TP_CMD_NOOP(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44080}, 0x4000844)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000880)={{0x1, 0x1, 0x18, r8, {0xffffffff}}, './file0\x00'})
r11 = socket$inet6_udplite(0xa, 0x2, 0x88)
fcntl$setown(r11, 0x8, 0x0)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r5, 0xffffffffffffffff, 0xffffffffffffffff, r4, r4]}, 0x80)

18:37:29 executing program 5:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)

18:37:29 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}}, 0x4)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x2, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}}, 0x0)
bind$phonet(0xffffffffffffffff, 0x0, 0x0)
io_cancel(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:29 executing program 1:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}}, 0x4)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x2, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}}, 0x0)
bind$phonet(0xffffffffffffffff, 0x0, 0x0)
io_cancel(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x7, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:29 executing program 2:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r4=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r4, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r5=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r5, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r7 = ioctl$NS_GET_PARENT(r5, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000380)={<r8=>r7, 0x7, 0xfffffffffffffffe, 0xaea})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r9, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
r10 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_MOD(r10, 0x3, r5, &(0x7f0000000600)={0x3})
sendmsg$L2TP_CMD_NOOP(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44080}, 0x4000844)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000880)={{0x1, 0x1, 0x18, r8, {0xffffffff}}, './file0\x00'})
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))

18:37:29 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}}, 0x4)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x2, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}}, 0x0)
bind$phonet(0xffffffffffffffff, 0x0, 0x0)
io_cancel(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:29 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}}, 0x4)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x2, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}}, 0x0)
bind$phonet(0xffffffffffffffff, 0x0, 0x0)
io_cancel(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:29 executing program 1:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r4=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r4, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r5=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r5, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r7 = ioctl$NS_GET_PARENT(r5, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000380)={<r8=>r7, 0x7, 0xfffffffffffffffe, 0xaea})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r9, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
r10 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_MOD(r10, 0x3, r5, &(0x7f0000000600)={0x3})
sendmsg$L2TP_CMD_NOOP(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44080}, 0x4000844)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000880)={{0x1, 0x1, 0x18, r8, {0xffffffff}}, './file0\x00'})
r11 = socket$inet6_udplite(0xa, 0x2, 0x88)
fcntl$setown(r11, 0x8, 0x0)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r5, 0xffffffffffffffff, 0xffffffffffffffff, r4, r4]}, 0x80)

18:37:29 executing program 0:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r4=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r4, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r5=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r5, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r7 = ioctl$NS_GET_PARENT(r5, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000380)={<r8=>r7, 0x7, 0xfffffffffffffffe, 0xaea})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r9, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
r10 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_MOD(r10, 0x3, r5, &(0x7f0000000600)={0x3})
sendmsg$L2TP_CMD_NOOP(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44080}, 0x4000844)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000880)={{0x1, 0x1, 0x18, <r11=>r8, {0xffffffff}}, './file0\x00'})
bind$phonet(r11, &(0x7f00000008c0)={0x23, 0x17, 0x80, 0x7}, 0x10)
r12 = open_tree(r11, &(0x7f0000000c00)='./file0\x00', 0x1000)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r5, r12, 0xffffffffffffffff, r4, r4]}, 0x80)

18:37:29 executing program 4:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r4=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r4, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r5=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r5, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r7 = ioctl$NS_GET_PARENT(r5, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000380)={<r8=>r7, 0x7, 0xfffffffffffffffe, 0xaea})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r9, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
r10 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_MOD(r10, 0x3, r5, &(0x7f0000000600)={0x3})
sendmsg$L2TP_CMD_NOOP(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44080}, 0x4000844)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000880)={{0x1, 0x1, 0x18, r8, {0xffffffff}}, './file0\x00'})
r11 = socket$inet6_udplite(0xa, 0x2, 0x88)
fcntl$setown(r11, 0x8, 0x0)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r5, 0xffffffffffffffff, 0xffffffffffffffff, r4, r4]}, 0x80)

18:37:29 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}}, 0x4)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x2, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}}, 0x0)
bind$phonet(0xffffffffffffffff, 0x0, 0x0)
io_cancel(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:29 executing program 5:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)

18:37:29 executing program 2:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r4=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r4, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r5=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r5, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r7 = ioctl$NS_GET_PARENT(r5, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000380)={<r8=>r7, 0x7, 0xfffffffffffffffe, 0xaea})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r9, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
r10 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_MOD(r10, 0x3, r5, &(0x7f0000000600)={0x3})
sendmsg$L2TP_CMD_NOOP(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44080}, 0x4000844)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000880)={{0x1, 0x1, 0x18, r8, {0xffffffff}}, './file0\x00'})
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))

18:37:29 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}}, 0x4)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x2, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}}, 0x0)
bind$phonet(0xffffffffffffffff, 0x0, 0x0)
io_cancel(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:29 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}}, 0x4)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x2, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}}, 0x0)
bind$phonet(0xffffffffffffffff, 0x0, 0x0)
io_cancel(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:29 executing program 1:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r4=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r4, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r5=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r5, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r7 = ioctl$NS_GET_PARENT(r5, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000380)={<r8=>r7, 0x7, 0xfffffffffffffffe, 0xaea})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r9, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
r10 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_MOD(r10, 0x3, r5, &(0x7f0000000600)={0x3})
sendmsg$L2TP_CMD_NOOP(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44080}, 0x4000844)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000880)={{0x1, 0x1, 0x18, <r11=>r8, {0xffffffff}}, './file0\x00'})
bind$phonet(r11, &(0x7f00000008c0)={0x23, 0x17, 0x80, 0x7}, 0x10)
socket$inet6_udplite(0xa, 0x2, 0x88)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r5, 0xffffffffffffffff, 0xffffffffffffffff, r4, r4]}, 0x80)

18:37:29 executing program 0:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r4=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r4, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r5=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r5, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r7 = ioctl$NS_GET_PARENT(r5, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000380)={<r8=>r7, 0x7, 0xfffffffffffffffe, 0xaea})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r9, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
r10 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_MOD(r10, 0x3, r5, &(0x7f0000000600)={0x3})
sendmsg$L2TP_CMD_NOOP(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44080}, 0x4000844)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000880)={{0x1, 0x1, 0x18, <r11=>r8, {0xffffffff}}, './file0\x00'})
bind$phonet(r11, &(0x7f00000008c0)={0x23, 0x17, 0x80, 0x7}, 0x10)
r12 = open_tree(r11, &(0x7f0000000c00)='./file0\x00', 0x1000)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r5, r12, 0xffffffffffffffff, r4, r4]}, 0x80)

18:37:29 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}}, 0x4)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x2, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}}, 0x0)
bind$phonet(0xffffffffffffffff, 0x0, 0x0)
io_cancel(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x7, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:29 executing program 4:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r4=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r4, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r5=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r5, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r7 = ioctl$NS_GET_PARENT(r5, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000380)={<r8=>r7, 0x7, 0xfffffffffffffffe, 0xaea})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r9, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
r10 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_MOD(r10, 0x3, r5, &(0x7f0000000600)={0x3})
sendmsg$L2TP_CMD_NOOP(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44080}, 0x4000844)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000880)={{0x1, 0x1, 0x18, r8, {0xffffffff}}, './file0\x00'})
r11 = socket$inet6_udplite(0xa, 0x2, 0x88)
fcntl$setown(r11, 0x8, 0x0)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))

18:37:29 executing program 5:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x10000}}, './file0\x00'})
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)

18:37:29 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}}, 0x4)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x2, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}}, 0x0)
bind$phonet(0xffffffffffffffff, 0x0, 0x0)
io_cancel(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x7, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:29 executing program 2:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r4=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r4, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r5=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r5, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r7 = ioctl$NS_GET_PARENT(r5, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000380)={<r8=>r7, 0x7, 0xfffffffffffffffe, 0xaea})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r9, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
r10 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_MOD(r10, 0x3, r5, &(0x7f0000000600)={0x3})
sendmsg$L2TP_CMD_NOOP(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44080}, 0x4000844)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000880)={{0x1, 0x1, 0x18, r8, {0xffffffff}}, './file0\x00'})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r5, 0xffffffffffffffff, 0xffffffffffffffff, r4, r4]}, 0x80)

18:37:29 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}}, 0x4)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x2, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}}, 0x0)
bind$phonet(0xffffffffffffffff, 0x0, 0x0)
io_cancel(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x7, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:29 executing program 1:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r4=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r4, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r5=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r5, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r7 = ioctl$NS_GET_PARENT(r5, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000380)={<r8=>r7, 0x7, 0xfffffffffffffffe, 0xaea})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r9, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
r10 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_MOD(r10, 0x3, r5, &(0x7f0000000600)={0x3})
sendmsg$L2TP_CMD_NOOP(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44080}, 0x4000844)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000880)={{0x1, 0x1, 0x18, <r11=>r8, {0xffffffff}}, './file0\x00'})
bind$phonet(r11, &(0x7f00000008c0)={0x23, 0x17, 0x80, 0x7}, 0x10)
socket$inet6_udplite(0xa, 0x2, 0x88)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r5, 0xffffffffffffffff, 0xffffffffffffffff, r4, r4]}, 0x80)

18:37:29 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}}, 0x4)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x2, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}}, 0x0)
bind$phonet(0xffffffffffffffff, 0x0, 0x0)
io_cancel(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:29 executing program 0:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r4=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r4, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r5=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r5, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r7 = ioctl$NS_GET_PARENT(r5, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000380)={<r8=>r7, 0x7, 0xfffffffffffffffe, 0xaea})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r9, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
r10 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_MOD(r10, 0x3, r5, &(0x7f0000000600)={0x3})
sendmsg$L2TP_CMD_NOOP(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44080}, 0x4000844)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000880)={{0x1, 0x1, 0x18, <r11=>r8, {0xffffffff}}, './file0\x00'})
bind$phonet(r11, &(0x7f00000008c0)={0x23, 0x17, 0x80, 0x7}, 0x10)
r12 = open_tree(r11, &(0x7f0000000c00)='./file0\x00', 0x1000)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r5, r12, 0xffffffffffffffff, r4, r4]}, 0x80)

18:37:29 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}}, 0x4)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x2, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}}, 0x0)
bind$phonet(0xffffffffffffffff, 0x0, 0x0)
io_cancel(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:29 executing program 4:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r4=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r4, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r5=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r5, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r7 = ioctl$NS_GET_PARENT(r5, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000380)={<r8=>r7, 0x7, 0xfffffffffffffffe, 0xaea})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r9, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
r10 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_MOD(r10, 0x3, r5, &(0x7f0000000600)={0x3})
sendmsg$L2TP_CMD_NOOP(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44080}, 0x4000844)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000880)={{0x1, 0x1, 0x18, r8, {0xffffffff}}, './file0\x00'})
r11 = socket$inet6_udplite(0xa, 0x2, 0x88)
fcntl$setown(r11, 0x8, 0x0)

18:37:29 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}}, 0x4)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x2, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}}, 0x0)
bind$phonet(0xffffffffffffffff, 0x0, 0x0)
io_cancel(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:29 executing program 5:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)

18:37:29 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}}, 0x4)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x2, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}}, 0x0)
bind$phonet(0xffffffffffffffff, 0x0, 0x0)
io_cancel(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:29 executing program 2:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r4=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r4, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r5=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r5, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r7 = ioctl$NS_GET_PARENT(r5, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000380)={<r8=>r7, 0x7, 0xfffffffffffffffe, 0xaea})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r9, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
r10 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_MOD(r10, 0x3, r5, &(0x7f0000000600)={0x3})
sendmsg$L2TP_CMD_NOOP(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44080}, 0x4000844)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000880)={{0x1, 0x1, 0x18, r8, {0xffffffff}}, './file0\x00'})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r5, 0xffffffffffffffff, 0xffffffffffffffff, r4, r4]}, 0x80)

18:37:29 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}}, 0x4)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x2, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}}, 0x0)
bind$phonet(0xffffffffffffffff, 0x0, 0x0)
io_cancel(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:29 executing program 1:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r4=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r4, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r5=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r5, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r7 = ioctl$NS_GET_PARENT(r5, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000380)={<r8=>r7, 0x7, 0xfffffffffffffffe, 0xaea})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r9, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
r10 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_MOD(r10, 0x3, r5, &(0x7f0000000600)={0x3})
sendmsg$L2TP_CMD_NOOP(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44080}, 0x4000844)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000880)={{0x1, 0x1, 0x18, <r11=>r8, {0xffffffff}}, './file0\x00'})
bind$phonet(r11, &(0x7f00000008c0)={0x23, 0x17, 0x80, 0x7}, 0x10)
socket$inet6_udplite(0xa, 0x2, 0x88)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r5, 0xffffffffffffffff, 0xffffffffffffffff, r4, r4]}, 0x80)

18:37:29 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}}, 0x4)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x2, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}}, 0x0)
bind$phonet(0xffffffffffffffff, 0x0, 0x0)
io_cancel(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:30 executing program 0:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r4=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r4, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r5=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r5, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r7 = ioctl$NS_GET_PARENT(r5, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000380)={<r8=>r7, 0x7, 0xfffffffffffffffe, 0xaea})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r9, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
r10 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_MOD(r10, 0x3, r5, &(0x7f0000000600)={0x3})
sendmsg$L2TP_CMD_NOOP(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44080}, 0x4000844)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000880)={{0x1, 0x1, 0x18, <r11=>r8, {0xffffffff}}, './file0\x00'})
bind$phonet(r11, &(0x7f00000008c0)={0x23, 0x17, 0x80, 0x7}, 0x10)
r12 = open_tree(r11, &(0x7f0000000c00)='./file0\x00', 0x1000)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r5, r12, 0xffffffffffffffff, r4, r4]}, 0x80)

18:37:30 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}}, 0x4)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x2, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}}, 0x0)
bind$phonet(0xffffffffffffffff, 0x0, 0x0)
io_cancel(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x8, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:30 executing program 4:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r4=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r4, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r5=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r5, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r7 = ioctl$NS_GET_PARENT(r5, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000380)={<r8=>r7, 0x7, 0xfffffffffffffffe, 0xaea})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r9, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
r10 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_MOD(r10, 0x3, r5, &(0x7f0000000600)={0x3})
sendmsg$L2TP_CMD_NOOP(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44080}, 0x4000844)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000880)={{0x1, 0x1, 0x18, r8, {0xffffffff}}, './file0\x00'})
socket$inet6_udplite(0xa, 0x2, 0x88)

18:37:30 executing program 5:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)

18:37:30 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}}, 0x4)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x2, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}}, 0x0)
bind$phonet(0xffffffffffffffff, 0x0, 0x0)
io_cancel(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x8, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:30 executing program 2:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r4=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r4, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r5=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r5, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r7 = ioctl$NS_GET_PARENT(r5, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000380)={<r8=>r7, 0x7, 0xfffffffffffffffe, 0xaea})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r9, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
r10 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_MOD(r10, 0x3, r5, &(0x7f0000000600)={0x3})
sendmsg$L2TP_CMD_NOOP(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44080}, 0x4000844)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000880)={{0x1, 0x1, 0x18, r8, {0xffffffff}}, './file0\x00'})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r5, 0xffffffffffffffff, 0xffffffffffffffff, r4, r4]}, 0x80)

18:37:30 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}}, 0x4)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x2, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}}, 0x0)
bind$phonet(0xffffffffffffffff, 0x0, 0x0)
io_cancel(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x8, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:30 executing program 1:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r4=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r4, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r5=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r5, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r7 = ioctl$NS_GET_PARENT(r5, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000380)={<r8=>r7, 0x7, 0xfffffffffffffffe, 0xaea})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r9, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
r10 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_MOD(r10, 0x3, r5, &(0x7f0000000600)={0x3})
sendmsg$L2TP_CMD_NOOP(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44080}, 0x4000844)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000880)={{0x1, 0x1, 0x18, <r11=>r8, {0xffffffff}}, './file0\x00'})
bind$phonet(r11, &(0x7f00000008c0)={0x23, 0x17, 0x80, 0x7}, 0x10)
socket$inet6_udplite(0xa, 0x2, 0x88)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r5, 0xffffffffffffffff, 0xffffffffffffffff, r4, r4]}, 0x80)

18:37:30 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}}, 0x4)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x2, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}}, 0x0)
bind$phonet(0xffffffffffffffff, 0x0, 0x0)
io_cancel(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x0, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:30 executing program 0:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r4=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r4, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r5=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r5, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r7 = ioctl$NS_GET_PARENT(r5, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000380)={<r8=>r7, 0x7, 0xfffffffffffffffe, 0xaea})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r9, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
r10 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_MOD(r10, 0x3, r5, &(0x7f0000000600)={0x3})
sendmsg$L2TP_CMD_NOOP(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44080}, 0x4000844)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000880)={{0x1, 0x1, 0x18, <r11=>r8, {0xffffffff}}, './file0\x00'})
bind$phonet(r11, &(0x7f00000008c0)={0x23, 0x17, 0x80, 0x7}, 0x10)
r12 = open_tree(r11, &(0x7f0000000c00)='./file0\x00', 0x1000)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r5, r12, 0xffffffffffffffff, r4, r4]}, 0x80)

18:37:30 executing program 4:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r4=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r4, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r5=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r5, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r7 = ioctl$NS_GET_PARENT(r5, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000380)={<r8=>r7, 0x7, 0xfffffffffffffffe, 0xaea})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r9, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
r10 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_MOD(r10, 0x3, r5, &(0x7f0000000600)={0x3})
sendmsg$L2TP_CMD_NOOP(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44080}, 0x4000844)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000880)={{0x1, 0x1, 0x18, r8, {0xffffffff}}, './file0\x00'})

18:37:30 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}}, 0x4)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x2, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}}, 0x0)
bind$phonet(0xffffffffffffffff, 0x0, 0x0)
io_cancel(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x0, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:30 executing program 2:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r4=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r4, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r5=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r5, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r7 = ioctl$NS_GET_PARENT(r5, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000380)={r7, 0x7, 0xfffffffffffffffe, 0xaea})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r8, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
r9 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_MOD(r9, 0x3, r5, &(0x7f0000000600)={0x3})
sendmsg$L2TP_CMD_NOOP(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44080}, 0x4000844)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r5, 0xffffffffffffffff, 0xffffffffffffffff, r4, r4]}, 0x80)

18:37:30 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}}, 0x4)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x2, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}}, 0x0)
bind$phonet(0xffffffffffffffff, 0x0, 0x0)
io_cancel(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x0, 0x0, 0x0, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:30 executing program 5:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)

18:37:30 executing program 1:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r4=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r4, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r5=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r5, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r7 = ioctl$NS_GET_PARENT(r5, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000380)={<r8=>r7, 0x7, 0xfffffffffffffffe, 0xaea})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r9, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
r10 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_MOD(r10, 0x3, r5, &(0x7f0000000600)={0x3})
sendmsg$L2TP_CMD_NOOP(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44080}, 0x4000844)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000880)={{0x1, 0x1, 0x18, r8, {0xffffffff}}, './file0\x00'})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r5, 0xffffffffffffffff, 0xffffffffffffffff, r4, r4]}, 0x80)

18:37:30 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}}, 0x4)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x2, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}}, 0x0)
bind$phonet(0xffffffffffffffff, 0x0, 0x0)
io_cancel(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x0, 0x0, 0x0, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:30 executing program 0:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r4=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r4, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r5=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r5, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r7 = ioctl$NS_GET_PARENT(r5, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000380)={<r8=>r7, 0x7, 0xfffffffffffffffe, 0xaea})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r9, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
r10 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_MOD(r10, 0x3, r5, &(0x7f0000000600)={0x3})
sendmsg$L2TP_CMD_NOOP(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44080}, 0x4000844)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000880)={{0x1, 0x1, 0x18, <r11=>r8, {0xffffffff}}, './file0\x00'})
bind$phonet(r11, &(0x7f00000008c0)={0x23, 0x17, 0x80, 0x7}, 0x10)
open_tree(r11, &(0x7f0000000c00)='./file0\x00', 0x1000)

18:37:30 executing program 4:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r4=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r4, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r5=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r5, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r7 = ioctl$NS_GET_PARENT(r5, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000380)={r7, 0x7, 0xfffffffffffffffe, 0xaea})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r8, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
r9 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_MOD(r9, 0x3, r5, &(0x7f0000000600)={0x3})
sendmsg$L2TP_CMD_NOOP(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44080}, 0x4000844)

18:37:30 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}}, 0x4)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x2, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}}, 0x0)
bind$phonet(0xffffffffffffffff, 0x0, 0x0)
io_cancel(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x0, 0x0, 0x0, 0x0, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:30 executing program 2:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r4=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r4, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r5=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r5, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r7 = ioctl$NS_GET_PARENT(r5, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000380)={r7, 0x7, 0xfffffffffffffffe, 0xaea})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r8, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
r9 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_MOD(r9, 0x3, r5, &(0x7f0000000600)={0x3})
sendmsg$L2TP_CMD_NOOP(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44080}, 0x4000844)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r5, 0xffffffffffffffff, 0xffffffffffffffff, r4, r4]}, 0x80)

18:37:30 executing program 1:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r4=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r4, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r5=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r5, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r7 = ioctl$NS_GET_PARENT(r5, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000380)={<r8=>r7, 0x7, 0xfffffffffffffffe, 0xaea})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r9, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
r10 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_MOD(r10, 0x3, r5, &(0x7f0000000600)={0x3})
sendmsg$L2TP_CMD_NOOP(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44080}, 0x4000844)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000880)={{0x1, 0x1, 0x18, r8, {0xffffffff}}, './file0\x00'})
r11 = socket$inet6_udplite(0xa, 0x2, 0x88)
fcntl$setown(r11, 0x8, 0x0)

18:37:30 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}}, 0x4)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x2, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}}, 0x0)
bind$phonet(0xffffffffffffffff, 0x0, 0x0)
io_cancel(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x0, 0x0, 0x0, 0x0, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:30 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}}, 0x4)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x2, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}}, 0x0)
bind$phonet(0xffffffffffffffff, 0x0, 0x0)
io_cancel(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x0, 0x0, 0x0, 0x0, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:30 executing program 5:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)

18:37:30 executing program 0:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r4=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r4, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r5=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r5, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r7 = ioctl$NS_GET_PARENT(r5, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000380)={<r8=>r7, 0x7, 0xfffffffffffffffe, 0xaea})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r9, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
r10 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_MOD(r10, 0x3, r5, &(0x7f0000000600)={0x3})
sendmsg$L2TP_CMD_NOOP(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44080}, 0x4000844)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000880)={{0x1, 0x1, 0x18, <r11=>r8, {0xffffffff}}, './file0\x00'})
bind$phonet(r11, &(0x7f00000008c0)={0x23, 0x17, 0x80, 0x7}, 0x10)

18:37:30 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}}, 0x4)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x2, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}}, 0x0)
bind$phonet(0xffffffffffffffff, 0x0, 0x0)
io_cancel(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:30 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}}, 0x4)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x2, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}}, 0x0)
bind$phonet(0xffffffffffffffff, 0x0, 0x0)
io_cancel(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:30 executing program 4:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r4=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r4, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r5=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r5, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r7 = ioctl$NS_GET_PARENT(r5, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000380)={r7, 0x7, 0xfffffffffffffffe, 0xaea})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r8, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
r9 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_MOD(r9, 0x3, r5, &(0x7f0000000600)={0x3})
sendmsg$L2TP_CMD_NOOP(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44080}, 0x4000844)

18:37:30 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}}, 0x4)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x2, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}}, 0x0)
bind$phonet(0xffffffffffffffff, 0x0, 0x0)
io_cancel(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:30 executing program 2:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r4=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r4, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r5=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r5, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r7 = ioctl$NS_GET_PARENT(r5, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000380)={r7, 0x7, 0xfffffffffffffffe, 0xaea})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r8, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
r9 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_MOD(r9, 0x3, r5, &(0x7f0000000600)={0x3})
sendmsg$L2TP_CMD_NOOP(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44080}, 0x4000844)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r5, 0xffffffffffffffff, 0xffffffffffffffff, r4, r4]}, 0x80)

18:37:30 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}}, 0x4)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x2, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}}, 0x0)
bind$phonet(0xffffffffffffffff, 0x0, 0x0)
io_cancel(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x0, 0x0, 0x0, 0x3, 0x5, 0x0, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:30 executing program 1:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r4=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r4, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r5=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r5, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r7 = ioctl$NS_GET_PARENT(r5, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000380)={<r8=>r7, 0x7, 0xfffffffffffffffe, 0xaea})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r9, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
r10 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_MOD(r10, 0x3, r5, &(0x7f0000000600)={0x3})
sendmsg$L2TP_CMD_NOOP(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44080}, 0x4000844)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000880)={{0x1, 0x1, 0x18, r8, {0xffffffff}}, './file0\x00'})
r11 = socket$inet6_udplite(0xa, 0x2, 0x88)
fcntl$setown(r11, 0x8, 0x0)

18:37:30 executing program 5:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0x200}}, './file0\x00'})
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)

18:37:30 executing program 0:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r4=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r4, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r5=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r5, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r7 = ioctl$NS_GET_PARENT(r5, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000380)={<r8=>r7, 0x7, 0xfffffffffffffffe, 0xaea})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r9, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
r10 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_MOD(r10, 0x3, r5, &(0x7f0000000600)={0x3})
sendmsg$L2TP_CMD_NOOP(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44080}, 0x4000844)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000880)={{0x1, 0x1, 0x18, r8, {0xffffffff}}, './file0\x00'})

18:37:30 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}}, 0x4)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x2, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}}, 0x0)
bind$phonet(0xffffffffffffffff, 0x0, 0x0)
io_cancel(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x0, 0x0, 0x0, 0x3, 0x5, 0x0, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:30 executing program 4:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r6 = ioctl$NS_GET_PARENT(r4, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000380)={r6, 0x7, 0xfffffffffffffffe, 0xaea})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
r8 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r4, &(0x7f0000000600)={0x3})
sendmsg$L2TP_CMD_NOOP(r4, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)

18:37:30 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}}, 0x4)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x2, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}}, 0x0)
bind$phonet(0xffffffffffffffff, 0x0, 0x0)
io_cancel(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x0, 0x0, 0x0, 0x3, 0x5, 0x0, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:30 executing program 2:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r6 = ioctl$NS_GET_PARENT(r4, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000380)={r6, 0x7, 0xfffffffffffffffe, 0xaea})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
r8 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r4, &(0x7f0000000600)={0x3})
sendmsg$L2TP_CMD_NOOP(r4, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r4, 0xffffffffffffffff, 0xffffffffffffffff, r3, r3]}, 0x80)

18:37:30 executing program 1:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r4=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r4, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r5=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r5, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r7 = ioctl$NS_GET_PARENT(r5, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000380)={<r8=>r7, 0x7, 0xfffffffffffffffe, 0xaea})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r9, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
r10 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_MOD(r10, 0x3, r5, &(0x7f0000000600)={0x3})
sendmsg$L2TP_CMD_NOOP(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44080}, 0x4000844)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000880)={{0x1, 0x1, 0x18, r8, {0xffffffff}}, './file0\x00'})
r11 = socket$inet6_udplite(0xa, 0x2, 0x88)
fcntl$setown(r11, 0x8, 0x0)

18:37:30 executing program 5:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)

18:37:30 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}}, 0x4)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x2, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}}, 0x0)
bind$phonet(0xffffffffffffffff, 0x0, 0x0)
io_cancel(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x0, 0x0, 0x0, 0x3, 0x5, 0xfffffffffffffffe}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:30 executing program 0:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r4=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r4, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r5=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r5, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r7 = ioctl$NS_GET_PARENT(r5, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000380)={<r8=>r7, 0x7, 0xfffffffffffffffe, 0xaea})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r9, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
r10 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_MOD(r10, 0x3, r5, &(0x7f0000000600)={0x3})
sendmsg$L2TP_CMD_NOOP(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44080}, 0x4000844)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000880)={{0x1, 0x1, 0x18, r8, {0xffffffff}}, './file0\x00'})

18:37:30 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}}, 0x4)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x2, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}}, 0x0)
bind$phonet(0xffffffffffffffff, 0x0, 0x0)
io_cancel(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x7, &(0x7f0000000ac0)=@raw=[@alu={0x0, 0x0, 0x0, 0x3, 0x5, 0xfffffffffffffffe}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:30 executing program 4:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r6 = ioctl$NS_GET_PARENT(r4, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000380)={r6, 0x7, 0xfffffffffffffffe, 0xaea})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
r8 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r4, &(0x7f0000000600)={0x3})

18:37:30 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}}, 0x4)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x2, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}}, 0x0)
bind$phonet(0xffffffffffffffff, 0x0, 0x0)
io_cancel(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x7, &(0x7f0000000ac0)=@raw=[@alu={0x0, 0x0, 0x0, 0x3, 0x5, 0xfffffffffffffffe}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:30 executing program 2:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r6 = ioctl$NS_GET_PARENT(r4, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000380)={r6, 0x7, 0xfffffffffffffffe, 0xaea})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
r8 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r4, &(0x7f0000000600)={0x3})
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r4, 0xffffffffffffffff, 0xffffffffffffffff, r3, r3]}, 0x80)

18:37:30 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}}, 0x4)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x2, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}}, 0x0)
bind$phonet(0xffffffffffffffff, 0x0, 0x0)
io_cancel(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x7, &(0x7f0000000ac0)=@raw=[@alu={0x0, 0x0, 0x0, 0x3, 0x5, 0xfffffffffffffffe}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:30 executing program 1:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r4=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r4, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r5=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r5, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r7 = ioctl$NS_GET_PARENT(r5, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000380)={<r8=>r7, 0x7, 0xfffffffffffffffe, 0xaea})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r9, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
r10 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_MOD(r10, 0x3, r5, &(0x7f0000000600)={0x3})
sendmsg$L2TP_CMD_NOOP(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44080}, 0x4000844)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000880)={{0x1, 0x1, 0x18, r8, {0xffffffff}}, './file0\x00'})
socket$inet6_udplite(0xa, 0x2, 0x88)

18:37:30 executing program 5:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)

18:37:30 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}}, 0x4)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x2, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}}, 0x0)
bind$phonet(0xffffffffffffffff, 0x0, 0x0)
io_cancel(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, @alu={0x0, 0x0, 0x0, 0x3, 0x5, 0xfffffffffffffffe}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:30 executing program 0:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r4=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r4, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r5=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r5, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r7 = ioctl$NS_GET_PARENT(r5, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000380)={r7, 0x7, 0xfffffffffffffffe, 0xaea})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r8, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
r9 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_MOD(r9, 0x3, r5, &(0x7f0000000600)={0x3})
sendmsg$L2TP_CMD_NOOP(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44080}, 0x4000844)

18:37:30 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}}, 0x4)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x2, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}}, 0x0)
bind$phonet(0xffffffffffffffff, 0x0, 0x0)
io_cancel(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, @alu={0x0, 0x0, 0x0, 0x3, 0x5, 0xfffffffffffffffe}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:30 executing program 4:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r6 = ioctl$NS_GET_PARENT(r4, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000380)={r6, 0x7, 0xfffffffffffffffe, 0xaea})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
epoll_create1(0x0)

18:37:30 executing program 2:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r6 = ioctl$NS_GET_PARENT(r4, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000380)={r6, 0x7, 0xfffffffffffffffe, 0xaea})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
epoll_create1(0x0)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r4, 0xffffffffffffffff, 0xffffffffffffffff, r3, r3]}, 0x80)

18:37:30 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}}, 0x4)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x2, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}}, 0x0)
bind$phonet(0xffffffffffffffff, 0x0, 0x0)
io_cancel(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, @alu={0x0, 0x0, 0x0, 0x3, 0x5, 0xfffffffffffffffe}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:30 executing program 1:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r4=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r4, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r5=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r5, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r7 = ioctl$NS_GET_PARENT(r5, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000380)={<r8=>r7, 0x7, 0xfffffffffffffffe, 0xaea})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r9, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
r10 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_MOD(r10, 0x3, r5, &(0x7f0000000600)={0x3})
sendmsg$L2TP_CMD_NOOP(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44080}, 0x4000844)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000880)={{0x1, 0x1, 0x18, r8, {0xffffffff}}, './file0\x00'})

18:37:30 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}}, 0x4)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x2, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}}, 0x0)
bind$phonet(0xffffffffffffffff, 0x0, 0x0)
io_cancel(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9}, @alu={0x0, 0x0, 0x0, 0x3, 0x5, 0xfffffffffffffffe}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:30 executing program 5:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)

18:37:30 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}}, 0x4)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x2, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}}, 0x0)
bind$phonet(0xffffffffffffffff, 0x0, 0x0)
io_cancel(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9}, @alu={0x0, 0x0, 0x0, 0x3, 0x5, 0xfffffffffffffffe}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:30 executing program 0:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r6 = ioctl$NS_GET_PARENT(r4, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000380)={r6, 0x7, 0xfffffffffffffffe, 0xaea})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
r8 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r4, &(0x7f0000000600)={0x3})
sendmsg$L2TP_CMD_NOOP(r4, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)

18:37:30 executing program 4:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r6 = ioctl$NS_GET_PARENT(r4, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000380)={r6, 0x7, 0xfffffffffffffffe, 0xaea})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)

18:37:30 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}}, 0x4)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x2, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}}, 0x0)
bind$phonet(0xffffffffffffffff, 0x0, 0x0)
io_cancel(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9}, @alu={0x0, 0x0, 0x0, 0x3, 0x5, 0xfffffffffffffffe}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:30 executing program 2:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r6 = ioctl$NS_GET_PARENT(r4, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000380)={r6, 0x7, 0xfffffffffffffffe, 0xaea})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r4, 0xffffffffffffffff, 0xffffffffffffffff, r3, r3]}, 0x80)

18:37:30 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}}, 0x4)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x2, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}}, 0x0)
bind$phonet(0xffffffffffffffff, 0x0, 0x0)
io_cancel(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x0, 0x0, 0x0, 0x3, 0x5, 0xfffffffffffffffe}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff}], 0x0, 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:30 executing program 1:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r4=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r4, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r5=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r5, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r7 = ioctl$NS_GET_PARENT(r5, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000380)={<r8=>r7, 0x7, 0xfffffffffffffffe, 0xaea})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r9, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
r10 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_MOD(r10, 0x3, r5, &(0x7f0000000600)={0x3})
sendmsg$L2TP_CMD_NOOP(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44080}, 0x4000844)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000880)={{0x1, 0x1, 0x18, r8, {0xffffffff}}, './file0\x00'})

18:37:30 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}}, 0x4)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x2, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}}, 0x0)
bind$phonet(0xffffffffffffffff, 0x0, 0x0)
io_cancel(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x0, 0x0, 0x0, 0x3, 0x5, 0xfffffffffffffffe}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff}], 0x0, 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:30 executing program 5:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)

18:37:30 executing program 0:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r6 = ioctl$NS_GET_PARENT(r4, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000380)={r6, 0x7, 0xfffffffffffffffe, 0xaea})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
r8 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r4, &(0x7f0000000600)={0x3})
sendmsg$L2TP_CMD_NOOP(r4, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)

18:37:30 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}}, 0x4)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x2, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}}, 0x0)
bind$phonet(0xffffffffffffffff, 0x0, 0x0)
io_cancel(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x0, 0x0, 0x0, 0x3, 0x5, 0xfffffffffffffffe}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff}], 0x0, 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:30 executing program 4:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r6 = ioctl$NS_GET_PARENT(r4, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000380)={r6, 0x7, 0xfffffffffffffffe, 0xaea})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)

18:37:30 executing program 2:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r6 = ioctl$NS_GET_PARENT(r4, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000380)={r6, 0x7, 0xfffffffffffffffe, 0xaea})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r4, 0xffffffffffffffff, 0xffffffffffffffff, r3, r3]}, 0x80)

18:37:30 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}}, 0x4)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x2, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}}, 0x0)
bind$phonet(0xffffffffffffffff, 0x0, 0x0)
io_cancel(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x0, 0x0, 0x0, 0x3, 0x5, 0xfffffffffffffffe}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff}], &(0x7f0000000b40)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:30 executing program 1:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r4=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r4, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r5=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r5, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r7 = ioctl$NS_GET_PARENT(r5, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000380)={<r8=>r7, 0x7, 0xfffffffffffffffe, 0xaea})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r9, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
r10 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_MOD(r10, 0x3, r5, &(0x7f0000000600)={0x3})
sendmsg$L2TP_CMD_NOOP(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44080}, 0x4000844)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000880)={{0x1, 0x1, 0x18, r8, {0xffffffff}}, './file0\x00'})

18:37:30 executing program 5:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)

18:37:30 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}}, 0x4)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x2, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}}, 0x0)
bind$phonet(0xffffffffffffffff, 0x0, 0x0)
io_cancel(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x0, 0x0, 0x0, 0x3, 0x5, 0xfffffffffffffffe}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff}], &(0x7f0000000b40)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:30 executing program 0:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r6 = ioctl$NS_GET_PARENT(r4, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000380)={r6, 0x7, 0xfffffffffffffffe, 0xaea})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
r8 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r4, &(0x7f0000000600)={0x3})
sendmsg$L2TP_CMD_NOOP(r4, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)

18:37:30 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}}, 0x4)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x2, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}}, 0x0)
bind$phonet(0xffffffffffffffff, 0x0, 0x0)
io_cancel(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x0, 0x0, 0x0, 0x3, 0x5, 0xfffffffffffffffe}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff}], &(0x7f0000000b40)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:30 executing program 4:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r6 = ioctl$NS_GET_PARENT(r4, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000380)={r6, 0x7, 0xfffffffffffffffe, 0xaea})
socket$nl_generic(0x10, 0x3, 0x10)

18:37:30 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}}, 0x4)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x2, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}}, 0x0)
bind$phonet(0xffffffffffffffff, 0x0, 0x0)
io_cancel(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x0, 0x0, 0x0, 0x3, 0x5, 0xfffffffffffffffe}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:30 executing program 2:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r6 = ioctl$NS_GET_PARENT(r4, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000380)={r6, 0x7, 0xfffffffffffffffe, 0xaea})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r4, 0xffffffffffffffff, 0xffffffffffffffff, r3, r3]}, 0x80)

18:37:30 executing program 0:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r6 = ioctl$NS_GET_PARENT(r4, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000380)={r6, 0x7, 0xfffffffffffffffe, 0xaea})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
r8 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r4, &(0x7f0000000600)={0x3})

18:37:30 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}}, 0x4)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x2, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}}, 0x0)
bind$phonet(0xffffffffffffffff, 0x0, 0x0)
io_cancel(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x0, 0x0, 0x0, 0x3, 0x5, 0xfffffffffffffffe}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:30 executing program 1:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r4=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r4, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r5=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r5, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r7 = ioctl$NS_GET_PARENT(r5, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000380)={r7, 0x7, 0xfffffffffffffffe, 0xaea})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r8, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
r9 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_MOD(r9, 0x3, r5, &(0x7f0000000600)={0x3})
sendmsg$L2TP_CMD_NOOP(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44080}, 0x4000844)
socket$inet6_udplite(0xa, 0x2, 0x88)

18:37:30 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}}, 0x4)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x2, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}}, 0x0)
bind$phonet(0xffffffffffffffff, 0x0, 0x0)
io_cancel(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x0, 0x0, 0x0, 0x3, 0x5, 0xfffffffffffffffe}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:30 executing program 5:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'})
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)

18:37:30 executing program 4:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r6 = ioctl$NS_GET_PARENT(r4, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000380)={r6, 0x7, 0xfffffffffffffffe, 0xaea})
socket$nl_generic(0x10, 0x3, 0x10)

18:37:30 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}}, 0x4)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x2, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}}, 0x0)
bind$phonet(0xffffffffffffffff, 0x0, 0x0)
io_cancel(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x0, 0x0, 0x0, 0x3, 0x5, 0xfffffffffffffffe}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:30 executing program 2:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r6 = ioctl$NS_GET_PARENT(r4, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000380)={r6, 0x7, 0xfffffffffffffffe, 0xaea})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r4, 0xffffffffffffffff, 0xffffffffffffffff, r3, r3]}, 0x80)

18:37:30 executing program 0:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r6 = ioctl$NS_GET_PARENT(r4, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000380)={r6, 0x7, 0xfffffffffffffffe, 0xaea})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
r8 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r4, &(0x7f0000000600)={0x3})

18:37:30 executing program 1:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r6 = ioctl$NS_GET_PARENT(r4, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000380)={r6, 0x7, 0xfffffffffffffffe, 0xaea})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
r8 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r4, &(0x7f0000000600)={0x3})
sendmsg$L2TP_CMD_NOOP(r4, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
socket$inet6_udplite(0xa, 0x2, 0x88)

18:37:30 executing program 5:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'})
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)

18:37:30 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}}, 0x4)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x2, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}}, 0x0)
bind$phonet(0xffffffffffffffff, 0x0, 0x0)
io_cancel(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x0, 0x0, 0x0, 0x3, 0x5, 0xfffffffffffffffe}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:31 executing program 4:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r6 = ioctl$NS_GET_PARENT(r4, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000380)={r6, 0x7, 0xfffffffffffffffe, 0xaea})
socket$nl_generic(0x10, 0x3, 0x10)

18:37:31 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}}, 0x4)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x2, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}}, 0x0)
bind$phonet(0xffffffffffffffff, 0x0, 0x0)
io_cancel(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x0, 0x0, 0x0, 0x3, 0x5, 0xfffffffffffffffe}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:31 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}}, 0x4)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x2, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}}, 0x0)
bind$phonet(0xffffffffffffffff, 0x0, 0x0)
io_cancel(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x0, 0x0, 0x0, 0x3, 0x5, 0xfffffffffffffffe}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:31 executing program 0:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r6 = ioctl$NS_GET_PARENT(r4, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000380)={r6, 0x7, 0xfffffffffffffffe, 0xaea})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
r8 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r4, &(0x7f0000000600)={0x3})

18:37:31 executing program 2:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r6 = ioctl$NS_GET_PARENT(r4, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000380)={r6, 0x7, 0xfffffffffffffffe, 0xaea})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r4, 0xffffffffffffffff, 0xffffffffffffffff, r3, r3]}, 0x80)

18:37:31 executing program 1:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r6 = ioctl$NS_GET_PARENT(r4, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000380)={r6, 0x7, 0xfffffffffffffffe, 0xaea})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
r8 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r4, &(0x7f0000000600)={0x3})
socket$inet6_udplite(0xa, 0x2, 0x88)

18:37:31 executing program 5:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'})
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)

18:37:31 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}}, 0x4)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x2, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}}, 0x0)
bind$phonet(0xffffffffffffffff, 0x0, 0x0)
io_cancel(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x0, 0x0, 0x0, 0x3, 0x5, 0xfffffffffffffffe}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

18:37:31 executing program 2:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r6 = ioctl$NS_GET_PARENT(r4, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000380)={r6, 0x7, 0xfffffffffffffffe, 0xaea})
socket$nl_generic(0x10, 0x3, 0x10)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r4, 0xffffffffffffffff, 0xffffffffffffffff, r3, r3]}, 0x80)

18:37:31 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}}, 0x4)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x2, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}}, 0x0)
bind$phonet(0xffffffffffffffff, 0x0, 0x0)
io_cancel(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x0, 0x0, 0x0, 0x3, 0x5, 0xfffffffffffffffe}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

18:37:31 executing program 4:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r6 = ioctl$NS_GET_PARENT(r4, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000380)={r6, 0x7, 0xfffffffffffffffe, 0xaea})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)

18:37:31 executing program 0:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r6 = ioctl$NS_GET_PARENT(r4, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000380)={r6, 0x7, 0xfffffffffffffffe, 0xaea})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
epoll_create1(0x0)
sendmsg$L2TP_CMD_NOOP(r4, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)

18:37:31 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}}, 0x4)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x2, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}}, 0x0)
bind$phonet(0xffffffffffffffff, 0x0, 0x0)
io_cancel(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x0, 0x0, 0x0, 0x3, 0x5, 0xfffffffffffffffe}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

18:37:31 executing program 5:
pipe2$watch_queue(&(0x7f0000000000), 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)

18:37:31 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}}, 0x4)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x2, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}}, 0x0)
bind$phonet(0xffffffffffffffff, 0x0, 0x0)
io_cancel(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x0, 0x0, 0x0, 0x3, 0x5, 0xfffffffffffffffe}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:31 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}}, 0x4)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x2, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}}, 0x0)
bind$phonet(0xffffffffffffffff, 0x0, 0x0)
io_cancel(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x0, 0x0, 0x0, 0x3, 0x5, 0xfffffffffffffffe}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:31 executing program 1:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r6 = ioctl$NS_GET_PARENT(r4, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000380)={r6, 0x7, 0xfffffffffffffffe, 0xaea})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
epoll_create1(0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)

18:37:31 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}}, 0x4)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x2, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}}, 0x0)
bind$phonet(0xffffffffffffffff, 0x0, 0x0)
io_cancel(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x0, 0x0, 0x0, 0x3, 0x5, 0xfffffffffffffffe}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:31 executing program 2:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r6 = ioctl$NS_GET_PARENT(r4, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000380)={r6, 0x7, 0xfffffffffffffffe, 0xaea})
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r4, 0xffffffffffffffff, 0xffffffffffffffff, r3, r3]}, 0x80)

18:37:31 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}}, 0x4)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x2, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}}, 0x0)
bind$phonet(0xffffffffffffffff, 0x0, 0x0)
io_cancel(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x0, 0x0, 0x0, 0x3, 0x5, 0xfffffffffffffffe}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:31 executing program 4:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
ioctl$NS_GET_PARENT(r4, 0xb702, 0x0)
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)

18:37:31 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}}, 0x4)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x2, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}}, 0x0)
bind$phonet(0xffffffffffffffff, 0x0, 0x0)
io_cancel(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x0, 0x0, 0x0, 0x3, 0x5, 0xfffffffffffffffe}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:31 executing program 0:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r6 = ioctl$NS_GET_PARENT(r4, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000380)={r6, 0x7, 0xfffffffffffffffe, 0xaea})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
sendmsg$L2TP_CMD_NOOP(r4, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)

18:37:31 executing program 5:
pipe2$watch_queue(&(0x7f0000000000), 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)

18:37:31 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}}, 0x4)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x2, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}}, 0x0)
bind$phonet(0xffffffffffffffff, 0x0, 0x0)
io_cancel(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x0, 0x0, 0x0, 0x3, 0x5, 0xfffffffffffffffe}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:31 executing program 1:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r6 = ioctl$NS_GET_PARENT(r4, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000380)={r6, 0x7, 0xfffffffffffffffe, 0xaea})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
socket$inet6_udplite(0xa, 0x2, 0x88)

18:37:31 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}}, 0x4)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x2, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}}, 0x0)
bind$phonet(0xffffffffffffffff, 0x0, 0x0)
io_cancel(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x0, 0x0, 0x0, 0x3, 0x5, 0xfffffffffffffffe}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:31 executing program 2:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r6 = ioctl$NS_GET_PARENT(r4, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000380)={r6, 0x7, 0xfffffffffffffffe, 0xaea})
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r4, 0xffffffffffffffff, 0xffffffffffffffff, r3, r3]}, 0x80)

18:37:31 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}}, 0x4)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x2, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}}, 0x0)
bind$phonet(0xffffffffffffffff, 0x0, 0x0)
io_cancel(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x0, 0x0, 0x0, 0x3, 0x5, 0xfffffffffffffffe}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:31 executing program 4:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)

18:37:31 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}}, 0x4)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x2, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}}, 0x0)
bind$phonet(0xffffffffffffffff, 0x0, 0x0)
io_cancel(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x0, 0x0, 0x0, 0x3, 0x5, 0xfffffffffffffffe}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:31 executing program 0:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r6 = ioctl$NS_GET_PARENT(r4, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000380)={r6, 0x7, 0xfffffffffffffffe, 0xaea})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
sendmsg$L2TP_CMD_NOOP(r4, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)

18:37:31 executing program 5:
pipe2$watch_queue(&(0x7f0000000000), 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)

18:37:31 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}}, 0x4)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x2, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}}, 0x0)
bind$phonet(0xffffffffffffffff, 0x0, 0x0)
io_cancel(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x0, 0x0, 0x0, 0x3, 0x5, 0xfffffffffffffffe}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:31 executing program 1:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r6 = ioctl$NS_GET_PARENT(r4, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000380)={r6, 0x7, 0xfffffffffffffffe, 0xaea})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
socket$inet6_udplite(0xa, 0x2, 0x88)

18:37:31 executing program 2:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r6 = ioctl$NS_GET_PARENT(r4, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000380)={r6, 0x7, 0xfffffffffffffffe, 0xaea})
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r4, 0xffffffffffffffff, 0xffffffffffffffff, r3, r3]}, 0x80)

18:37:31 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}}, 0x4)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x2, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}}, 0x0)
bind$phonet(0xffffffffffffffff, 0x0, 0x0)
io_cancel(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x0, 0x0, 0x0, 0x3, 0x5, 0xfffffffffffffffe}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:31 executing program 4:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)

18:37:31 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}}, 0x4)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x2, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}}, 0x0)
bind$phonet(0xffffffffffffffff, 0x0, 0x0)
io_cancel(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x0, 0x0, 0x0, 0x3, 0x5, 0xfffffffffffffffe}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:31 executing program 0:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r6 = ioctl$NS_GET_PARENT(r4, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000380)={r6, 0x7, 0xfffffffffffffffe, 0xaea})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r4, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)

18:37:31 executing program 1:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r6 = ioctl$NS_GET_PARENT(r4, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000380)={r6, 0x7, 0xfffffffffffffffe, 0xaea})
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_udplite(0xa, 0x2, 0x88)

18:37:31 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}}, 0x4)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x2, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}}, 0x0)
bind$phonet(0xffffffffffffffff, 0x0, 0x0)
io_cancel(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x0, 0x0, 0x0, 0x3, 0x5, 0xfffffffffffffffe}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:31 executing program 5:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'})
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)

18:37:31 executing program 2:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
ioctl$NS_GET_PARENT(r4, 0xb702, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r4, 0xffffffffffffffff, 0xffffffffffffffff, r3, r3]}, 0x80)

18:37:31 executing program 4:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x10000}}, './file0\x00'})
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)

18:37:31 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}}, 0x4)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x2, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}}, 0x0)
bind$phonet(0xffffffffffffffff, 0x0, 0x0)
io_cancel(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x0, 0x0, 0x0, 0x3, 0x5, 0xfffffffffffffffe}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:31 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}}, 0x4)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x2, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}}, 0x0)
bind$phonet(0xffffffffffffffff, 0x0, 0x0)
io_cancel(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x0, 0x0, 0x0, 0x3, 0x5, 0xfffffffffffffffe}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:31 executing program 0:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r6 = ioctl$NS_GET_PARENT(r4, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000380)={r6, 0x7, 0xfffffffffffffffe, 0xaea})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r4, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)

18:37:31 executing program 2:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
ioctl$NS_GET_PARENT(r4, 0xb702, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r4, 0xffffffffffffffff, 0xffffffffffffffff, r3, r3]}, 0x80)

18:37:31 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfffffffffffffffe})
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}}, 0x4)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x2, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}}, 0x0)
bind$phonet(0xffffffffffffffff, 0x0, 0x0)
io_cancel(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x0, 0x0, 0x0, 0x3, 0x5, 0xfffffffffffffffe}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:31 executing program 1:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r6 = ioctl$NS_GET_PARENT(r4, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000380)={r6, 0x7, 0xfffffffffffffffe, 0xaea})
socket$inet6_udplite(0xa, 0x2, 0x88)

18:37:31 executing program 5:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'})
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)

18:37:31 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r6 = ioctl$NS_GET_PARENT(r4, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000380)={r6, 0x7, 0xfffffffffffffffe, 0xaea})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
r8 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r4, &(0x7f0000000600)={0x3})

18:37:31 executing program 4:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)

18:37:31 executing program 0:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r6 = ioctl$NS_GET_PARENT(r4, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000380)={r6, 0x7, 0xfffffffffffffffe, 0xaea})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_NOOP(r4, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)

18:37:31 executing program 2:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
ioctl$NS_GET_PARENT(r4, 0xb702, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r4, 0xffffffffffffffff, 0xffffffffffffffff, r3, r3]}, 0x80)

18:37:31 executing program 1:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
ioctl$NS_GET_PARENT(r4, 0xb702, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)

18:37:31 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r6 = ioctl$NS_GET_PARENT(r4, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000380)={r6, 0x7, 0xfffffffffffffffe, 0xaea})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r4, 0xffffffffffffffff, 0xffffffffffffffff, r3, r3]}, 0x80)

18:37:31 executing program 5:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'})
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)

18:37:31 executing program 1:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
ioctl$NS_GET_PARENT(r4, 0xb702, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)

18:37:31 executing program 4:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)

18:37:31 executing program 0:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r6 = ioctl$NS_GET_PARENT(r4, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000380)={r6, 0x7, 0xfffffffffffffffe, 0xaea})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_NOOP(r4, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)

18:37:31 executing program 2:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r4, 0xffffffffffffffff, 0xffffffffffffffff, r3, r3]}, 0x80)

18:37:31 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r6 = ioctl$NS_GET_PARENT(r4, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000380)={r6, 0x7, 0xfffffffffffffffe, 0xaea})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r4, 0xffffffffffffffff, 0xffffffffffffffff, r3, r3]}, 0x80)

18:37:31 executing program 5:
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'})
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)

18:37:31 executing program 1:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)

18:37:31 executing program 4:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)

18:37:31 executing program 0:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r6 = ioctl$NS_GET_PARENT(r4, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000380)={r6, 0x7, 0xfffffffffffffffe, 0xaea})
sendmsg$L2TP_CMD_NOOP(r4, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)

18:37:31 executing program 2:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r4, 0xffffffffffffffff, 0xffffffffffffffff, r3, r3]}, 0x80)

18:37:31 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r6 = ioctl$NS_GET_PARENT(r4, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000380)={r6, 0x7, 0xfffffffffffffffe, 0xaea})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r4, 0xffffffffffffffff, 0xffffffffffffffff, r3, r3]}, 0x80)

18:37:31 executing program 5:
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)

18:37:31 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r6 = ioctl$NS_GET_PARENT(r4, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000380)={r6, 0x7, 0xfffffffffffffffe, 0xaea})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))

18:37:31 executing program 4:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)

18:37:31 executing program 1:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)

18:37:31 executing program 0:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
ioctl$NS_GET_PARENT(r4, 0xb702, 0x0)
sendmsg$L2TP_CMD_NOOP(r4, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)

18:37:31 executing program 2:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0, {0x10000}}, './file0\x00'})
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r4, 0xffffffffffffffff, 0xffffffffffffffff, r3, r3]}, 0x80)

18:37:31 executing program 5:
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)

18:37:31 executing program 4:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0x200}}, './file0\x00'})
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)

18:37:31 executing program 1:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)

18:37:31 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r6 = ioctl$NS_GET_PARENT(r4, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000380)={r6, 0x7, 0xfffffffffffffffe, 0xaea})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)

18:37:31 executing program 0:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
ioctl$NS_GET_PARENT(r4, 0xb702, 0x0)
sendmsg$L2TP_CMD_NOOP(r4, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)

18:37:31 executing program 5:
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0)
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)

18:37:31 executing program 2:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0, {0x10000}}, './file0\x00'})
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r4, 0xffffffffffffffff, 0xffffffffffffffff, r3, r3]}, 0x80)

18:37:31 executing program 5:
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0)
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)

18:37:31 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r6 = ioctl$NS_GET_PARENT(r4, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000380)={r6, 0x7, 0xfffffffffffffffe, 0xaea})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)

18:37:31 executing program 4:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)

18:37:31 executing program 5:
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0)
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)

18:37:31 executing program 1:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x10000}}, './file0\x00'})
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)

18:37:31 executing program 5:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r6 = ioctl$NS_GET_PARENT(r4, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000380)={r6, 0x7, 0xfffffffffffffffe, 0xaea})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)

18:37:31 executing program 0:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
sendmsg$L2TP_CMD_NOOP(r4, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)

18:37:31 executing program 2:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0, {0x10000}}, './file0\x00'})
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r4, 0xffffffffffffffff, 0xffffffffffffffff, r3, r3]}, 0x80)

18:37:31 executing program 4:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)

18:37:32 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r6 = ioctl$NS_GET_PARENT(r4, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000380)={r6, 0x7, 0xfffffffffffffffe, 0xaea})
socket$nl_generic(0x10, 0x3, 0x10)

18:37:32 executing program 1:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)

18:37:32 executing program 5:
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)

18:37:32 executing program 0:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
sendmsg$L2TP_CMD_NOOP(r4, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)

18:37:32 executing program 2:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3, r3]}, 0x80)

18:37:32 executing program 5:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0, {0x10000}}, './file0\x00'})
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r4, 0xffffffffffffffff, 0xffffffffffffffff, r3, r3]}, 0x80)

18:37:32 executing program 4:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)

18:37:32 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r6 = ioctl$NS_GET_PARENT(r4, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000380)={r6, 0x7, 0xfffffffffffffffe, 0xaea})

18:37:32 executing program 0:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
sendmsg$L2TP_CMD_NOOP(r4, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)

18:37:32 executing program 1:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)

18:37:32 executing program 2:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3, r3]}, 0x80)

18:37:32 executing program 5:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0, {0x10000}}, './file0\x00'})
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r4, 0xffffffffffffffff, 0xffffffffffffffff, r3, r3]}, 0x80)

18:37:32 executing program 4:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)

18:37:32 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
ioctl$NS_GET_PARENT(r4, 0xb702, 0x0)

18:37:32 executing program 0:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0, {0x10000}}, './file0\x00'})
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
sendmsg$L2TP_CMD_NOOP(r4, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)

18:37:32 executing program 1:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)

18:37:32 executing program 2:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3, r3]}, 0x80)

18:37:32 executing program 5:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0, {0x10000}}, './file0\x00'})
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r4, 0xffffffffffffffff, 0xffffffffffffffff, r3, r3]}, 0x80)

18:37:32 executing program 4:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'})
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)

18:37:32 executing program 0:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)

18:37:32 executing program 4:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'})
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)

18:37:32 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)

18:37:32 executing program 1:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0x200}}, './file0\x00'})
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)

18:37:32 executing program 5:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x10000}}, './file0\x00'})
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))

18:37:32 executing program 2:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0, {0x10000}}, './file0\x00'})
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r4, 0xffffffffffffffff, 0xffffffffffffffff, r3, r3]}, 0x80)

18:37:32 executing program 0:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)

18:37:32 executing program 4:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'})
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)

18:37:32 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)

18:37:32 executing program 2:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0, {0x10000}}, './file0\x00'})
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r4, 0xffffffffffffffff, 0xffffffffffffffff, r3, r3]}, 0x80)

18:37:32 executing program 5:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x10000}}, './file0\x00'})
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

18:37:32 executing program 1:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)

18:37:32 executing program 0:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)

18:37:32 executing program 4:
pipe2$watch_queue(&(0x7f0000000000), 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)

18:37:32 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x10000}}, './file0\x00'})
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)

18:37:32 executing program 2:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0, {0x10000}}, './file0\x00'})
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r4, 0xffffffffffffffff, 0xffffffffffffffff, r3, r3]}, 0x80)

18:37:32 executing program 5:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x10000}}, './file0\x00'})
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)

18:37:32 executing program 1:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)

18:37:32 executing program 4:
pipe2$watch_queue(&(0x7f0000000000), 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)

18:37:32 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)

18:37:32 executing program 0:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0x200}}, './file0\x00'})
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)

18:37:32 executing program 2:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0, {0x10000}}, './file0\x00'})
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r4, 0xffffffffffffffff, 0xffffffffffffffff, r3, r3]}, 0x80)

18:37:32 executing program 5:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x10000}}, './file0\x00'})
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)

18:37:32 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)

18:37:32 executing program 1:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)

18:37:32 executing program 0:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0x200}}, './file0\x00'})
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)

18:37:32 executing program 4:
pipe2$watch_queue(&(0x7f0000000000), 0x80)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)

18:37:32 executing program 2:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r3=>r0, {0x10000}}, './file0\x00'})
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:32 executing program 5:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)

18:37:32 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)

18:37:32 executing program 1:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'})
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)

18:37:32 executing program 0:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)

18:37:32 executing program 4:
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)

18:37:32 executing program 2:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r3=>r0, {0x10000}}, './file0\x00'})
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:32 executing program 5:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)

18:37:32 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0x200}}, './file0\x00'})
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)

18:37:32 executing program 1:
pipe2$watch_queue(&(0x7f0000000000), 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)

18:37:32 executing program 4:
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)

18:37:32 executing program 0:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)

18:37:32 executing program 2:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r3=>r0, {0x10000}}, './file0\x00'})
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:32 executing program 5:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0x200}}, './file0\x00'})
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)

18:37:32 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0x200}}, './file0\x00'})
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)

18:37:32 executing program 1:
pipe2$watch_queue(&(0x7f0000000000), 0x80)
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)

18:37:32 executing program 0:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)

18:37:32 executing program 4:
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3)
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)

18:37:32 executing program 2:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {0x10000}}, './file0\x00'})
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:32 executing program 5:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)

18:37:32 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)

18:37:32 executing program 1:
pipe2$watch_queue(&(0x7f0000000000), 0x80)
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)

18:37:32 executing program 0:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'})
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)

18:37:32 executing program 4:
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)

18:37:32 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)

18:37:32 executing program 2:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {0x10000}}, './file0\x00'})
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:32 executing program 5:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)

18:37:32 executing program 1:
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)

18:37:32 executing program 4:
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)

18:37:32 executing program 0:
pipe2$watch_queue(&(0x7f0000000000), 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)

18:37:32 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'})
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)

18:37:32 executing program 5:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'})
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)

18:37:32 executing program 2:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {0x10000}}, './file0\x00'})
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

[  245.324209][T18552] ==================================================================
[  245.332939][T18552] BUG: KCSAN: data-race in nfc_llcp_register_device / nfc_llcp_unregister_device
[  245.343441][T18552] 
[  245.345836][T18552] write to 0xffff88811d8d4008 of 8 bytes by task 18537 on cpu 1:
[  245.353650][T18552]  nfc_llcp_register_device+0x3e4/0x440
[  245.359293][T18552]  nfc_register_device+0x67/0x190
[  245.364408][T18552]  nci_register_device+0x4e6/0x570
[  245.369620][T18552]  virtual_ncidev_open+0xdc/0x140
[  245.374640][T18552]  misc_open+0x203/0x240
[  245.378868][T18552]  chrdev_open+0x34f/0x3c0
[  245.383267][T18552]  do_dentry_open+0x5cd/0xaf0
[  245.388104][T18552]  vfs_open+0x4a/0x50
[  245.392157][T18552]  path_openat+0x17f2/0x1d10
[  245.396913][T18552]  do_filp_open+0xf6/0x200
[  245.401330][T18552]  do_sys_openat2+0xab/0x110
[  245.405989][T18552]  __x64_sys_openat+0xf3/0x120
[  245.410846][T18552]  do_syscall_64+0x41/0xc0
[  245.415359][T18552]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  245.421348][T18552] 
[  245.423844][T18552] read to 0xffff88811d8d4008 of 8 bytes by task 18552 on cpu 0:
[  245.431554][T18552]  nfc_llcp_unregister_device+0x6e/0x170
[  245.437270][T18552]  nfc_unregister_device+0xe6/0x130
[  245.442461][T18552]  nci_unregister_device+0x14c/0x160
[  245.447843][T18552]  virtual_ncidev_close+0x30/0x50
[  245.452957][T18552]  __fput+0x303/0x600
[  245.457127][T18552]  ____fput+0x15/0x20
[  245.461089][T18552]  task_work_run+0x135/0x1a0
[  245.465675][T18552]  exit_to_user_mode_loop+0xd1/0xe0
[  245.470867][T18552]  exit_to_user_mode_prepare+0x6c/0xb0
[  245.476418][T18552]  syscall_exit_to_user_mode+0x26/0x140
[  245.482128][T18552]  do_syscall_64+0x4d/0xc0
[  245.486807][T18552]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  245.492742][T18552] 
[  245.495048][T18552] value changed: 0xffffffff85eb4f30 -> 0xffff88811d8d4400
[  245.502159][T18552] 
[  245.504475][T18552] Reported by Kernel Concurrency Sanitizer on:
[  245.510617][T18552] CPU: 0 PID: 18552 Comm: syz-executor.2 Not tainted 6.4.0-syzkaller-12454-g1c7873e33645 #0
18:37:33 executing program 1:
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)

18:37:33 executing program 0:
pipe2$watch_queue(&(0x7f0000000000), 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)

18:37:33 executing program 2:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r1=>r0, {0x10000}}, './file0\x00'})
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:33 executing program 4:
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)

18:37:33 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'})
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)

[  245.520848][T18552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023
[  245.531061][T18552] ==================================================================
18:37:33 executing program 5:
pipe2$watch_queue(&(0x7f0000000000), 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)

18:37:33 executing program 1:
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)

18:37:33 executing program 1:
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)

18:37:33 executing program 0:
pipe2$watch_queue(&(0x7f0000000000), 0x80)
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)

18:37:33 executing program 4:
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)

18:37:33 executing program 4:
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)

18:37:33 executing program 1:
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)

18:37:33 executing program 2:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r1=>r0, {0x10000}}, './file0\x00'})
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:33 executing program 3:
pipe2$watch_queue(&(0x7f0000000000), 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)

18:37:33 executing program 5:
pipe2$watch_queue(&(0x7f0000000000), 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)

18:37:33 executing program 4:
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)

18:37:33 executing program 1:
pipe2$watch_queue(&(0x7f0000000000), 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)

18:37:33 executing program 0:
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)

18:37:33 executing program 4:
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x80)

18:37:33 executing program 2:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r1=>r0, {0x10000}}, './file0\x00'})
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:33 executing program 3:
pipe2$watch_queue(&(0x7f0000000000), 0x80)
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)

18:37:33 executing program 5:
pipe2$watch_queue(&(0x7f0000000000), 0x80)
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)

18:37:33 executing program 1:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'})
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)

18:37:33 executing program 0:
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)

18:37:33 executing program 4:
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0)

18:37:33 executing program 0:
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)

18:37:33 executing program 0:
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)

18:37:33 executing program 2:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r1=>r0, {0x10000}}, './file0\x00'})
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:33 executing program 3:
pipe2$watch_queue(&(0x7f0000000000), 0x80)
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)

18:37:33 executing program 0:
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, 0x0, 0x4001)

18:37:33 executing program 4:
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0)

18:37:33 executing program 5:
pipe2$watch_queue(&(0x7f0000000000), 0x80)
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)

18:37:33 executing program 1:
pipe2$watch_queue(&(0x7f0000000000), 0x80)
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)

18:37:33 executing program 2:
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x10000}}, './file0\x00'})
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:33 executing program 3:
pipe2$watch_queue(&(0x7f0000000000), 0x80)
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)

18:37:33 executing program 0:
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, 0x0, 0x0)

18:37:33 executing program 4:
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0)

18:37:33 executing program 5:
pipe2$watch_queue(&(0x7f0000000000), 0x80)
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)

18:37:33 executing program 1:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)

18:37:33 executing program 2:
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x10000}}, './file0\x00'})
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:33 executing program 3:
syz_open_procfs$userns(0x0, &(0x7f0000000040))
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)

18:37:33 executing program 0:
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, 0x0, 0x0)

18:37:33 executing program 2:
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x10000}}, './file0\x00'})
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:33 executing program 5:
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)

18:37:33 executing program 4:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)

18:37:33 executing program 3:
syz_open_procfs$userns(0x0, &(0x7f0000000040))
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)

18:37:33 executing program 1:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0x200}}, './file0\x00'})
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)

18:37:33 executing program 0:
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, 0x0, 0x0)

18:37:33 executing program 2:
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x10000}}, './file0\x00'})
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:33 executing program 5:
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)

18:37:33 executing program 5:
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)

18:37:33 executing program 3:
syz_open_procfs$userns(0x0, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)

18:37:33 executing program 4:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)

18:37:33 executing program 5:
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)

18:37:33 executing program 1:
syz_open_procfs$userns(0x0, &(0x7f0000000040))
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)

18:37:33 executing program 5:
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)

18:37:33 executing program 0:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)

18:37:33 executing program 2:
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x2, 0x3)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x10000}}, './file0\x00'})
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:33 executing program 3:
syz_open_procfs$userns(0x0, 0x0)
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)

18:37:33 executing program 4:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)

18:37:33 executing program 1:
syz_open_procfs$userns(0x0, &(0x7f0000000040))
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)

18:37:33 executing program 3:
syz_open_procfs$userns(0x0, 0x0)
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)

18:37:33 executing program 3:
syz_open_procfs$userns(0x0, 0x0)
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)

18:37:33 executing program 5:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r4=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r4, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r5=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r5, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r7 = ioctl$NS_GET_PARENT(r5, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000380)={<r8=>r7, 0x7, 0xfffffffffffffffe, 0xaea})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r9, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
r10 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_MOD(r10, 0x3, r5, &(0x7f0000000600)={0x3})
sendmsg$L2TP_CMD_NOOP(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44080}, 0x4000844)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000880)={{0x1, 0x1, 0x18, r8, {0xffffffff}}, './file0\x00'})

18:37:33 executing program 0:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140), 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)

18:37:33 executing program 2:
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0, 0x3)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x10000}}, './file0\x00'})
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:33 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r4=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r4, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r5=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r5, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r7 = ioctl$NS_GET_PARENT(r5, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000380)={<r8=>r7, 0x7, 0xfffffffffffffffe, 0xaea})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r9, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
r10 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_MOD(r10, 0x3, r5, &(0x7f0000000600)={0x3})
sendmsg$L2TP_CMD_NOOP(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44080}, 0x4000844)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000880)={{0x1, 0x1, 0x18, <r11=>r8, {0xffffffff}}, './file0\x00'})
bind$phonet(r11, &(0x7f00000008c0)={0x23, 0x17, 0x80, 0x7}, 0x10)
r12 = socket$inet6_udplite(0xa, 0x2, 0x88)
fcntl$setown(r12, 0x8, 0x0)
r13 = open_tree(r11, &(0x7f0000000c00)='./file0\x00', 0x1000)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r5, r13, 0xffffffffffffffff, r4, r4]}, 0x80)

18:37:33 executing program 4:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)

18:37:33 executing program 1:
syz_open_procfs$userns(0x0, &(0x7f0000000040))
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)

18:37:33 executing program 0:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r4=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r4, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r5=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r5, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r7 = ioctl$NS_GET_PARENT(r5, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000380)={<r8=>r7, 0x7, 0xfffffffffffffffe, 0xaea})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r9, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
r10 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_MOD(r10, 0x3, r5, &(0x7f0000000600)={0x3})
sendmsg$L2TP_CMD_NOOP(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44080}, 0x4000844)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000880)={{0x1, 0x1, 0x18, <r11=>r8, {0xffffffff}}, './file0\x00'})
bind$phonet(r11, &(0x7f00000008c0)={0x23, 0x17, 0x80, 0x7}, 0x10)
r12 = socket$inet6_udplite(0xa, 0x2, 0x88)
fcntl$setown(r12, 0x8, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r5, 0xffffffffffffffff, 0xffffffffffffffff, r4, r4]}, 0x80)

18:37:33 executing program 5:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r4=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r4, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r5=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r5, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r7 = ioctl$NS_GET_PARENT(r5, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000380)={<r8=>r7, 0x7, 0xfffffffffffffffe, 0xaea})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r9, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
r10 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_MOD(r10, 0x3, r5, &(0x7f0000000600)={0x3})
sendmsg$L2TP_CMD_NOOP(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44080}, 0x4000844)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000880)={{0x1, 0x1, 0x18, <r11=>r8, {0xffffffff}}, './file0\x00'})
bind$phonet(r11, &(0x7f00000008c0)={0x23, 0x17, 0x80, 0x7}, 0x10)
r12 = socket$inet6_udplite(0xa, 0x2, 0x88)
fcntl$setown(r12, 0x8, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r5, 0xffffffffffffffff, 0xffffffffffffffff, r4, r4]}, 0x80)

18:37:33 executing program 2:
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0, 0x3)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x10000}}, './file0\x00'})
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:33 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r4=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r4, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r5=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r5, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r7 = ioctl$NS_GET_PARENT(r5, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000380)={<r8=>r7, 0x7, 0xfffffffffffffffe, 0xaea})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r9, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
r10 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_MOD(r10, 0x3, r5, &(0x7f0000000600)={0x3})
sendmsg$L2TP_CMD_NOOP(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44080}, 0x4000844)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000880)={{0x1, 0x1, 0x18, <r11=>r8, {0xffffffff}}, './file0\x00'})
bind$phonet(r11, &(0x7f00000008c0)={0x23, 0x17, 0x80, 0x7}, 0x10)
r12 = socket$inet6_udplite(0xa, 0x2, 0x88)
fcntl$setown(r12, 0x8, 0x0)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
r13 = open_tree(r11, &(0x7f0000000c00)='./file0\x00', 0x1000)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r5, r13, 0xffffffffffffffff, r4, r4]}, 0x80)

18:37:33 executing program 4:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)

18:37:33 executing program 1:
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)

18:37:33 executing program 4:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)

18:37:33 executing program 0:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r4=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r4, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r5=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r5, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r7 = ioctl$NS_GET_PARENT(r5, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000380)={<r8=>r7, 0x7, 0xfffffffffffffffe, 0xaea})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r9, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
r10 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_MOD(r10, 0x3, r5, &(0x7f0000000600)={0x3})
sendmsg$L2TP_CMD_NOOP(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44080}, 0x4000844)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000880)={{0x1, 0x1, 0x18, <r11=>r8, {0xffffffff}}, './file0\x00'})
bind$phonet(r11, &(0x7f00000008c0)={0x23, 0x17, 0x80, 0x7}, 0x10)
r12 = socket$inet6_udplite(0xa, 0x2, 0x88)
fcntl$setown(r12, 0x8, 0x0)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r5, 0xffffffffffffffff, 0xffffffffffffffff, r4, r4]}, 0x80)

18:37:33 executing program 5:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r4=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r4, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r5=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r5, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r7 = ioctl$NS_GET_PARENT(r5, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000380)={<r8=>r7, 0x7, 0xfffffffffffffffe, 0xaea})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r9, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
r10 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_MOD(r10, 0x3, r5, &(0x7f0000000600)={0x3})
sendmsg$L2TP_CMD_NOOP(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44080}, 0x4000844)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000880)={{0x1, 0x1, 0x18, <r11=>r8, {0xffffffff}}, './file0\x00'})
bind$phonet(r11, &(0x7f00000008c0)={0x23, 0x17, 0x80, 0x7}, 0x10)
socket$inet6_udplite(0xa, 0x2, 0x88)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r5, 0xffffffffffffffff, 0xffffffffffffffff, r4, r4]}, 0x80)

18:37:33 executing program 4:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)

18:37:33 executing program 2:
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0, 0x3)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x10000}}, './file0\x00'})
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:33 executing program 4:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'})
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)

18:37:33 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r4=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r4, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r5=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r5, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r7 = ioctl$NS_GET_PARENT(r5, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000380)={<r8=>r7, 0x7, 0xfffffffffffffffe, 0xaea})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r9, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
r10 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_MOD(r10, 0x3, r5, &(0x7f0000000600)={0x3})
sendmsg$L2TP_CMD_NOOP(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44080}, 0x4000844)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000880)={{0x1, 0x1, 0x18, <r11=>r8, {0xffffffff}}, './file0\x00'})
bind$phonet(r11, &(0x7f00000008c0)={0x23, 0x17, 0x80, 0x7}, 0x10)
socket$inet6_udplite(0xa, 0x2, 0x88)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r5, 0xffffffffffffffff, 0xffffffffffffffff, r4, r4]}, 0x80)

18:37:33 executing program 1:
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)

18:37:33 executing program 1:
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)

18:37:33 executing program 5:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r4=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r4, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r5=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r5, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r7 = ioctl$NS_GET_PARENT(r5, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000380)={<r8=>r7, 0x7, 0xfffffffffffffffe, 0xaea})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r9, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
r10 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_MOD(r10, 0x3, r5, &(0x7f0000000600)={0x3})
sendmsg$L2TP_CMD_NOOP(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44080}, 0x4000844)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000880)={{0x1, 0x1, 0x18, <r11=>r8, {0xffffffff}}, './file0\x00'})
bind$phonet(r11, &(0x7f00000008c0)={0x23, 0x17, 0x80, 0x7}, 0x10)
r12 = socket$inet6_udplite(0xa, 0x2, 0x88)
fcntl$setown(r12, 0x8, 0x0)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000a80)=@IORING_OP_CLOSE={0x13, 0x46, 0x0, r5}, 0xfffffff9)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r5, 0xffffffffffffffff, 0xffffffffffffffff, r4, r4]}, 0x80)

18:37:34 executing program 1:
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)

18:37:34 executing program 0:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r4=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r4, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r5=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r5, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r7 = ioctl$NS_GET_PARENT(r5, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000380)={<r8=>r7, 0x7, 0xfffffffffffffffe, 0xaea})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r9, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
r10 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_MOD(r10, 0x3, r5, &(0x7f0000000600)={0x3})
sendmsg$L2TP_CMD_NOOP(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44080}, 0x4000844)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000880)={{0x1, 0x1, 0x18, <r11=>r8, {0xffffffff}}, './file0\x00'})
bind$phonet(r11, &(0x7f00000008c0)={0x23, 0x17, 0x80, 0x7}, 0x10)
r12 = socket$inet6_udplite(0xa, 0x2, 0x88)
fcntl$setown(r12, 0x8, 0x0)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r5, 0xffffffffffffffff, 0xffffffffffffffff, r4, r4]}, 0x80)

18:37:34 executing program 4:
pipe2$watch_queue(&(0x7f0000000000), 0x80)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)

18:37:34 executing program 1:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r4=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r4, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r5=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r5, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r7 = ioctl$NS_GET_PARENT(r5, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000380)={<r8=>r7, 0x7, 0xfffffffffffffffe, 0xaea})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r9, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
r10 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_MOD(r10, 0x3, r5, &(0x7f0000000600)={0x3})
sendmsg$L2TP_CMD_NOOP(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44080}, 0x4000844)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000880)={{0x1, 0x1, 0x18, <r11=>r8, {0xffffffff}}, './file0\x00'})
bind$phonet(r11, &(0x7f00000008c0)={0x23, 0x17, 0x80, 0x7}, 0x10)
r12 = socket$inet6_udplite(0xa, 0x2, 0x88)
fcntl$setown(r12, 0x8, 0x0)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000a80)=@IORING_OP_CLOSE={0x13, 0x46, 0x0, r5}, 0xfffffff9)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r5, 0xffffffffffffffff, 0xffffffffffffffff, r4, r4]}, 0x80)

18:37:34 executing program 2:
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x10000}}, './file0\x00'})
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:34 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r4=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r4, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r5=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r5, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r7 = ioctl$NS_GET_PARENT(r5, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000380)={<r8=>r7, 0x7, 0xfffffffffffffffe, 0xaea})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r9, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
r10 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_MOD(r10, 0x3, r5, &(0x7f0000000600)={0x3})
sendmsg$L2TP_CMD_NOOP(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44080}, 0x4000844)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000880)={{0x1, 0x1, 0x18, <r11=>r8, {0xffffffff}}, './file0\x00'})
bind$phonet(r11, &(0x7f00000008c0)={0x23, 0x17, 0x80, 0x7}, 0x10)
socket$inet6_udplite(0xa, 0x2, 0x88)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r5, 0xffffffffffffffff, 0xffffffffffffffff, r4, r4]}, 0x80)

18:37:34 executing program 5:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r4=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r4, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r5=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r5, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r7 = ioctl$NS_GET_PARENT(r5, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000380)={<r8=>r7, 0x7, 0xfffffffffffffffe, 0xaea})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r9, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
r10 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_MOD(r10, 0x3, r5, &(0x7f0000000600)={0x3})
sendmsg$L2TP_CMD_NOOP(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44080}, 0x4000844)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000880)={{0x1, 0x1, 0x18, <r11=>r8, {0xffffffff}}, './file0\x00'})
bind$phonet(r11, &(0x7f00000008c0)={0x23, 0x17, 0x80, 0x7}, 0x10)
r12 = socket$inet6_udplite(0xa, 0x2, 0x88)
fcntl$setown(r12, 0x8, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r5, 0xffffffffffffffff, 0xffffffffffffffff, r4, r4]}, 0x80)

18:37:34 executing program 0:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r4=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r4, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r5=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r5, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r7 = ioctl$NS_GET_PARENT(r5, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000380)={<r8=>r7, 0x7, 0xfffffffffffffffe, 0xaea})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r9, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
r10 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_MOD(r10, 0x3, r5, &(0x7f0000000600)={0x3})
sendmsg$L2TP_CMD_NOOP(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44080}, 0x4000844)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000880)={{0x1, 0x1, 0x18, <r11=>r8, {0xffffffff}}, './file0\x00'})
bind$phonet(r11, &(0x7f00000008c0)={0x23, 0x17, 0x80, 0x7}, 0x10)
r12 = socket$inet6_udplite(0xa, 0x2, 0x88)
fcntl$setown(r12, 0x8, 0x0)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r5, 0xffffffffffffffff, 0xffffffffffffffff, r4, r4]}, 0x80)

18:37:34 executing program 4:
pipe2$watch_queue(&(0x7f0000000000), 0x80)
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)

18:37:34 executing program 1:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r4=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r4, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r5=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r5, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r7 = ioctl$NS_GET_PARENT(r5, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000380)={<r8=>r7, 0x7, 0xfffffffffffffffe, 0xaea})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r9, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
r10 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_MOD(r10, 0x3, r5, &(0x7f0000000600)={0x3})
sendmsg$L2TP_CMD_NOOP(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44080}, 0x4000844)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000880)={{0x1, 0x1, 0x18, <r11=>r8, {0xffffffff}}, './file0\x00'})
bind$phonet(r11, &(0x7f00000008c0)={0x23, 0x17, 0x80, 0x7}, 0x10)
r12 = socket$inet6_udplite(0xa, 0x2, 0x88)
fcntl$setown(r12, 0x8, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r5, 0xffffffffffffffff, 0xffffffffffffffff, r4, r4]}, 0x80)

18:37:34 executing program 2:
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:34 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r4=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r4, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r5=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r5, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r7 = ioctl$NS_GET_PARENT(r5, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000380)={<r8=>r7, 0x7, 0xfffffffffffffffe, 0xaea})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r9, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
r10 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_MOD(r10, 0x3, r5, &(0x7f0000000600)={0x3})
sendmsg$L2TP_CMD_NOOP(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44080}, 0x4000844)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000880)={{0x1, 0x1, 0x18, <r11=>r8, {0xffffffff}}, './file0\x00'})
bind$phonet(r11, &(0x7f00000008c0)={0x23, 0x17, 0x80, 0x7}, 0x10)
socket$inet6_udplite(0xa, 0x2, 0x88)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r5, 0xffffffffffffffff, 0xffffffffffffffff, r4, r4]}, 0x80)

18:37:34 executing program 0:
msgctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/36)
r0 = msgget$private(0x0, 0x508)
msgctl$MSG_INFO(r0, 0xc, &(0x7f0000000040)=""/66)
r1 = msgget$private(0x0, 0x0)
msgsnd(r1, &(0x7f00000000c0)={0x1, "a897bd4900492c680788983b6a31da6de3d047af910c3d41204c090ed98171fe9b749dad87"}, 0x2d, 0x800)
r2 = msgget$private(0x0, 0x1)
msgsnd(r2, &(0x7f0000000100)={0x3, "54800ae0bbd7c68f51fc928c8b875074a03af0b0207296e070141e01dfcb5ab3e2bc1b2915c015053f08e5c18f78ca8469f2e5e643732925264278695c092bef7252a47d4be11d7dad644ee605f01aca90cbbc2be051013b1aa0e0b2e747fc070db9a99af83a581ec740b6105e2c6238ded6793e7668"}, 0x7e, 0x800)
msgctl$IPC_RMID(r2, 0x0)
msgctl$MSG_INFO(r2, 0xc, &(0x7f0000000180)=""/177)
r3 = msgget$private(0x0, 0xc8)
msgctl$MSG_INFO(r3, 0xc, &(0x7f0000000240)=""/212)
msgsnd(r2, &(0x7f0000000340)={0x3, "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"}, 0x102, 0x800)
msgget$private(0x0, 0x0)
msgctl$MSG_STAT_ANY(0xffffffffffffffff, 0xd, &(0x7f0000000600)=""/8)
msgsnd(r3, &(0x7f0000000640)={0x0, "1f02d0731477ef55e41e39983a638b90dcfab3a02539245facee9a1ce701d0bf926f825872f8c87fe4428aa48ec0e5413e03d2d140ee75c335b0ecb225e11eedac955ba94541ae575abe9b37c29b9e90a3dfac5551727d5965b91e5e632e9e70d6a842d2a41c2f"}, 0x6f, 0x0)
msgctl$IPC_RMID(r0, 0x0)

18:37:34 executing program 5:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r4=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r4, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r5=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r5, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r7 = ioctl$NS_GET_PARENT(r5, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000380)={<r8=>r7, 0x7, 0xfffffffffffffffe, 0xaea})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r9, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
r10 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_MOD(r10, 0x3, r5, &(0x7f0000000600)={0x3})
sendmsg$L2TP_CMD_NOOP(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44080}, 0x4000844)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000880)={{0x1, 0x1, 0x18, <r11=>r8, {0xffffffff}}, './file0\x00'})
bind$phonet(r11, &(0x7f00000008c0)={0x23, 0x17, 0x80, 0x7}, 0x10)
r12 = socket$inet6_udplite(0xa, 0x2, 0x88)
fcntl$setown(r12, 0x8, 0x0)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000a80)=@IORING_OP_CLOSE={0x13, 0x46, 0x0, r5}, 0xfffffff9)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r5, 0xffffffffffffffff, 0xffffffffffffffff, r4, r4]}, 0x80)

18:37:34 executing program 0:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r4=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r4, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r5=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r5, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r7 = ioctl$NS_GET_PARENT(r5, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000380)={<r8=>r7, 0x7, 0xfffffffffffffffe, 0xaea})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r9, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
r10 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_MOD(r10, 0x3, r5, &(0x7f0000000600)={0x3})
sendmsg$L2TP_CMD_NOOP(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44080}, 0x4000844)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000880)={{0x1, 0x1, 0x18, <r11=>r8, {0xffffffff}}, './file0\x00'})
bind$phonet(r11, &(0x7f00000008c0)={0x23, 0x17, 0x80, 0x7}, 0x10)
r12 = socket$inet6_udplite(0xa, 0x2, 0x88)
fcntl$setown(r12, 0x8, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r5, 0xffffffffffffffff, 0xffffffffffffffff, r4, r4]}, 0x80)

18:37:34 executing program 4:
pipe2$watch_queue(&(0x7f0000000000), 0x80)
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)

18:37:34 executing program 1:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r4=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r4, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r5=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r5, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r7 = ioctl$NS_GET_PARENT(r5, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000380)={<r8=>r7, 0x7, 0xfffffffffffffffe, 0xaea})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r9, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
r10 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_MOD(r10, 0x3, r5, &(0x7f0000000600)={0x3})
sendmsg$L2TP_CMD_NOOP(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44080}, 0x4000844)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000880)={{0x1, 0x1, 0x18, <r11=>r8, {0xffffffff}}, './file0\x00'})
bind$phonet(r11, &(0x7f00000008c0)={0x23, 0x17, 0x80, 0x7}, 0x10)
r12 = socket$inet6_udplite(0xa, 0x2, 0x88)
fcntl$setown(r12, 0x8, 0x0)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r5, 0xffffffffffffffff, 0xffffffffffffffff, r4, r4]}, 0x80)

18:37:34 executing program 2:
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0)
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x4, 0x7ff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)

18:37:34 executing program 3:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r4=>r1, {0x200}}, './file0\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r4, 0x28, 0x0, &(0x7f00000001c0), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000200)=0xd784, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r5=>r0, {0x10000}}, './file0\x00'})
fsetxattr$trusted_overlay_origin(r5, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x7f, 0x4, 0x1, 0x6, 0x5d7, 0x4ba})
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r7 = ioctl$NS_GET_PARENT(r5, 0xb702, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000380)={<r8=>r7, 0x7, 0xfffffffffffffffe, 0xaea})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r9, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$L2TP_CMD_NOOP(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x652}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
r10 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_MOD(r10, 0x3, r5, &(0x7f0000000600)={0x3})
sendmsg$L2TP_CMD_NOOP(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44080}, 0x4000844)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000880)={{0x1, 0x1, 0x18, <r11=>r8, {0xffffffff}}, './file0\x00'})
bind$phonet(r11, &(0x7f00000008c0)={0x23, 0x17, 0x80, 0x7}, 0x10)
r12 = socket$inet6_udplite(0xa, 0x2, 0x88)
fcntl$setown(r12, 0x8, 0x0)
io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x101, 0xffffffffffffffff, &(0x7f0000000900)="87265ab19532217e224669dc3b18c52866ed4e836a720205e67cc8b6d7fbf8a9538b8e22825cb88959bca444c7494ef49e4ffc454e466e6a474f6ad03f6e356196244181bdd96fed445735b107e72c1ec01f408fb2e5f7e729f9e1ef2466fcbd5d3ffbabcf669d38b8dbf00d6e8582b800f5cbfbd586d9344adcf828f4f9efae115f2f2c99476b310dffbcb89316b18076694fdfaccfe93b4bf34089fcf077fc48fa34189b4f83df07208690f13bcf7f9f58779b02464a2fbd53f50864fdde44fddcef728600e56918c36124bdce2c4f677755dcbeac2b443e4d6308239be3af94dcac77e6a1555e409f069135eb23e0218821fb", 0xf4, 0x4, 0x0, 0x1}, &(0x7f0000000a40))
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000a80)=@IORING_OP_CLOSE={0x13, 0x46, 0x0, r5}, 0xfffffff9)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1874}], &(0x7f0000000b40)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000