syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140)=<r0=>0x0, &(0x7f0000002a40)=<r1=>0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r0, r1, &(0x7f0000000580)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000200)=@l2tp={0x2, 0x0, @broadcast}}, 0x0)
syz_io_uring_submit(r0, 0x0, &(0x7f00000000c0)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x9)
r3 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000233}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
mknodat$loop(r4, &(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r5 = syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
mknodat$loop(r5, &(0x7f0000000300)='./file0\x00', 0x0, 0x0)
name_to_handle_at(r5, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180)=@ocfs2={0xc}, &(0x7f00000001c0), 0x0)
openat(r5, &(0x7f00000002c0)='./file0\x00', 0x100, 0x108)
r6 = open_tree(r4, &(0x7f0000000040)='./file0\x00', 0x88100)
setsockopt$inet6_tcp_int(r6, 0x6, 0x2, &(0x7f0000000280)=0x7ff, 0x4)
name_to_handle_at(r4, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180)=@ocfs2={0xc}, &(0x7f00000001c0), 0x0)
dup2(r4, r3)