x2f, 0x27, 0x0, 0x3, 0x3, @remote, @local, 0x1, 0x40, 0x4, 0x25b}})
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', <r5=>r3, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r4, 0x89f9, &(0x7f0000000c80)={'sit0\x00', &(0x7f0000000c00)={'sit0\x00', r5, 0x4, 0x80, 0x8, 0xafc, 0x18, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0xe, 0x8, 0x781, 0x3}})
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), r4)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r4, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x20, r6, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000c010}, 0x4004000)
munlock(&(0x7f0000ff6000/0xa000)=nil, 0xa000)
sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x44, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x3a}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r4}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:27:57 executing program 5:
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000040)={0xfffffff9, 0x1, 0x6, 0x5e, 0xfb, "987420b3b0dfb69dec0378823b826759dbc677", 0x81, 0xfff})
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000740), 0x10400, 0x0)

06:27:57 executing program 2:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip_vti0\x00', <r2=>r1, 0x0, 0x10, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x67, 0x0, 0x4, 0xb1fde26cf0cef217, 0x0, @private=0xa010100, @broadcast, {[@generic={0x7, 0x10, "98a1be21dcfff95b281d17e4850a"}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480)=0x5)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', <r3=>r1, 0x4, 0x3, 0x40, 0x7, 0x2, @loopback, @loopback, 0x8021, 0x8, 0x3f, 0x1f}})
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000600)={'syztnl0\x00', &(0x7f0000000580)={'ip6_vti0\x00', r3, 0x2f, 0x27, 0x0, 0x3, 0x3, @remote, @local, 0x1, 0x40, 0x4, 0x25b}})
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', <r5=>r3, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r4, 0x89f9, &(0x7f0000000c80)={'sit0\x00', &(0x7f0000000c00)={'sit0\x00', r5, 0x4, 0x80, 0x8, 0xafc, 0x18, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0xe, 0x8, 0x781, 0x3}})
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), r4)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r4, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x20, r6, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000c010}, 0x4004000)
munlock(&(0x7f0000ff6000/0xa000)=nil, 0xa000)
sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x44, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x3a}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r4}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:27:57 executing program 0:
ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000))
fstat(0xffffffffffffffff, &(0x7f0000000040))
ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, &(0x7f00000000c0))
ioctl$RTC_RD_TIME(0xffffffffffffffff, 0x80247009, &(0x7f0000000140))

06:27:57 executing program 4:
pkey_free(0xffffffffffffffff)
pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x200000b, 0xffffffffffffffff)
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READ_FIXED={0x4, 0x3, 0x2004, @fd=r0, 0x5, 0x101, 0xc0000000, 0x0, 0x1, {0x3}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'ip6gre0\x00', 0x0, 0x4, 0x80, 0x2, 0x7, 0x2, @private1, @remote, 0x7800, 0x8, 0x8, 0x96}})
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000740))

06:27:57 executing program 0:
ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000))
fstat(0xffffffffffffffff, &(0x7f0000000040))
ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, &(0x7f00000000c0))
ioctl$RTC_RD_TIME(0xffffffffffffffff, 0x80247009, &(0x7f0000000140))

06:28:05 executing program 6:
ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000))
ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000040))
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080))
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=<r0=>0x0)
ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000100)=r0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x8, 0x1, 0xb65, 0x8, {{0x15, 0x4, 0x2, 0x0, 0x54, 0x66, 0x0, 0x81, 0x2f, 0x0, @private=0xa010100, @multicast2, {[@end, @cipso={0x86, 0x29, 0x1, [{0x5, 0xf, "3e703dd712ca222ae8a3af2c04"}, {0x1, 0x7, "8caeda7b53"}, {0x0, 0xd, "3450bf32edd480c19ec31d"}]}, @timestamp={0x44, 0xc, 0x15, 0x0, 0x1, [0x3, 0x6]}, @ssrr={0x89, 0x7, 0x29, [@rand_addr=0x64010100]}]}}}}})
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000200)={0x7ff, 0x6, 0x100, 0x8, 0x15, "16fc41fd0b316794"})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index=0x7, 0x3, 0x1, 0x94b, 0x14}, 0x2)
sched_yield()
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x200040, 0x0)
sendto(r1, &(0x7f00000002c0)="6b72d37122a4d6358321d7abd9831a4dd89feacc91d8672b9e3679783580ffac1981f5787c3c19e6d8c39c72b5c31cd7c635d89cb33ad124ee3ac3630804bdee741d9b3227178c041b67132e31fefb916cf72680822d8a547e4407a94d0278c3427ba53ff5cdf4aeaf85f2ed09a1e1838bfc", 0x72, 0x8010, &(0x7f0000000340)=@generic={0xa, "161444d24dee7db492ff0ba1fd759885041745d7ca0ad8bf977869d195c13ab70bd28acaf63e738c626b8db7b5ad71a944e766d088d4dc0a8ac3af34304fe75932f620e02a297eb485f40b0c671a6298d1f4751fd72717f6911f993c1e2ea6d0e8d65502d8939b50ad202954a48634eb34f132d56f0c87ac58e27624b6cf"}, 0x80)
ioctl$TIOCCBRK(r1, 0x5428)
pipe(&(0x7f0000000400))
ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000880)={0x0, 0x1, 0x1, 0xa, 0x174, &(0x7f0000000480)="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"})
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:28:05 executing program 7:
getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, <r0=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000080)=0xffffffffffffffff)
recvmsg(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000140)=""/231, 0xe7}, {&(0x7f0000000240)=""/233, 0xe9}, {&(0x7f0000000340)=""/164, 0xa4}, {&(0x7f0000000400)=""/197, 0xc5}], 0x4}, 0x100)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000600)={'sit0\x00', &(0x7f0000000580)={'syztnl0\x00', <r2=>r0, 0x29, 0x0, 0x2, 0x1, 0x1, @dev={0xfe, 0x80, '\x00', 0x31}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7, 0x41db5e1226b1a6e, 0x10001, 0x2}})
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000006c0)={'sit0\x00', &(0x7f0000000640)={'syztnl2\x00', <r4=>r2, 0x29, 0x7, 0x9, 0xffff2cb6, 0x0, @empty, @local, 0x7, 0x1, 0x4, 0x7fffffff}})
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r3, 0x89f6, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000700)={'sit0\x00', r4, 0x2f, 0x6, 0x5d, 0x401, 0x2, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x700, 0x40, 0x6, 0x8}})
r5 = openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x4c80, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(r3, 0x89f4, &(0x7f0000000880)={'syztnl1\x00', &(0x7f0000000800)={'ip6tnl0\x00', <r6=>0x0, 0x4, 0x3f, 0x3f, 0x6, 0x10, @mcast1, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7800, 0x80, 0x2}})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f0000000940)={'ip6gre0\x00', &(0x7f00000008c0)={'syztnl2\x00', r6, 0x2f, 0x8a, 0xf, 0xfffffff7, 0x2, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x1, 0x7fffffff, 0x3}})
recvmsg(0xffffffffffffffff, &(0x7f0000001d80)={&(0x7f0000000980)=@pppol2tpv3={0x18, 0x1, {0x0, <r7=>0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/8, 0x8}, {&(0x7f0000001a40)=""/177, 0xb1}, {&(0x7f0000001b00)=""/14, 0xe}, {&(0x7f0000001b40)=""/59, 0x3b}, {&(0x7f0000001b80)=""/39, 0x27}, {&(0x7f0000001bc0)=""/161, 0xa1}], 0x7, &(0x7f0000001d00)=""/100, 0x64}, 0x1)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r7, 0x89f9, &(0x7f0000001e40)={'syztnl1\x00', &(0x7f0000001dc0)={'ip6tnl0\x00', r2, 0x2f, 0x0, 0x5, 0x2, 0x710a593111734ad9, @dev={0xfe, 0x80, '\x00', 0x26}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7, 0x700, 0xfffeffff, 0x5}})
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f00000023c0)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002380)={&(0x7f0000002300)={0x7c, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r0}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x800)

06:28:05 executing program 4:
pkey_free(0xffffffffffffffff)
pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x200000b, 0xffffffffffffffff)
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READ_FIXED={0x4, 0x3, 0x2004, @fd=r0, 0x5, 0x101, 0xc0000000, 0x0, 0x1, {0x3}}, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000740))

06:28:05 executing program 3:
connect$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x1, 0x0, 0x1, 0x80, 0x6, @remote}, 0x14)
ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'ip6_vti0\x00', <r0=>0x0, 0x4, 0x9, 0x86, 0x1, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, 0x8000, 0x10, 0x2, 0xff}})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000100)={'ip6tnl0\x00', r0, 0x4, 0x0, 0x9, 0x5605, 0x15, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40, 0x40, 0x1, 0x2}})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'sit0\x00', &(0x7f00000001c0)={'syztnl1\x00', r0, 0x65, 0x80, 0x6, 0x8, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x8008, 0x8, 0xfffff155, 0x1ff}})
getpeername(0xffffffffffffffff, &(0x7f0000000280)=@ethernet, &(0x7f0000000300)=0x80)
r1 = socket$inet6(0xa, 0x6, 0x80000000)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', <r2=>0x0, 0x4, 0x81, 0x3, 0x4, 0x2, @loopback, @mcast2, 0x1, 0x707, 0x2, 0x101}})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000480)={'syztnl1\x00', &(0x7f0000000400)={'ip6_vti0\x00', <r3=>r2, 0x29, 0x1, 0x9, 0x47, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, 0x80, 0x7800, 0x663, 0x6}})
ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f00000004c0)={0x200, 0x3, 0x9})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000500)={"87c071398e54ec8d9fae177fe67dd6e0", 0x0, 0x0, {0x20, 0x9}, {0x8, 0x4}, 0xc7c, [0x6, 0x10000, 0x3, 0x2, 0x31545bb, 0xe37, 0x100, 0xfb7b, 0x9, 0x4, 0x9, 0x86a, 0x0, 0x200, 0x9, 0x4]})
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r4, 0x89f6, &(0x7f00000007c0)={'syztnl0\x00', &(0x7f0000000740)={'sit0\x00', r3, 0x2f, 0x1f, 0x8, 0x165, 0x0, @local, @empty, 0x10, 0x1, 0x2, 0x8}})

06:28:05 executing program 1:
getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, <r0=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000080)=0xffffffffffffffff)
recvmsg(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000140)=""/231, 0xe7}, {&(0x7f0000000240)=""/233, 0xe9}, {&(0x7f0000000340)=""/164, 0xa4}, {&(0x7f0000000400)=""/197, 0xc5}], 0x4}, 0x100)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000600)={'sit0\x00', &(0x7f0000000580)={'syztnl0\x00', <r2=>r0, 0x29, 0x0, 0x2, 0x1, 0x1, @dev={0xfe, 0x80, '\x00', 0x31}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7, 0x41db5e1226b1a6e, 0x10001, 0x2}})
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000006c0)={'sit0\x00', &(0x7f0000000640)={'syztnl2\x00', <r4=>r2, 0x29, 0x7, 0x9, 0xffff2cb6, 0x0, @empty, @local, 0x7, 0x1, 0x4, 0x7fffffff}})
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r3, 0x89f6, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000700)={'sit0\x00', <r5=>r4, 0x2f, 0x6, 0x5d, 0x401, 0x2, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x700, 0x40, 0x6, 0x8}})
r6 = openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x4c80, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(r3, 0x89f4, &(0x7f0000000880)={'syztnl1\x00', &(0x7f0000000800)={'ip6tnl0\x00', <r7=>0x0, 0x4, 0x3f, 0x3f, 0x6, 0x10, @mcast1, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7800, 0x80, 0x2}})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r6, 0x89f8, &(0x7f0000000940)={'ip6gre0\x00', &(0x7f00000008c0)={'syztnl2\x00', r7, 0x2f, 0x8a, 0xf, 0xfffffff7, 0x2, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x1, 0x7fffffff, 0x3}})
recvmsg(0xffffffffffffffff, &(0x7f0000001d80)={&(0x7f0000000980)=@pppol2tpv3={0x18, 0x1, {0x0, <r8=>0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/8, 0x8}, {&(0x7f0000001a40)=""/177, 0xb1}, {&(0x7f0000001b00)=""/14, 0xe}, {&(0x7f0000001b40)=""/59, 0x3b}, {&(0x7f0000001b80)=""/39, 0x27}, {&(0x7f0000001bc0)=""/161, 0xa1}], 0x7, &(0x7f0000001d00)=""/100, 0x64}, 0x1)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r8, 0x89f9, &(0x7f0000001e40)={'syztnl1\x00', &(0x7f0000001dc0)={'ip6tnl0\x00', r2, 0x2f, 0x0, 0x5, 0x2, 0x710a593111734ad9, @dev={0xfe, 0x80, '\x00', 0x26}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7, 0x700, 0xfffeffff, 0x5}})
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x2400, 0x800)
r9 = socket(0x18, 0x4, 0x1)
connect$packet(r9, &(0x7f0000001e80)={0x11, 0x8, r0, 0x1, 0x20, 0x6, @local}, 0x14)
r10 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_drop_memb(r10, 0x107, 0x2, &(0x7f0000001f40)={r5, 0x1, 0x6, @multicast}, 0x10)

06:28:05 executing program 5:
pipe(&(0x7f0000000000))
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000740), 0x10400, 0x0)

06:28:05 executing program 2:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip_vti0\x00', <r2=>r1, 0x0, 0x10, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x67, 0x0, 0x4, 0xb1fde26cf0cef217, 0x0, @private=0xa010100, @broadcast, {[@generic={0x7, 0x10, "98a1be21dcfff95b281d17e4850a"}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480)=0x5)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', <r3=>r1, 0x4, 0x3, 0x40, 0x7, 0x2, @loopback, @loopback, 0x8021, 0x8, 0x3f, 0x1f}})
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000600)={'syztnl0\x00', &(0x7f0000000580)={'ip6_vti0\x00', r3, 0x2f, 0x27, 0x0, 0x3, 0x3, @remote, @local, 0x1, 0x40, 0x4, 0x25b}})
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', <r5=>r3, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r4, 0x89f9, &(0x7f0000000c80)={'sit0\x00', &(0x7f0000000c00)={'sit0\x00', r5, 0x4, 0x80, 0x8, 0xafc, 0x18, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0xe, 0x8, 0x781, 0x3}})
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), r4)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r4, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x20, r6, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000c010}, 0x4004000)
munlock(&(0x7f0000ff6000/0xa000)=nil, 0xa000)
sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x44, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x3a}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r4}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:28:05 executing program 0:
ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000))
fstat(0xffffffffffffffff, &(0x7f0000000040))
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x284881, 0x0)
ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f0000000140))

06:28:05 executing program 0:
ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000))
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x284881, 0x0)
ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f0000000140))

06:28:05 executing program 4:
pkey_free(0xffffffffffffffff)
pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x200000b, 0xffffffffffffffff)
pipe(&(0x7f0000000000))
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000740))

06:28:05 executing program 5:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000740), 0x10400, 0x0)

06:28:05 executing program 2:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip_vti0\x00', <r2=>r1, 0x0, 0x10, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x67, 0x0, 0x4, 0xb1fde26cf0cef217, 0x0, @private=0xa010100, @broadcast, {[@generic={0x7, 0x10, "98a1be21dcfff95b281d17e4850a"}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480)=0x5)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', <r3=>r1, 0x4, 0x3, 0x40, 0x7, 0x2, @loopback, @loopback, 0x8021, 0x8, 0x3f, 0x1f}})
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000600)={'syztnl0\x00', &(0x7f0000000580)={'ip6_vti0\x00', r3, 0x2f, 0x27, 0x0, 0x3, 0x3, @remote, @local, 0x1, 0x40, 0x4, 0x25b}})
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', <r5=>r3, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r4, 0x89f9, &(0x7f0000000c80)={'sit0\x00', &(0x7f0000000c00)={'sit0\x00', r5, 0x4, 0x80, 0x8, 0xafc, 0x18, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0xe, 0x8, 0x781, 0x3}})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), r4)
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
munlock(&(0x7f0000ff6000/0xa000)=nil, 0xa000)
sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x44, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x3a}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r4}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:28:14 executing program 3:
connect$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x1, 0x0, 0x1, 0x80, 0x6, @remote}, 0x14)
ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'ip6_vti0\x00', <r0=>0x0, 0x4, 0x9, 0x86, 0x1, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, 0x8000, 0x10, 0x2, 0xff}})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000100)={'ip6tnl0\x00', r0, 0x4, 0x0, 0x9, 0x5605, 0x15, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40, 0x40, 0x1, 0x2}})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'sit0\x00', &(0x7f00000001c0)={'syztnl1\x00', r0, 0x65, 0x80, 0x6, 0x8, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x8008, 0x8, 0xfffff155, 0x1ff}})
getpeername(0xffffffffffffffff, &(0x7f0000000280)=@ethernet, &(0x7f0000000300)=0x80)
r1 = socket$inet6(0xa, 0x6, 0x80000000)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', <r2=>0x0, 0x4, 0x81, 0x3, 0x4, 0x2, @loopback, @mcast2, 0x1, 0x707, 0x2, 0x101}})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000480)={'syztnl1\x00', &(0x7f0000000400)={'ip6_vti0\x00', <r3=>r2, 0x29, 0x1, 0x9, 0x47, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, 0x80, 0x7800, 0x663, 0x6}})
ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f00000004c0)={0x200, 0x3, 0x9})
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r4, 0x89f6, &(0x7f00000007c0)={'syztnl0\x00', &(0x7f0000000740)={'sit0\x00', r3, 0x2f, 0x1f, 0x8, 0x165, 0x0, @local, @empty, 0x10, 0x1, 0x2, 0x8}})

06:28:14 executing program 1:
getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, <r0=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000080)=0xffffffffffffffff)
recvmsg(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000140)=""/231, 0xe7}, {&(0x7f0000000240)=""/233, 0xe9}, {&(0x7f0000000340)=""/164, 0xa4}, {&(0x7f0000000400)=""/197, 0xc5}], 0x4}, 0x100)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000600)={'sit0\x00', &(0x7f0000000580)={'syztnl0\x00', <r2=>r0, 0x29, 0x0, 0x2, 0x1, 0x1, @dev={0xfe, 0x80, '\x00', 0x31}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7, 0x41db5e1226b1a6e, 0x10001, 0x2}})
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000006c0)={'sit0\x00', &(0x7f0000000640)={'syztnl2\x00', <r4=>r2, 0x29, 0x7, 0x9, 0xffff2cb6, 0x0, @empty, @local, 0x7, 0x1, 0x4, 0x7fffffff}})
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r3, 0x89f6, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000700)={'sit0\x00', <r5=>r4, 0x2f, 0x6, 0x5d, 0x401, 0x2, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x700, 0x40, 0x6, 0x8}})
r6 = openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x4c80, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(r3, 0x89f4, &(0x7f0000000880)={'syztnl1\x00', &(0x7f0000000800)={'ip6tnl0\x00', <r7=>0x0, 0x4, 0x3f, 0x3f, 0x6, 0x10, @mcast1, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7800, 0x80, 0x2}})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r6, 0x89f8, &(0x7f0000000940)={'ip6gre0\x00', &(0x7f00000008c0)={'syztnl2\x00', r7, 0x2f, 0x8a, 0xf, 0xfffffff7, 0x2, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x1, 0x7fffffff, 0x3}})
recvmsg(0xffffffffffffffff, &(0x7f0000001d80)={&(0x7f0000000980)=@pppol2tpv3={0x18, 0x1, {0x0, <r8=>0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/8, 0x8}, {&(0x7f0000001a40)=""/177, 0xb1}, {&(0x7f0000001b00)=""/14, 0xe}, {&(0x7f0000001b40)=""/59, 0x3b}, {&(0x7f0000001b80)=""/39, 0x27}, {&(0x7f0000001bc0)=""/161, 0xa1}], 0x7, &(0x7f0000001d00)=""/100, 0x64}, 0x1)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r8, 0x89f9, &(0x7f0000001e40)={'syztnl1\x00', &(0x7f0000001dc0)={'ip6tnl0\x00', r2, 0x2f, 0x0, 0x5, 0x2, 0x710a593111734ad9, @dev={0xfe, 0x80, '\x00', 0x26}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7, 0x700, 0xfffeffff, 0x5}})
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x2400, 0x800)
socket(0x18, 0x4, 0x1)
r9 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_drop_memb(r9, 0x107, 0x2, &(0x7f0000001f40)={r5, 0x1, 0x6, @multicast}, 0x10)

06:28:14 executing program 6:
ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000))
ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000040))
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080))
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=<r0=>0x0)
ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000100)=r0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x8, 0x1, 0xb65, 0x8, {{0x15, 0x4, 0x2, 0x0, 0x54, 0x66, 0x0, 0x81, 0x2f, 0x0, @private=0xa010100, @multicast2, {[@end, @cipso={0x86, 0x29, 0x1, [{0x5, 0xf, "3e703dd712ca222ae8a3af2c04"}, {0x1, 0x7, "8caeda7b53"}, {0x0, 0xd, "3450bf32edd480c19ec31d"}]}, @timestamp={0x44, 0xc, 0x15, 0x0, 0x1, [0x3, 0x6]}, @ssrr={0x89, 0x7, 0x29, [@rand_addr=0x64010100]}]}}}}})
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000200)={0x7ff, 0x6, 0x100, 0x8, 0x15, "16fc41fd0b316794"})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index=0x7, 0x3, 0x1, 0x94b, 0x14}, 0x2)
sched_yield()
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x200040, 0x0)
sendto(r1, &(0x7f00000002c0)="6b72d37122a4d6358321d7abd9831a4dd89feacc91d8672b9e3679783580ffac1981f5787c3c19e6d8c39c72b5c31cd7c635d89cb33ad124ee3ac3630804bdee741d9b3227178c041b67132e31fefb916cf72680822d8a547e4407a94d0278c3427ba53ff5cdf4aeaf85f2ed09a1e1838bfc", 0x72, 0x8010, &(0x7f0000000340)=@generic={0xa, "161444d24dee7db492ff0ba1fd759885041745d7ca0ad8bf977869d195c13ab70bd28acaf63e738c626b8db7b5ad71a944e766d088d4dc0a8ac3af34304fe75932f620e02a297eb485f40b0c671a6298d1f4751fd72717f6911f993c1e2ea6d0e8d65502d8939b50ad202954a48634eb34f132d56f0c87ac58e27624b6cf"}, 0x80)
ioctl$TIOCCBRK(r1, 0x5428)
pipe(&(0x7f0000000400))
ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000880)={0x0, 0x1, 0x1, 0xa, 0x174, &(0x7f0000000480)="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"})
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:28:14 executing program 4:
pkey_free(0xffffffffffffffff)
pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x200000b, 0xffffffffffffffff)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000740))

06:28:14 executing program 5:
openat$ptmx(0xffffffffffffff9c, 0x0, 0x10400, 0x0)

06:28:14 executing program 7:
getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, <r0=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000080)=0xffffffffffffffff)
recvmsg(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000140)=""/231, 0xe7}, {&(0x7f0000000240)=""/233, 0xe9}, {&(0x7f0000000340)=""/164, 0xa4}, {&(0x7f0000000400)=""/197, 0xc5}], 0x4}, 0x100)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000600)={'sit0\x00', &(0x7f0000000580)={'syztnl0\x00', <r2=>r0, 0x29, 0x0, 0x2, 0x1, 0x1, @dev={0xfe, 0x80, '\x00', 0x31}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7, 0x41db5e1226b1a6e, 0x10001, 0x2}})
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000006c0)={'sit0\x00', &(0x7f0000000640)={'syztnl2\x00', <r4=>r2, 0x29, 0x7, 0x9, 0xffff2cb6, 0x0, @empty, @local, 0x7, 0x1, 0x4, 0x7fffffff}})
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r3, 0x89f6, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000700)={'sit0\x00', r4, 0x2f, 0x6, 0x5d, 0x401, 0x2, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x700, 0x40, 0x6, 0x8}})
r5 = openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x4c80, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(r3, 0x89f4, &(0x7f0000000880)={'syztnl1\x00', &(0x7f0000000800)={'ip6tnl0\x00', <r6=>0x0, 0x4, 0x3f, 0x3f, 0x6, 0x10, @mcast1, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7800, 0x80, 0x2}})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f0000000940)={'ip6gre0\x00', &(0x7f00000008c0)={'syztnl2\x00', r6, 0x2f, 0x8a, 0xf, 0xfffffff7, 0x2, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x1, 0x7fffffff, 0x3}})
recvmsg(0xffffffffffffffff, &(0x7f0000001d80)={&(0x7f0000000980)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/8, 0x8}, {&(0x7f0000001a40)=""/177, 0xb1}, {&(0x7f0000001b00)=""/14, 0xe}, {&(0x7f0000001b40)=""/59, 0x3b}, {&(0x7f0000001b80)=""/39, 0x27}, {&(0x7f0000001bc0)=""/161, 0xa1}], 0x7, &(0x7f0000001d00)=""/100, 0x64}, 0x1)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f00000023c0)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002380)={&(0x7f0000002300)={0x7c, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r0}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x800)

06:28:14 executing program 2:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip_vti0\x00', <r2=>r1, 0x0, 0x10, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x67, 0x0, 0x4, 0xb1fde26cf0cef217, 0x0, @private=0xa010100, @broadcast, {[@generic={0x7, 0x10, "98a1be21dcfff95b281d17e4850a"}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480)=0x5)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', <r3=>r1, 0x4, 0x3, 0x40, 0x7, 0x2, @loopback, @loopback, 0x8021, 0x8, 0x3f, 0x1f}})
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000600)={'syztnl0\x00', &(0x7f0000000580)={'ip6_vti0\x00', r3, 0x2f, 0x27, 0x0, 0x3, 0x3, @remote, @local, 0x1, 0x40, 0x4, 0x25b}})
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', <r5=>r3, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r4, 0x89f9, &(0x7f0000000c80)={'sit0\x00', &(0x7f0000000c00)={'sit0\x00', r5, 0x4, 0x80, 0x8, 0xafc, 0x18, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0xe, 0x8, 0x781, 0x3}})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), r4)
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
munlock(&(0x7f0000ff6000/0xa000)=nil, 0xa000)
sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x44, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x3a}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r4}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:28:14 executing program 0:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x284881, 0x0)
ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f0000000140))

[  187.756655] Bluetooth: hci3: command 0x0406 tx timeout
[  187.758299] Bluetooth: hci5: command 0x0406 tx timeout
[  187.759469] Bluetooth: hci0: command 0x0406 tx timeout
[  187.760500] Bluetooth: hci2: command 0x0406 tx timeout
[  187.761656] Bluetooth: hci1: command 0x0406 tx timeout
[  187.762675] Bluetooth: hci4: command 0x0406 tx timeout
[  187.763685] Bluetooth: hci6: command 0x0406 tx timeout
[  191.849296] Bluetooth: hci7: command 0x0406 tx timeout
06:28:22 executing program 0:
r0 = openat$full(0xffffffffffffff9c, 0x0, 0x284881, 0x0)
ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f0000000140))

06:28:22 executing program 1:
getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, <r0=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000080)=0xffffffffffffffff)
recvmsg(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000140)=""/231, 0xe7}, {&(0x7f0000000240)=""/233, 0xe9}, {&(0x7f0000000340)=""/164, 0xa4}, {&(0x7f0000000400)=""/197, 0xc5}], 0x4}, 0x100)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000600)={'sit0\x00', &(0x7f0000000580)={'syztnl0\x00', <r2=>r0, 0x29, 0x0, 0x2, 0x1, 0x1, @dev={0xfe, 0x80, '\x00', 0x31}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7, 0x41db5e1226b1a6e, 0x10001, 0x2}})
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000006c0)={'sit0\x00', &(0x7f0000000640)={'syztnl2\x00', <r4=>r2, 0x29, 0x7, 0x9, 0xffff2cb6, 0x0, @empty, @local, 0x7, 0x1, 0x4, 0x7fffffff}})
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r3, 0x89f6, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000700)={'sit0\x00', <r5=>r4, 0x2f, 0x6, 0x5d, 0x401, 0x2, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x700, 0x40, 0x6, 0x8}})
r6 = openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x4c80, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(r3, 0x89f4, &(0x7f0000000880)={'syztnl1\x00', &(0x7f0000000800)={'ip6tnl0\x00', <r7=>0x0, 0x4, 0x3f, 0x3f, 0x6, 0x10, @mcast1, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7800, 0x80, 0x2}})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r6, 0x89f8, &(0x7f0000000940)={'ip6gre0\x00', &(0x7f00000008c0)={'syztnl2\x00', r7, 0x2f, 0x8a, 0xf, 0xfffffff7, 0x2, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x1, 0x7fffffff, 0x3}})
recvmsg(0xffffffffffffffff, &(0x7f0000001d80)={&(0x7f0000000980)=@pppol2tpv3={0x18, 0x1, {0x0, <r8=>0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/8, 0x8}, {&(0x7f0000001a40)=""/177, 0xb1}, {&(0x7f0000001b00)=""/14, 0xe}, {&(0x7f0000001b40)=""/59, 0x3b}, {&(0x7f0000001b80)=""/39, 0x27}, {&(0x7f0000001bc0)=""/161, 0xa1}], 0x7, &(0x7f0000001d00)=""/100, 0x64}, 0x1)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r8, 0x89f9, &(0x7f0000001e40)={'syztnl1\x00', &(0x7f0000001dc0)={'ip6tnl0\x00', r2, 0x2f, 0x0, 0x5, 0x2, 0x710a593111734ad9, @dev={0xfe, 0x80, '\x00', 0x26}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7, 0x700, 0xfffeffff, 0x5}})
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x2400, 0x800)
r9 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_drop_memb(r9, 0x107, 0x2, &(0x7f0000001f40)={r5, 0x1, 0x6, @multicast}, 0x10)

06:28:22 executing program 3:
connect$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x1, 0x0, 0x1, 0x80, 0x6, @remote}, 0x14)
ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'ip6_vti0\x00', <r0=>0x0, 0x4, 0x9, 0x86, 0x1, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, 0x8000, 0x10, 0x2, 0xff}})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000100)={'ip6tnl0\x00', r0, 0x4, 0x0, 0x9, 0x5605, 0x15, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40, 0x40, 0x1, 0x2}})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'sit0\x00', &(0x7f00000001c0)={'syztnl1\x00', r0, 0x65, 0x80, 0x6, 0x8, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x8008, 0x8, 0xfffff155, 0x1ff}})
getpeername(0xffffffffffffffff, &(0x7f0000000280)=@ethernet, &(0x7f0000000300)=0x80)
r1 = socket$inet6(0xa, 0x6, 0x80000000)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', <r2=>0x0, 0x4, 0x81, 0x3, 0x4, 0x2, @loopback, @mcast2, 0x1, 0x707, 0x2, 0x101}})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000480)={'syztnl1\x00', &(0x7f0000000400)={'ip6_vti0\x00', <r3=>r2, 0x29, 0x1, 0x9, 0x47, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, 0x80, 0x7800, 0x663, 0x6}})
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r4, 0x89f6, &(0x7f00000007c0)={'syztnl0\x00', &(0x7f0000000740)={'sit0\x00', r3, 0x2f, 0x1f, 0x8, 0x165, 0x0, @local, @empty, 0x10, 0x1, 0x2, 0x8}})

06:28:22 executing program 2:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip_vti0\x00', <r2=>r1, 0x0, 0x10, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x67, 0x0, 0x4, 0xb1fde26cf0cef217, 0x0, @private=0xa010100, @broadcast, {[@generic={0x7, 0x10, "98a1be21dcfff95b281d17e4850a"}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480)=0x5)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', <r3=>r1, 0x4, 0x3, 0x40, 0x7, 0x2, @loopback, @loopback, 0x8021, 0x8, 0x3f, 0x1f}})
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000600)={'syztnl0\x00', &(0x7f0000000580)={'ip6_vti0\x00', r3, 0x2f, 0x27, 0x0, 0x3, 0x3, @remote, @local, 0x1, 0x40, 0x4, 0x25b}})
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', <r5=>r3, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r4, 0x89f9, &(0x7f0000000c80)={'sit0\x00', &(0x7f0000000c00)={'sit0\x00', r5, 0x4, 0x80, 0x8, 0xafc, 0x18, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0xe, 0x8, 0x781, 0x3}})
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
munlock(&(0x7f0000ff6000/0xa000)=nil, 0xa000)
sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x44, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x3a}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r4}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:28:22 executing program 7:
getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, <r0=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000080)=0xffffffffffffffff)
recvmsg(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000140)=""/231, 0xe7}, {&(0x7f0000000240)=""/233, 0xe9}, {&(0x7f0000000340)=""/164, 0xa4}, {&(0x7f0000000400)=""/197, 0xc5}], 0x4}, 0x100)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000600)={'sit0\x00', &(0x7f0000000580)={'syztnl0\x00', <r2=>r0, 0x29, 0x0, 0x2, 0x1, 0x1, @dev={0xfe, 0x80, '\x00', 0x31}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7, 0x41db5e1226b1a6e, 0x10001, 0x2}})
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000006c0)={'sit0\x00', &(0x7f0000000640)={'syztnl2\x00', <r4=>r2, 0x29, 0x7, 0x9, 0xffff2cb6, 0x0, @empty, @local, 0x7, 0x1, 0x4, 0x7fffffff}})
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r3, 0x89f6, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000700)={'sit0\x00', r4, 0x2f, 0x6, 0x5d, 0x401, 0x2, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x700, 0x40, 0x6, 0x8}})
r5 = openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x4c80, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(r3, 0x89f4, &(0x7f0000000880)={'syztnl1\x00', &(0x7f0000000800)={'ip6tnl0\x00', <r6=>0x0, 0x4, 0x3f, 0x3f, 0x6, 0x10, @mcast1, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7800, 0x80, 0x2}})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f0000000940)={'ip6gre0\x00', &(0x7f00000008c0)={'syztnl2\x00', r6, 0x2f, 0x8a, 0xf, 0xfffffff7, 0x2, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x1, 0x7fffffff, 0x3}})
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f00000023c0)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002380)={&(0x7f0000002300)={0x7c, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r0}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x800)

06:28:22 executing program 6:
ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000))
ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000040))
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080))
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=<r0=>0x0)
ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000100)=r0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x8, 0x1, 0xb65, 0x8, {{0x15, 0x4, 0x2, 0x0, 0x54, 0x66, 0x0, 0x81, 0x2f, 0x0, @private=0xa010100, @multicast2, {[@end, @cipso={0x86, 0x29, 0x1, [{0x5, 0xf, "3e703dd712ca222ae8a3af2c04"}, {0x1, 0x7, "8caeda7b53"}, {0x0, 0xd, "3450bf32edd480c19ec31d"}]}, @timestamp={0x44, 0xc, 0x15, 0x0, 0x1, [0x3, 0x6]}, @ssrr={0x89, 0x7, 0x29, [@rand_addr=0x64010100]}]}}}}})
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000200)={0x7ff, 0x6, 0x100, 0x8, 0x15, "16fc41fd0b316794"})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index=0x7, 0x3, 0x1, 0x94b, 0x14}, 0x2)
sched_yield()
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x200040, 0x0)
sendto(r1, &(0x7f00000002c0)="6b72d37122a4d6358321d7abd9831a4dd89feacc91d8672b9e3679783580ffac1981f5787c3c19e6d8c39c72b5c31cd7c635d89cb33ad124ee3ac3630804bdee741d9b3227178c041b67132e31fefb916cf72680822d8a547e4407a94d0278c3427ba53ff5cdf4aeaf85f2ed09a1e1838bfc", 0x72, 0x8010, &(0x7f0000000340)=@generic={0xa, "161444d24dee7db492ff0ba1fd759885041745d7ca0ad8bf977869d195c13ab70bd28acaf63e738c626b8db7b5ad71a944e766d088d4dc0a8ac3af34304fe75932f620e02a297eb485f40b0c671a6298d1f4751fd72717f6911f993c1e2ea6d0e8d65502d8939b50ad202954a48634eb34f132d56f0c87ac58e27624b6cf"}, 0x80)
pipe(&(0x7f0000000400))
ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000880)={0x0, 0x1, 0x1, 0xa, 0x174, &(0x7f0000000480)="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"})
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:28:22 executing program 5:
openat$ptmx(0xffffffffffffff9c, 0x0, 0x10400, 0x0)

06:28:22 executing program 4:
pkey_free(0xffffffffffffffff)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000740))

06:28:22 executing program 5:
openat$ptmx(0xffffffffffffff9c, 0x0, 0x10400, 0x0)

06:28:22 executing program 4:
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000740))

06:28:22 executing program 5:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0)

06:28:22 executing program 0:
r0 = openat$full(0xffffffffffffff9c, 0x0, 0x284881, 0x0)
ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f0000000140))

06:28:22 executing program 5:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0)

06:28:22 executing program 7:
getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, <r0=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000080)=0xffffffffffffffff)
recvmsg(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000140)=""/231, 0xe7}, {&(0x7f0000000240)=""/233, 0xe9}, {&(0x7f0000000340)=""/164, 0xa4}, {&(0x7f0000000400)=""/197, 0xc5}], 0x4}, 0x100)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000600)={'sit0\x00', &(0x7f0000000580)={'syztnl0\x00', <r2=>r0, 0x29, 0x0, 0x2, 0x1, 0x1, @dev={0xfe, 0x80, '\x00', 0x31}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7, 0x41db5e1226b1a6e, 0x10001, 0x2}})
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000006c0)={'sit0\x00', &(0x7f0000000640)={'syztnl2\x00', <r4=>r2, 0x29, 0x7, 0x9, 0xffff2cb6, 0x0, @empty, @local, 0x7, 0x1, 0x4, 0x7fffffff}})
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r3, 0x89f6, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000700)={'sit0\x00', r4, 0x2f, 0x6, 0x5d, 0x401, 0x2, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x700, 0x40, 0x6, 0x8}})
openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x4c80, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(r3, 0x89f4, &(0x7f0000000880)={'syztnl1\x00', &(0x7f0000000800)={'ip6tnl0\x00', 0x0, 0x4, 0x3f, 0x3f, 0x6, 0x10, @mcast1, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7800, 0x80, 0x2}})
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f00000023c0)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002380)={&(0x7f0000002300)={0x7c, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r0}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x800)

06:28:22 executing program 6:
ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000))
ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000040))
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080))
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=<r0=>0x0)
ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000100)=r0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x8, 0x1, 0xb65, 0x8, {{0x15, 0x4, 0x2, 0x0, 0x54, 0x66, 0x0, 0x81, 0x2f, 0x0, @private=0xa010100, @multicast2, {[@end, @cipso={0x86, 0x29, 0x1, [{0x5, 0xf, "3e703dd712ca222ae8a3af2c04"}, {0x1, 0x7, "8caeda7b53"}, {0x0, 0xd, "3450bf32edd480c19ec31d"}]}, @timestamp={0x44, 0xc, 0x15, 0x0, 0x1, [0x3, 0x6]}, @ssrr={0x89, 0x7, 0x29, [@rand_addr=0x64010100]}]}}}}})
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000200)={0x7ff, 0x6, 0x100, 0x8, 0x15, "16fc41fd0b316794"})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index=0x7, 0x3, 0x1, 0x94b, 0x14}, 0x2)
sched_yield()
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x200040, 0x0)
pipe(&(0x7f0000000400))
ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000880)={0x0, 0x1, 0x1, 0xa, 0x174, &(0x7f0000000480)="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"})
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:28:22 executing program 0:
r0 = openat$full(0xffffffffffffff9c, 0x0, 0x284881, 0x0)
ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f0000000140))

06:28:22 executing program 5:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0)

06:28:22 executing program 2:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip_vti0\x00', <r2=>r1, 0x0, 0x10, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x67, 0x0, 0x4, 0xb1fde26cf0cef217, 0x0, @private=0xa010100, @broadcast, {[@generic={0x7, 0x10, "98a1be21dcfff95b281d17e4850a"}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480)=0x5)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', <r3=>r1, 0x4, 0x3, 0x40, 0x7, 0x2, @loopback, @loopback, 0x8021, 0x8, 0x3f, 0x1f}})
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000600)={'syztnl0\x00', &(0x7f0000000580)={'ip6_vti0\x00', r3, 0x2f, 0x27, 0x0, 0x3, 0x3, @remote, @local, 0x1, 0x40, 0x4, 0x25b}})
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', <r5=>r3, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r4, 0x89f9, &(0x7f0000000c80)={'sit0\x00', &(0x7f0000000c00)={'sit0\x00', r5, 0x4, 0x80, 0x8, 0xafc, 0x18, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0xe, 0x8, 0x781, 0x3}})
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
munlock(&(0x7f0000ff6000/0xa000)=nil, 0xa000)
sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x44, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x3a}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r4}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:28:30 executing program 0:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f0000000140))

06:28:30 executing program 1:
getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, <r0=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000080)=0xffffffffffffffff)
recvmsg(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000140)=""/231, 0xe7}, {&(0x7f0000000240)=""/233, 0xe9}, {&(0x7f0000000340)=""/164, 0xa4}, {&(0x7f0000000400)=""/197, 0xc5}], 0x4}, 0x100)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000600)={'sit0\x00', &(0x7f0000000580)={'syztnl0\x00', <r2=>r0, 0x29, 0x0, 0x2, 0x1, 0x1, @dev={0xfe, 0x80, '\x00', 0x31}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7, 0x41db5e1226b1a6e, 0x10001, 0x2}})
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000006c0)={'sit0\x00', &(0x7f0000000640)={'syztnl2\x00', <r4=>r2, 0x29, 0x7, 0x9, 0xffff2cb6, 0x0, @empty, @local, 0x7, 0x1, 0x4, 0x7fffffff}})
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r3, 0x89f6, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000700)={'sit0\x00', <r5=>r4, 0x2f, 0x6, 0x5d, 0x401, 0x2, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x700, 0x40, 0x6, 0x8}})
r6 = openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x4c80, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(r3, 0x89f4, &(0x7f0000000880)={'syztnl1\x00', &(0x7f0000000800)={'ip6tnl0\x00', <r7=>0x0, 0x4, 0x3f, 0x3f, 0x6, 0x10, @mcast1, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7800, 0x80, 0x2}})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r6, 0x89f8, &(0x7f0000000940)={'ip6gre0\x00', &(0x7f00000008c0)={'syztnl2\x00', r7, 0x2f, 0x8a, 0xf, 0xfffffff7, 0x2, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x1, 0x7fffffff, 0x3}})
recvmsg(0xffffffffffffffff, &(0x7f0000001d80)={&(0x7f0000000980)=@pppol2tpv3={0x18, 0x1, {0x0, <r8=>0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/8, 0x8}, {&(0x7f0000001a40)=""/177, 0xb1}, {&(0x7f0000001b00)=""/14, 0xe}, {&(0x7f0000001b40)=""/59, 0x3b}, {&(0x7f0000001b80)=""/39, 0x27}, {&(0x7f0000001bc0)=""/161, 0xa1}], 0x7, &(0x7f0000001d00)=""/100, 0x64}, 0x1)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r8, 0x89f9, &(0x7f0000001e40)={'syztnl1\x00', &(0x7f0000001dc0)={'ip6tnl0\x00', r2, 0x2f, 0x0, 0x5, 0x2, 0x710a593111734ad9, @dev={0xfe, 0x80, '\x00', 0x26}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7, 0x700, 0xfffeffff, 0x5}})
r9 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_drop_memb(r9, 0x107, 0x2, &(0x7f0000001f40)={r5, 0x1, 0x6, @multicast}, 0x10)

06:28:30 executing program 4:
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)

06:28:30 executing program 6:
ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000))
ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000040))
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080))
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=<r0=>0x0)
ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000100)=r0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x8, 0x1, 0xb65, 0x8, {{0x15, 0x4, 0x2, 0x0, 0x54, 0x66, 0x0, 0x81, 0x2f, 0x0, @private=0xa010100, @multicast2, {[@end, @cipso={0x86, 0x29, 0x1, [{0x5, 0xf, "3e703dd712ca222ae8a3af2c04"}, {0x1, 0x7, "8caeda7b53"}, {0x0, 0xd, "3450bf32edd480c19ec31d"}]}, @timestamp={0x44, 0xc, 0x15, 0x0, 0x1, [0x3, 0x6]}, @ssrr={0x89, 0x7, 0x29, [@rand_addr=0x64010100]}]}}}}})
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000200)={0x7ff, 0x6, 0x100, 0x8, 0x15, "16fc41fd0b316794"})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index=0x7, 0x3, 0x1, 0x94b, 0x14}, 0x2)
sched_yield()
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x200040, 0x0)
pipe(&(0x7f0000000400))
ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000880)={0x0, 0x1, 0x1, 0xa, 0x174, &(0x7f0000000480)="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"})
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:28:30 executing program 2:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip_vti0\x00', <r2=>r1, 0x0, 0x10, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x67, 0x0, 0x4, 0xb1fde26cf0cef217, 0x0, @private=0xa010100, @broadcast, {[@generic={0x7, 0x10, "98a1be21dcfff95b281d17e4850a"}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480)=0x5)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', <r3=>r1, 0x4, 0x3, 0x40, 0x7, 0x2, @loopback, @loopback, 0x8021, 0x8, 0x3f, 0x1f}})
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000600)={'syztnl0\x00', &(0x7f0000000580)={'ip6_vti0\x00', r3, 0x2f, 0x27, 0x0, 0x3, 0x3, @remote, @local, 0x1, 0x40, 0x4, 0x25b}})
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', <r5=>r3, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r4, 0x89f9, &(0x7f0000000c80)={'sit0\x00', &(0x7f0000000c00)={'sit0\x00', r5, 0x4, 0x80, 0x8, 0xafc, 0x18, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0xe, 0x8, 0x781, 0x3}})
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
munlock(&(0x7f0000ff6000/0xa000)=nil, 0xa000)
sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x44, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x3a}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r4}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:28:30 executing program 5:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip_vti0\x00', <r2=>r1, 0x0, 0x10, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x67, 0x0, 0x4, 0xb1fde26cf0cef217, 0x0, @private=0xa010100, @broadcast, {[@generic={0x7, 0x10, "98a1be21dcfff95b281d17e4850a"}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480)=0x5)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', <r3=>r1, 0x4, 0x3, 0x40, 0x7, 0x2, @loopback, @loopback, 0x8021, 0x8, 0x3f, 0x1f}})
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000600)={'syztnl0\x00', &(0x7f0000000580)={'ip6_vti0\x00', r3, 0x2f, 0x27, 0x0, 0x3, 0x3, @remote, @local, 0x1, 0x40, 0x4, 0x25b}})
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', <r5=>r3, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r4, 0x89f9, &(0x7f0000000c80)={'sit0\x00', &(0x7f0000000c00)={'sit0\x00', r5, 0x4, 0x80, 0x8, 0xafc, 0x18, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0xe, 0x8, 0x781, 0x3}})
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
munlock(&(0x7f0000ff6000/0xa000)=nil, 0xa000)
sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x44, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x3a}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r4}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:28:30 executing program 3:
connect$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x1, 0x0, 0x1, 0x80, 0x6, @remote}, 0x14)
ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'ip6_vti0\x00', <r0=>0x0, 0x4, 0x9, 0x86, 0x1, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, 0x8000, 0x10, 0x2, 0xff}})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000100)={'ip6tnl0\x00', r0, 0x4, 0x0, 0x9, 0x5605, 0x15, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40, 0x40, 0x1, 0x2}})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'sit0\x00', &(0x7f00000001c0)={'syztnl1\x00', r0, 0x65, 0x80, 0x6, 0x8, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x8008, 0x8, 0xfffff155, 0x1ff}})
getpeername(0xffffffffffffffff, &(0x7f0000000280)=@ethernet, &(0x7f0000000300)=0x80)
socket$inet6(0xa, 0x6, 0x80000000)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x4, 0x81, 0x3, 0x4, 0x2, @loopback, @mcast2, 0x1, 0x707, 0x2, 0x101}})
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f00000007c0)={'syztnl0\x00', &(0x7f0000000740)={'sit0\x00', 0x0, 0x2f, 0x1f, 0x8, 0x165, 0x0, @local, @empty, 0x10, 0x1, 0x2, 0x8}})

06:28:30 executing program 7:
getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, <r0=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000080)=0xffffffffffffffff)
recvmsg(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000140)=""/231, 0xe7}, {&(0x7f0000000240)=""/233, 0xe9}, {&(0x7f0000000340)=""/164, 0xa4}, {&(0x7f0000000400)=""/197, 0xc5}], 0x4}, 0x100)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000600)={'sit0\x00', &(0x7f0000000580)={'syztnl0\x00', <r2=>r0, 0x29, 0x0, 0x2, 0x1, 0x1, @dev={0xfe, 0x80, '\x00', 0x31}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7, 0x41db5e1226b1a6e, 0x10001, 0x2}})
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000006c0)={'sit0\x00', &(0x7f0000000640)={'syztnl2\x00', <r4=>r2, 0x29, 0x7, 0x9, 0xffff2cb6, 0x0, @empty, @local, 0x7, 0x1, 0x4, 0x7fffffff}})
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r3, 0x89f6, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000700)={'sit0\x00', r4, 0x2f, 0x6, 0x5d, 0x401, 0x2, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x700, 0x40, 0x6, 0x8}})
openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x4c80, 0x0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f00000023c0)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002380)={&(0x7f0000002300)={0x7c, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r0}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x800)

06:28:30 executing program 4:
ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000))
ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000040))
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080))
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=<r0=>0x0)
ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000100)=r0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x8, 0x1, 0xb65, 0x8, {{0x15, 0x4, 0x2, 0x0, 0x54, 0x66, 0x0, 0x81, 0x2f, 0x0, @private=0xa010100, @multicast2, {[@end, @cipso={0x86, 0x29, 0x1, [{0x5, 0xf, "3e703dd712ca222ae8a3af2c04"}, {0x1, 0x7, "8caeda7b53"}, {0x0, 0xd, "3450bf32edd480c19ec31d"}]}, @timestamp={0x44, 0xc, 0x15, 0x0, 0x1, [0x3, 0x6]}, @ssrr={0x89, 0x7, 0x29, [@rand_addr=0x64010100]}]}}}}})
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000200)={0x7ff, 0x6, 0x100, 0x8, 0x15, "16fc41fd0b316794"})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index=0x7, 0x3, 0x1, 0x94b, 0x14}, 0x2)
sched_yield()
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x200040, 0x0)
pipe(&(0x7f0000000400))
ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000880)={0x0, 0x1, 0x1, 0xa, 0x174, &(0x7f0000000480)="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"})
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:28:30 executing program 0:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f0000000140))

06:28:30 executing program 3:
connect$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x1, 0x0, 0x1, 0x80, 0x6, @remote}, 0x14)
ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'ip6_vti0\x00', <r0=>0x0, 0x4, 0x9, 0x86, 0x1, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, 0x8000, 0x10, 0x2, 0xff}})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000100)={'ip6tnl0\x00', r0, 0x4, 0x0, 0x9, 0x5605, 0x15, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40, 0x40, 0x1, 0x2}})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'sit0\x00', &(0x7f00000001c0)={'syztnl1\x00', r0, 0x65, 0x80, 0x6, 0x8, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x8008, 0x8, 0xfffff155, 0x1ff}})
getpeername(0xffffffffffffffff, &(0x7f0000000280)=@ethernet, &(0x7f0000000300)=0x80)
socket$inet6(0xa, 0x6, 0x80000000)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f00000007c0)={'syztnl0\x00', &(0x7f0000000740)={'sit0\x00', 0x0, 0x2f, 0x1f, 0x8, 0x165, 0x0, @local, @empty, 0x10, 0x1, 0x2, 0x8}})

06:28:30 executing program 6:
ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000))
ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000040))
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080))
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=<r0=>0x0)
ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000100)=r0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x8, 0x1, 0xb65, 0x8, {{0x15, 0x4, 0x2, 0x0, 0x54, 0x66, 0x0, 0x81, 0x2f, 0x0, @private=0xa010100, @multicast2, {[@end, @cipso={0x86, 0x29, 0x1, [{0x5, 0xf, "3e703dd712ca222ae8a3af2c04"}, {0x1, 0x7, "8caeda7b53"}, {0x0, 0xd, "3450bf32edd480c19ec31d"}]}, @timestamp={0x44, 0xc, 0x15, 0x0, 0x1, [0x3, 0x6]}, @ssrr={0x89, 0x7, 0x29, [@rand_addr=0x64010100]}]}}}}})
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000200)={0x7ff, 0x6, 0x100, 0x8, 0x15, "16fc41fd0b316794"})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index=0x7, 0x3, 0x1, 0x94b, 0x14}, 0x2)
sched_yield()
pipe(&(0x7f0000000400))
ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000880)={0x0, 0x1, 0x1, 0xa, 0x174, &(0x7f0000000480)="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"})
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:28:30 executing program 5:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip_vti0\x00', <r2=>r1, 0x0, 0x10, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x67, 0x0, 0x4, 0xb1fde26cf0cef217, 0x0, @private=0xa010100, @broadcast, {[@generic={0x7, 0x10, "98a1be21dcfff95b281d17e4850a"}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480)=0x5)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', <r3=>r1, 0x4, 0x3, 0x40, 0x7, 0x2, @loopback, @loopback, 0x8021, 0x8, 0x3f, 0x1f}})
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000600)={'syztnl0\x00', &(0x7f0000000580)={'ip6_vti0\x00', r3, 0x2f, 0x27, 0x0, 0x3, 0x3, @remote, @local, 0x1, 0x40, 0x4, 0x25b}})
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', <r5=>r3, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r4, 0x89f9, &(0x7f0000000c80)={'sit0\x00', &(0x7f0000000c00)={'sit0\x00', r5, 0x4, 0x80, 0x8, 0xafc, 0x18, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0xe, 0x8, 0x781, 0x3}})
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
munlock(&(0x7f0000ff6000/0xa000)=nil, 0xa000)
sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x44, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x3a}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r4}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:28:30 executing program 2:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip_vti0\x00', <r2=>r1, 0x0, 0x10, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x67, 0x0, 0x4, 0xb1fde26cf0cef217, 0x0, @private=0xa010100, @broadcast, {[@generic={0x7, 0x10, "98a1be21dcfff95b281d17e4850a"}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480)=0x5)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', <r3=>r1, 0x4, 0x3, 0x40, 0x7, 0x2, @loopback, @loopback, 0x8021, 0x8, 0x3f, 0x1f}})
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000600)={'syztnl0\x00', &(0x7f0000000580)={'ip6_vti0\x00', r3, 0x2f, 0x27, 0x0, 0x3, 0x3, @remote, @local, 0x1, 0x40, 0x4, 0x25b}})
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', r3, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), r4)
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
munlock(&(0x7f0000ff6000/0xa000)=nil, 0xa000)
sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x44, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x3a}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r4}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:28:30 executing program 4:
ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000))
ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000040))
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080))
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=<r0=>0x0)
ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000100)=r0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x8, 0x1, 0xb65, 0x8, {{0x15, 0x4, 0x2, 0x0, 0x54, 0x66, 0x0, 0x81, 0x2f, 0x0, @private=0xa010100, @multicast2, {[@end, @cipso={0x86, 0x29, 0x1, [{0x5, 0xf, "3e703dd712ca222ae8a3af2c04"}, {0x1, 0x7, "8caeda7b53"}, {0x0, 0xd, "3450bf32edd480c19ec31d"}]}, @timestamp={0x44, 0xc, 0x15, 0x0, 0x1, [0x3, 0x6]}, @ssrr={0x89, 0x7, 0x29, [@rand_addr=0x64010100]}]}}}}})
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000200)={0x7ff, 0x6, 0x100, 0x8, 0x15, "16fc41fd0b316794"})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index=0x7, 0x3, 0x1, 0x94b, 0x14}, 0x2)
sched_yield()
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x200040, 0x0)
pipe(&(0x7f0000000400))
ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000880)={0x0, 0x1, 0x1, 0xa, 0x174, &(0x7f0000000480)="5edb89eaad007f1a706b88cb3a9480a5562c7e564ce1a22c8df8f726fe37b4d862d84daee9ed2138f78aa73236b0f8aa29f6887a95c11b5632235b1ca585ef6e2b7d79ce6c276e0c0189f2f6db5247a5ab874e166f440f821e03103a32a9272c814236d289278b79c32ebf6ba6c5233b1f7a4d2c44a2a71cdb392a600e64a4af7a10fa0a8bea9cc5b90e126f49978fef66f5ade48a06d597417f758954e92a0a4c12a021983aaf60aa29f6cab1b2823a791039220ac2a52293635f2edb83dc426f276233492c81c2ed499c54fbb8111cfc01333e31d1e6284939f8b46349b320a0f165c6b1c7112dc9f76df0ed194c098450de5466e14e767d16039e649dfed15123f0380ac5b45a6af5920aac7b058e5bfb4e3eadc9d8465048073c050bb96ee01990875b09cf164a282a1f3e8b3ccf3f76077eace47e8d2f1e0a2a5fc00477ef309fd57c0d845dd2d86350e999349ff41d6a82704dabf9081eea0a228feb9308a03b69844b13d48b7082865047eefa7a70bfea6488322c7739c6446fbe0afb052a520dc3bd0c78b19c73e16ce0ef6ea5b883876cf677537b667fbcb430fd5f773ad2b86f4db609c89166cfbb4a090a35769055a68c45bbc8c58c8e9ba527a211a12730b3295be141c2092f17b2d8df1b02c3b3e06955d667737d8888eceae78b0888e09713470bdf19ddcd4ad497d41b41e6b4df45662e6801b4216c1965e3df45e645f9253fe67bd0f65d37a052bab9769a2a32c0da67496cddd7752b34f4a10cface1f531869f24d11733334baf3fa8b8450261d61f41218716e36c4edb502ba59ce7f4ac2abc53ca940fc92dbadeff2ba66debdf785776147c5709f31927a7e081883ef681b6591e9259fa33541c087f7884b2778a0cc839781be052050d3c71ea8d886c129b61e6bfcf4686934f18da4e7cede143e9c0db819675b4e1aeb1f87efafdb0279dd6d5d5b0efcd6a8e7c55141fc7ecfd50dd8cb9879e3768b4d6c481a7c310609e987303254bee0461c5fcd6cd35b46361b6b221894bc6153ef150d4f9e7d2f0fe479e3c71f17dc51dc39ed12e66dab898a54a232b675dfe4e7bb637fef8ea611585fcb66d3ee54dff31967f0089e47d249daffd1e014e2c2e11ca9e357b483c8b0e6c1d890874830f5d54b2b9f057b62a3ea0175bce6545ae55f523618384a2beb7f095f8882ce7105e10fc0b0cdc040c1c8da0eddfa642cd0e02ac42c9218617a0a6cf440752d8c8ec9bcb6e25c35b8636dcdee315811155b500e52911b3dc3c9f7a2d50cfbd560c6db46ca8d5614f047c048cbbdf9df5865916321f5533ce617005da2b39bfa433856a2f73d5ad40b97c7787feaf990de49222fd58d0f535b458f5f1ce067ddf0fb0d56ada3ae5e7d43afcc9ff15eb9e5706f6c902adfd4f8d38f4d8ef8832a070c739d7a4515d0aa75643597f71d7753"})
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:28:30 executing program 0:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f0000000140))

06:28:30 executing program 1:
getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, <r0=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000080)=0xffffffffffffffff)
recvmsg(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000140)=""/231, 0xe7}, {&(0x7f0000000240)=""/233, 0xe9}, {&(0x7f0000000340)=""/164, 0xa4}, {&(0x7f0000000400)=""/197, 0xc5}], 0x4}, 0x100)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000600)={'sit0\x00', &(0x7f0000000580)={'syztnl0\x00', <r2=>r0, 0x29, 0x0, 0x2, 0x1, 0x1, @dev={0xfe, 0x80, '\x00', 0x31}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7, 0x41db5e1226b1a6e, 0x10001, 0x2}})
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000006c0)={'sit0\x00', &(0x7f0000000640)={'syztnl2\x00', <r4=>r2, 0x29, 0x7, 0x9, 0xffff2cb6, 0x0, @empty, @local, 0x7, 0x1, 0x4, 0x7fffffff}})
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r3, 0x89f6, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000700)={'sit0\x00', <r5=>r4, 0x2f, 0x6, 0x5d, 0x401, 0x2, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x700, 0x40, 0x6, 0x8}})
r6 = openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x4c80, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(r3, 0x89f4, &(0x7f0000000880)={'syztnl1\x00', &(0x7f0000000800)={'ip6tnl0\x00', <r7=>0x0, 0x4, 0x3f, 0x3f, 0x6, 0x10, @mcast1, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7800, 0x80, 0x2}})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r6, 0x89f8, &(0x7f0000000940)={'ip6gre0\x00', &(0x7f00000008c0)={'syztnl2\x00', r7, 0x2f, 0x8a, 0xf, 0xfffffff7, 0x2, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x1, 0x7fffffff, 0x3}})
recvmsg(0xffffffffffffffff, &(0x7f0000001d80)={&(0x7f0000000980)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/8, 0x8}, {&(0x7f0000001a40)=""/177, 0xb1}, {&(0x7f0000001b00)=""/14, 0xe}, {&(0x7f0000001b40)=""/59, 0x3b}, {&(0x7f0000001b80)=""/39, 0x27}, {&(0x7f0000001bc0)=""/161, 0xa1}], 0x7, &(0x7f0000001d00)=""/100, 0x64}, 0x1)
r8 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_drop_memb(r8, 0x107, 0x2, &(0x7f0000001f40)={r5, 0x1, 0x6, @multicast}, 0x10)

06:28:30 executing program 6:
ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000))
ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000040))
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080))
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=<r0=>0x0)
ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000100)=r0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x8, 0x1, 0xb65, 0x8, {{0x15, 0x4, 0x2, 0x0, 0x54, 0x66, 0x0, 0x81, 0x2f, 0x0, @private=0xa010100, @multicast2, {[@end, @cipso={0x86, 0x29, 0x1, [{0x5, 0xf, "3e703dd712ca222ae8a3af2c04"}, {0x1, 0x7, "8caeda7b53"}, {0x0, 0xd, "3450bf32edd480c19ec31d"}]}, @timestamp={0x44, 0xc, 0x15, 0x0, 0x1, [0x3, 0x6]}, @ssrr={0x89, 0x7, 0x29, [@rand_addr=0x64010100]}]}}}}})
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000200)={0x7ff, 0x6, 0x100, 0x8, 0x15, "16fc41fd0b316794"})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index=0x7, 0x3, 0x1, 0x94b, 0x14}, 0x2)
sched_yield()
pipe(&(0x7f0000000400))
ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000880)={0x0, 0x1, 0x1, 0xa, 0x174, &(0x7f0000000480)="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"})
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:28:30 executing program 7:
getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, <r0=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000080)=0xffffffffffffffff)
recvmsg(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000140)=""/231, 0xe7}, {&(0x7f0000000240)=""/233, 0xe9}, {&(0x7f0000000340)=""/164, 0xa4}, {&(0x7f0000000400)=""/197, 0xc5}], 0x4}, 0x100)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000600)={'sit0\x00', &(0x7f0000000580)={'syztnl0\x00', <r2=>r0, 0x29, 0x0, 0x2, 0x1, 0x1, @dev={0xfe, 0x80, '\x00', 0x31}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7, 0x41db5e1226b1a6e, 0x10001, 0x2}})
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000006c0)={'sit0\x00', &(0x7f0000000640)={'syztnl2\x00', <r4=>r2, 0x29, 0x7, 0x9, 0xffff2cb6, 0x0, @empty, @local, 0x7, 0x1, 0x4, 0x7fffffff}})
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r3, 0x89f6, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000700)={'sit0\x00', r4, 0x2f, 0x6, 0x5d, 0x401, 0x2, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x700, 0x40, 0x6, 0x8}})
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f00000023c0)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002380)={&(0x7f0000002300)={0x7c, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r0}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x800)

06:28:30 executing program 3:
connect$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x1, 0x0, 0x1, 0x80, 0x6, @remote}, 0x14)
ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'ip6_vti0\x00', <r0=>0x0, 0x4, 0x9, 0x86, 0x1, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, 0x8000, 0x10, 0x2, 0xff}})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000100)={'ip6tnl0\x00', r0, 0x4, 0x0, 0x9, 0x5605, 0x15, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40, 0x40, 0x1, 0x2}})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'sit0\x00', &(0x7f00000001c0)={'syztnl1\x00', r0, 0x65, 0x80, 0x6, 0x8, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x8008, 0x8, 0xfffff155, 0x1ff}})
getpeername(0xffffffffffffffff, &(0x7f0000000280)=@ethernet, &(0x7f0000000300)=0x80)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f00000007c0)={'syztnl0\x00', &(0x7f0000000740)={'sit0\x00', 0x0, 0x2f, 0x1f, 0x8, 0x165, 0x0, @local, @empty, 0x10, 0x1, 0x2, 0x8}})

06:28:31 executing program 0:
openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x284881, 0x0)
ioctl$RTC_RD_TIME(0xffffffffffffffff, 0x80247009, &(0x7f0000000140))

06:28:31 executing program 4:
ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000))
ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000040))
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080))
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=<r0=>0x0)
ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000100)=r0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x8, 0x1, 0xb65, 0x8, {{0x15, 0x4, 0x2, 0x0, 0x54, 0x66, 0x0, 0x81, 0x2f, 0x0, @private=0xa010100, @multicast2, {[@end, @cipso={0x86, 0x29, 0x1, [{0x5, 0xf, "3e703dd712ca222ae8a3af2c04"}, {0x1, 0x7, "8caeda7b53"}, {0x0, 0xd, "3450bf32edd480c19ec31d"}]}, @timestamp={0x44, 0xc, 0x15, 0x0, 0x1, [0x3, 0x6]}, @ssrr={0x89, 0x7, 0x29, [@rand_addr=0x64010100]}]}}}}})
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000200)={0x7ff, 0x6, 0x100, 0x8, 0x15, "16fc41fd0b316794"})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index=0x7, 0x3, 0x1, 0x94b, 0x14}, 0x2)
sched_yield()
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x200040, 0x0)
pipe(&(0x7f0000000400))
ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000880)={0x0, 0x1, 0x1, 0xa, 0x174, &(0x7f0000000480)="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"})
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:28:31 executing program 6:
ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000))
ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000040))
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080))
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=<r0=>0x0)
ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000100)=r0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x8, 0x1, 0xb65, 0x8, {{0x15, 0x4, 0x2, 0x0, 0x54, 0x66, 0x0, 0x81, 0x2f, 0x0, @private=0xa010100, @multicast2, {[@end, @cipso={0x86, 0x29, 0x1, [{0x5, 0xf, "3e703dd712ca222ae8a3af2c04"}, {0x1, 0x7, "8caeda7b53"}, {0x0, 0xd, "3450bf32edd480c19ec31d"}]}, @timestamp={0x44, 0xc, 0x15, 0x0, 0x1, [0x3, 0x6]}, @ssrr={0x89, 0x7, 0x29, [@rand_addr=0x64010100]}]}}}}})
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000200)={0x7ff, 0x6, 0x100, 0x8, 0x15, "16fc41fd0b316794"})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index=0x7, 0x3, 0x1, 0x94b, 0x14}, 0x2)
sched_yield()
pipe(&(0x7f0000000400))
ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000880)={0x0, 0x1, 0x1, 0xa, 0x174, &(0x7f0000000480)="5edb89eaad007f1a706b88cb3a9480a5562c7e564ce1a22c8df8f726fe37b4d862d84daee9ed2138f78aa73236b0f8aa29f6887a95c11b5632235b1ca585ef6e2b7d79ce6c276e0c0189f2f6db5247a5ab874e166f440f821e03103a32a9272c814236d289278b79c32ebf6ba6c5233b1f7a4d2c44a2a71cdb392a600e64a4af7a10fa0a8bea9cc5b90e126f49978fef66f5ade48a06d597417f758954e92a0a4c12a021983aaf60aa29f6cab1b2823a791039220ac2a52293635f2edb83dc426f276233492c81c2ed499c54fbb8111cfc01333e31d1e6284939f8b46349b320a0f165c6b1c7112dc9f76df0ed194c098450de5466e14e767d16039e649dfed15123f0380ac5b45a6af5920aac7b058e5bfb4e3eadc9d8465048073c050bb96ee01990875b09cf164a282a1f3e8b3ccf3f76077eace47e8d2f1e0a2a5fc00477ef309fd57c0d845dd2d86350e999349ff41d6a82704dabf9081eea0a228feb9308a03b69844b13d48b7082865047eefa7a70bfea6488322c7739c6446fbe0afb052a520dc3bd0c78b19c73e16ce0ef6ea5b883876cf677537b667fbcb430fd5f773ad2b86f4db609c89166cfbb4a090a35769055a68c45bbc8c58c8e9ba527a211a12730b3295be141c2092f17b2d8df1b02c3b3e06955d667737d8888eceae78b0888e09713470bdf19ddcd4ad497d41b41e6b4df45662e6801b4216c1965e3df45e645f9253fe67bd0f65d37a052bab9769a2a32c0da67496cddd7752b34f4a10cface1f531869f24d11733334baf3fa8b8450261d61f41218716e36c4edb502ba59ce7f4ac2abc53ca940fc92dbadeff2ba66debdf785776147c5709f31927a7e081883ef681b6591e9259fa33541c087f7884b2778a0cc839781be052050d3c71ea8d886c129b61e6bfcf4686934f18da4e7cede143e9c0db819675b4e1aeb1f87efafdb0279dd6d5d5b0efcd6a8e7c55141fc7ecfd50dd8cb9879e3768b4d6c481a7c310609e987303254bee0461c5fcd6cd35b46361b6b221894bc6153ef150d4f9e7d2f0fe479e3c71f17dc51dc39ed12e66dab898a54a232b675dfe4e7bb637fef8ea611585fcb66d3ee54dff31967f0089e47d249daffd1e014e2c2e11ca9e357b483c8b0e6c1d890874830f5d54b2b9f057b62a3ea0175bce6545ae55f523618384a2beb7f095f8882ce7105e10fc0b0cdc040c1c8da0eddfa642cd0e02ac42c9218617a0a6cf440752d8c8ec9bcb6e25c35b8636dcdee315811155b500e52911b3dc3c9f7a2d50cfbd560c6db46ca8d5614f047c048cbbdf9df5865916321f5533ce617005da2b39bfa433856a2f73d5ad40b97c7787feaf990de49222fd58d0f535b458f5f1ce067ddf0fb0d56ada3ae5e7d43afcc9ff15eb9e5706f6c902adfd4f8d38f4d8ef8832a070c739d7a4515d0aa75643597f71d7753"})
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:28:31 executing program 5:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip_vti0\x00', <r2=>r1, 0x0, 0x10, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x67, 0x0, 0x4, 0xb1fde26cf0cef217, 0x0, @private=0xa010100, @broadcast, {[@generic={0x7, 0x10, "98a1be21dcfff95b281d17e4850a"}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480)=0x5)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', <r3=>r1, 0x4, 0x3, 0x40, 0x7, 0x2, @loopback, @loopback, 0x8021, 0x8, 0x3f, 0x1f}})
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000600)={'syztnl0\x00', &(0x7f0000000580)={'ip6_vti0\x00', r3, 0x2f, 0x27, 0x0, 0x3, 0x3, @remote, @local, 0x1, 0x40, 0x4, 0x25b}})
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', <r5=>r3, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r4, 0x89f9, &(0x7f0000000c80)={'sit0\x00', &(0x7f0000000c00)={'sit0\x00', r5, 0x4, 0x80, 0x8, 0xafc, 0x18, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0xe, 0x8, 0x781, 0x3}})
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
munlock(&(0x7f0000ff6000/0xa000)=nil, 0xa000)
sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x44, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x3a}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r4}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:28:38 executing program 5:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip_vti0\x00', <r2=>r1, 0x0, 0x10, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x67, 0x0, 0x4, 0xb1fde26cf0cef217, 0x0, @private=0xa010100, @broadcast, {[@generic={0x7, 0x10, "98a1be21dcfff95b281d17e4850a"}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480)=0x5)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', <r3=>r1, 0x4, 0x3, 0x40, 0x7, 0x2, @loopback, @loopback, 0x8021, 0x8, 0x3f, 0x1f}})
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000600)={'syztnl0\x00', &(0x7f0000000580)={'ip6_vti0\x00', r3, 0x2f, 0x27, 0x0, 0x3, 0x3, @remote, @local, 0x1, 0x40, 0x4, 0x25b}})
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', <r5=>r3, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r4, 0x89f9, &(0x7f0000000c80)={'sit0\x00', &(0x7f0000000c00)={'sit0\x00', r5, 0x4, 0x80, 0x8, 0xafc, 0x18, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0xe, 0x8, 0x781, 0x3}})
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
munlock(&(0x7f0000ff6000/0xa000)=nil, 0xa000)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r4}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:28:38 executing program 2:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip_vti0\x00', <r2=>r1, 0x0, 0x10, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x67, 0x0, 0x4, 0xb1fde26cf0cef217, 0x0, @private=0xa010100, @broadcast, {[@generic={0x7, 0x10, "98a1be21dcfff95b281d17e4850a"}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480)=0x5)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', <r3=>r1, 0x4, 0x3, 0x40, 0x7, 0x2, @loopback, @loopback, 0x8021, 0x8, 0x3f, 0x1f}})
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000600)={'syztnl0\x00', &(0x7f0000000580)={'ip6_vti0\x00', r3, 0x2f, 0x27, 0x0, 0x3, 0x3, @remote, @local, 0x1, 0x40, 0x4, 0x25b}})
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', r3, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), r4)
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
munlock(&(0x7f0000ff6000/0xa000)=nil, 0xa000)
sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x44, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x3a}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r4}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:28:38 executing program 1:
getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, <r0=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000080)=0xffffffffffffffff)
recvmsg(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000140)=""/231, 0xe7}, {&(0x7f0000000240)=""/233, 0xe9}, {&(0x7f0000000340)=""/164, 0xa4}, {&(0x7f0000000400)=""/197, 0xc5}], 0x4}, 0x100)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000600)={'sit0\x00', &(0x7f0000000580)={'syztnl0\x00', <r2=>r0, 0x29, 0x0, 0x2, 0x1, 0x1, @dev={0xfe, 0x80, '\x00', 0x31}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7, 0x41db5e1226b1a6e, 0x10001, 0x2}})
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000006c0)={'sit0\x00', &(0x7f0000000640)={'syztnl2\x00', <r4=>r2, 0x29, 0x7, 0x9, 0xffff2cb6, 0x0, @empty, @local, 0x7, 0x1, 0x4, 0x7fffffff}})
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r3, 0x89f6, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000700)={'sit0\x00', <r5=>r4, 0x2f, 0x6, 0x5d, 0x401, 0x2, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x700, 0x40, 0x6, 0x8}})
r6 = openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x4c80, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(r3, 0x89f4, &(0x7f0000000880)={'syztnl1\x00', &(0x7f0000000800)={'ip6tnl0\x00', <r7=>0x0, 0x4, 0x3f, 0x3f, 0x6, 0x10, @mcast1, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7800, 0x80, 0x2}})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r6, 0x89f8, &(0x7f0000000940)={'ip6gre0\x00', &(0x7f00000008c0)={'syztnl2\x00', r7, 0x2f, 0x8a, 0xf, 0xfffffff7, 0x2, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x1, 0x7fffffff, 0x3}})
r8 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_drop_memb(r8, 0x107, 0x2, &(0x7f0000001f40)={r5, 0x1, 0x6, @multicast}, 0x10)

06:28:38 executing program 6:
ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000))
ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000040))
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080))
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=<r0=>0x0)
ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000100)=r0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x8, 0x1, 0xb65, 0x8, {{0x15, 0x4, 0x2, 0x0, 0x54, 0x66, 0x0, 0x81, 0x2f, 0x0, @private=0xa010100, @multicast2, {[@end, @cipso={0x86, 0x29, 0x1, [{0x5, 0xf, "3e703dd712ca222ae8a3af2c04"}, {0x1, 0x7, "8caeda7b53"}, {0x0, 0xd, "3450bf32edd480c19ec31d"}]}, @timestamp={0x44, 0xc, 0x15, 0x0, 0x1, [0x3, 0x6]}, @ssrr={0x89, 0x7, 0x29, [@rand_addr=0x64010100]}]}}}}})
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000200)={0x7ff, 0x6, 0x100, 0x8, 0x15, "16fc41fd0b316794"})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index=0x7, 0x3, 0x1, 0x94b, 0x14}, 0x2)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x200040, 0x0)
pipe(&(0x7f0000000400))
ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000880)={0x0, 0x1, 0x1, 0xa, 0x174, &(0x7f0000000480)="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"})
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:28:38 executing program 0:
openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x284881, 0x0)
ioctl$RTC_RD_TIME(0xffffffffffffffff, 0x80247009, &(0x7f0000000140))

06:28:38 executing program 3:
connect$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x1, 0x0, 0x1, 0x80, 0x6, @remote}, 0x14)
ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'ip6_vti0\x00', <r0=>0x0, 0x4, 0x9, 0x86, 0x1, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, 0x8000, 0x10, 0x2, 0xff}})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000100)={'ip6tnl0\x00', r0, 0x4, 0x0, 0x9, 0x5605, 0x15, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40, 0x40, 0x1, 0x2}})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'sit0\x00', &(0x7f00000001c0)={'syztnl1\x00', r0, 0x65, 0x80, 0x6, 0x8, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x8008, 0x8, 0xfffff155, 0x1ff}})
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f00000007c0)={'syztnl0\x00', &(0x7f0000000740)={'sit0\x00', 0x0, 0x2f, 0x1f, 0x8, 0x165, 0x0, @local, @empty, 0x10, 0x1, 0x2, 0x8}})

06:28:38 executing program 7:
getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, <r0=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000080)=0xffffffffffffffff)
recvmsg(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000140)=""/231, 0xe7}, {&(0x7f0000000240)=""/233, 0xe9}, {&(0x7f0000000340)=""/164, 0xa4}, {&(0x7f0000000400)=""/197, 0xc5}], 0x4}, 0x100)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000600)={'sit0\x00', &(0x7f0000000580)={'syztnl0\x00', <r2=>r0, 0x29, 0x0, 0x2, 0x1, 0x1, @dev={0xfe, 0x80, '\x00', 0x31}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7, 0x41db5e1226b1a6e, 0x10001, 0x2}})
socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000006c0)={'sit0\x00', &(0x7f0000000640)={'syztnl2\x00', r2, 0x29, 0x7, 0x9, 0xffff2cb6, 0x0, @empty, @local, 0x7, 0x1, 0x4, 0x7fffffff}})
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f00000023c0)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002380)={&(0x7f0000002300)={0x7c, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r0}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x800)

06:28:38 executing program 4:
ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000))
ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000040))
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080))
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=<r0=>0x0)
ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000100)=r0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x8, 0x1, 0xb65, 0x8, {{0x15, 0x4, 0x2, 0x0, 0x54, 0x66, 0x0, 0x81, 0x2f, 0x0, @private=0xa010100, @multicast2, {[@end, @cipso={0x86, 0x29, 0x1, [{0x5, 0xf, "3e703dd712ca222ae8a3af2c04"}, {0x1, 0x7, "8caeda7b53"}, {0x0, 0xd, "3450bf32edd480c19ec31d"}]}, @timestamp={0x44, 0xc, 0x15, 0x0, 0x1, [0x3, 0x6]}, @ssrr={0x89, 0x7, 0x29, [@rand_addr=0x64010100]}]}}}}})
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000200)={0x7ff, 0x6, 0x100, 0x8, 0x15, "16fc41fd0b316794"})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index=0x7, 0x3, 0x1, 0x94b, 0x14}, 0x2)
sched_yield()
openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x200040, 0x0)
pipe(&(0x7f0000000400))
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:28:38 executing program 7:
getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, <r0=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000080)=0xffffffffffffffff)
recvmsg(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000140)=""/231, 0xe7}, {&(0x7f0000000240)=""/233, 0xe9}, {&(0x7f0000000340)=""/164, 0xa4}, {&(0x7f0000000400)=""/197, 0xc5}], 0x4}, 0x100)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000600)={'sit0\x00', &(0x7f0000000580)={'syztnl0\x00', r0, 0x29, 0x0, 0x2, 0x1, 0x1, @dev={0xfe, 0x80, '\x00', 0x31}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7, 0x41db5e1226b1a6e, 0x10001, 0x2}})
socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f00000023c0)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002380)={&(0x7f0000002300)={0x7c, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r0}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x800)

06:28:38 executing program 5:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip_vti0\x00', <r2=>r1, 0x0, 0x10, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x67, 0x0, 0x4, 0xb1fde26cf0cef217, 0x0, @private=0xa010100, @broadcast, {[@generic={0x7, 0x10, "98a1be21dcfff95b281d17e4850a"}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480)=0x5)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', <r3=>r1, 0x4, 0x3, 0x40, 0x7, 0x2, @loopback, @loopback, 0x8021, 0x8, 0x3f, 0x1f}})
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000600)={'syztnl0\x00', &(0x7f0000000580)={'ip6_vti0\x00', r3, 0x2f, 0x27, 0x0, 0x3, 0x3, @remote, @local, 0x1, 0x40, 0x4, 0x25b}})
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', <r5=>r3, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r4, 0x89f9, &(0x7f0000000c80)={'sit0\x00', &(0x7f0000000c00)={'sit0\x00', r5, 0x4, 0x80, 0x8, 0xafc, 0x18, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0xe, 0x8, 0x781, 0x3}})
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r4}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:28:38 executing program 0:
openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x284881, 0x0)
ioctl$RTC_RD_TIME(0xffffffffffffffff, 0x80247009, &(0x7f0000000140))

06:28:38 executing program 6:
ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000))
ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000040))
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080))
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=<r0=>0x0)
ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000100)=r0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x8, 0x1, 0xb65, 0x8, {{0x15, 0x4, 0x2, 0x0, 0x54, 0x66, 0x0, 0x81, 0x2f, 0x0, @private=0xa010100, @multicast2, {[@end, @cipso={0x86, 0x29, 0x1, [{0x5, 0xf, "3e703dd712ca222ae8a3af2c04"}, {0x1, 0x7, "8caeda7b53"}, {0x0, 0xd, "3450bf32edd480c19ec31d"}]}, @timestamp={0x44, 0xc, 0x15, 0x0, 0x1, [0x3, 0x6]}, @ssrr={0x89, 0x7, 0x29, [@rand_addr=0x64010100]}]}}}}})
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000200)={0x7ff, 0x6, 0x100, 0x8, 0x15, "16fc41fd0b316794"})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index=0x7, 0x3, 0x1, 0x94b, 0x14}, 0x2)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x200040, 0x0)
pipe(&(0x7f0000000400))
ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000880)={0x0, 0x1, 0x1, 0xa, 0x174, &(0x7f0000000480)="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"})
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:28:38 executing program 7:
getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, <r0=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000080)=0xffffffffffffffff)
recvmsg(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000140)=""/231, 0xe7}, {&(0x7f0000000240)=""/233, 0xe9}, {&(0x7f0000000340)=""/164, 0xa4}, {&(0x7f0000000400)=""/197, 0xc5}], 0x4}, 0x100)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000600)={'sit0\x00', &(0x7f0000000580)={'syztnl0\x00', r0, 0x29, 0x0, 0x2, 0x1, 0x1, @dev={0xfe, 0x80, '\x00', 0x31}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7, 0x41db5e1226b1a6e, 0x10001, 0x2}})
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f00000023c0)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002380)={&(0x7f0000002300)={0x7c, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r0}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x800)

06:28:38 executing program 0:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x284881, 0x0)
ioctl$RTC_RD_TIME(r0, 0x80247009, 0x0)

06:28:38 executing program 2:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip_vti0\x00', <r2=>r1, 0x0, 0x10, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x67, 0x0, 0x4, 0xb1fde26cf0cef217, 0x0, @private=0xa010100, @broadcast, {[@generic={0x7, 0x10, "98a1be21dcfff95b281d17e4850a"}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480)=0x5)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', <r3=>r1, 0x4, 0x3, 0x40, 0x7, 0x2, @loopback, @loopback, 0x8021, 0x8, 0x3f, 0x1f}})
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000600)={'syztnl0\x00', &(0x7f0000000580)={'ip6_vti0\x00', r3, 0x2f, 0x27, 0x0, 0x3, 0x3, @remote, @local, 0x1, 0x40, 0x4, 0x25b}})
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', r3, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), r4)
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
munlock(&(0x7f0000ff6000/0xa000)=nil, 0xa000)
sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x44, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x3a}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r4}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:28:38 executing program 5:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip_vti0\x00', <r2=>r1, 0x0, 0x10, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x67, 0x0, 0x4, 0xb1fde26cf0cef217, 0x0, @private=0xa010100, @broadcast, {[@generic={0x7, 0x10, "98a1be21dcfff95b281d17e4850a"}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480)=0x5)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', <r3=>r1, 0x4, 0x3, 0x40, 0x7, 0x2, @loopback, @loopback, 0x8021, 0x8, 0x3f, 0x1f}})
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000600)={'syztnl0\x00', &(0x7f0000000580)={'ip6_vti0\x00', r3, 0x2f, 0x27, 0x0, 0x3, 0x3, @remote, @local, 0x1, 0x40, 0x4, 0x25b}})
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', <r5=>r3, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r4, 0x89f9, &(0x7f0000000c80)={'sit0\x00', &(0x7f0000000c00)={'sit0\x00', r5, 0x4, 0x80, 0x8, 0xafc, 0x18, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0xe, 0x8, 0x781, 0x3}})
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r4}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:28:38 executing program 4:
ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000))
ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000040))
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080))
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=<r0=>0x0)
ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000100)=r0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x8, 0x1, 0xb65, 0x8, {{0x15, 0x4, 0x2, 0x0, 0x54, 0x66, 0x0, 0x81, 0x2f, 0x0, @private=0xa010100, @multicast2, {[@end, @cipso={0x86, 0x29, 0x1, [{0x5, 0xf, "3e703dd712ca222ae8a3af2c04"}, {0x1, 0x7, "8caeda7b53"}, {0x0, 0xd, "3450bf32edd480c19ec31d"}]}, @timestamp={0x44, 0xc, 0x15, 0x0, 0x1, [0x3, 0x6]}, @ssrr={0x89, 0x7, 0x29, [@rand_addr=0x64010100]}]}}}}})
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000200)={0x7ff, 0x6, 0x100, 0x8, 0x15, "16fc41fd0b316794"})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index=0x7, 0x3, 0x1, 0x94b, 0x14}, 0x2)
sched_yield()
openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x200040, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:28:39 executing program 1:
getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, <r0=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000080)=0xffffffffffffffff)
recvmsg(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000140)=""/231, 0xe7}, {&(0x7f0000000240)=""/233, 0xe9}, {&(0x7f0000000340)=""/164, 0xa4}, {&(0x7f0000000400)=""/197, 0xc5}], 0x4}, 0x100)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000600)={'sit0\x00', &(0x7f0000000580)={'syztnl0\x00', <r2=>r0, 0x29, 0x0, 0x2, 0x1, 0x1, @dev={0xfe, 0x80, '\x00', 0x31}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7, 0x41db5e1226b1a6e, 0x10001, 0x2}})
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000006c0)={'sit0\x00', &(0x7f0000000640)={'syztnl2\x00', <r4=>r2, 0x29, 0x7, 0x9, 0xffff2cb6, 0x0, @empty, @local, 0x7, 0x1, 0x4, 0x7fffffff}})
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r3, 0x89f6, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000700)={'sit0\x00', <r5=>r4, 0x2f, 0x6, 0x5d, 0x401, 0x2, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x700, 0x40, 0x6, 0x8}})
openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x4c80, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(r3, 0x89f4, &(0x7f0000000880)={'syztnl1\x00', &(0x7f0000000800)={'ip6tnl0\x00', 0x0, 0x4, 0x3f, 0x3f, 0x6, 0x10, @mcast1, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7800, 0x80, 0x2}})
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_drop_memb(r6, 0x107, 0x2, &(0x7f0000001f40)={r5, 0x1, 0x6, @multicast}, 0x10)

06:28:39 executing program 2:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip_vti0\x00', <r2=>r1, 0x0, 0x10, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x67, 0x0, 0x4, 0xb1fde26cf0cef217, 0x0, @private=0xa010100, @broadcast, {[@generic={0x7, 0x10, "98a1be21dcfff95b281d17e4850a"}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480)=0x5)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', <r3=>r1, 0x4, 0x3, 0x40, 0x7, 0x2, @loopback, @loopback, 0x8021, 0x8, 0x3f, 0x1f}})
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000600)={'syztnl0\x00', &(0x7f0000000580)={'ip6_vti0\x00', r3, 0x2f, 0x27, 0x0, 0x3, 0x3, @remote, @local, 0x1, 0x40, 0x4, 0x25b}})
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r4, 0x89f9, &(0x7f0000000c80)={'sit0\x00', &(0x7f0000000c00)={'sit0\x00', 0x0, 0x4, 0x80, 0x8, 0xafc, 0x18, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0xe, 0x8, 0x781, 0x3}})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), r4)
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
munlock(&(0x7f0000ff6000/0xa000)=nil, 0xa000)
sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x44, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x3a}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r4}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:28:39 executing program 5:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip_vti0\x00', <r2=>r1, 0x0, 0x10, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x67, 0x0, 0x4, 0xb1fde26cf0cef217, 0x0, @private=0xa010100, @broadcast, {[@generic={0x7, 0x10, "98a1be21dcfff95b281d17e4850a"}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480)=0x5)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', <r3=>r1, 0x4, 0x3, 0x40, 0x7, 0x2, @loopback, @loopback, 0x8021, 0x8, 0x3f, 0x1f}})
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000600)={'syztnl0\x00', &(0x7f0000000580)={'ip6_vti0\x00', r3, 0x2f, 0x27, 0x0, 0x3, 0x3, @remote, @local, 0x1, 0x40, 0x4, 0x25b}})
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', <r5=>r3, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r4, 0x89f9, &(0x7f0000000c80)={'sit0\x00', &(0x7f0000000c00)={'sit0\x00', r5, 0x4, 0x80, 0x8, 0xafc, 0x18, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0xe, 0x8, 0x781, 0x3}})
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r4}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:28:39 executing program 0:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip_vti0\x00', <r2=>r1, 0x0, 0x10, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x67, 0x0, 0x4, 0xb1fde26cf0cef217, 0x0, @private=0xa010100, @broadcast, {[@generic={0x7, 0x10, "98a1be21dcfff95b281d17e4850a"}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480)=0x5)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', <r3=>r1, 0x4, 0x3, 0x40, 0x7, 0x2, @loopback, @loopback, 0x8021, 0x8, 0x3f, 0x1f}})
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000600)={'syztnl0\x00', &(0x7f0000000580)={'ip6_vti0\x00', r3, 0x2f, 0x27, 0x0, 0x3, 0x3, @remote, @local, 0x1, 0x40, 0x4, 0x25b}})
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', r3, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), r4)
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
munlock(&(0x7f0000ff6000/0xa000)=nil, 0xa000)
sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x44, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x3a}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r4}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:28:46 executing program 4:
ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000))
ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000040))
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080))
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=<r0=>0x0)
ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000100)=r0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x8, 0x1, 0xb65, 0x8, {{0x15, 0x4, 0x2, 0x0, 0x54, 0x66, 0x0, 0x81, 0x2f, 0x0, @private=0xa010100, @multicast2, {[@end, @cipso={0x86, 0x29, 0x1, [{0x5, 0xf, "3e703dd712ca222ae8a3af2c04"}, {0x1, 0x7, "8caeda7b53"}, {0x0, 0xd, "3450bf32edd480c19ec31d"}]}, @timestamp={0x44, 0xc, 0x15, 0x0, 0x1, [0x3, 0x6]}, @ssrr={0x89, 0x7, 0x29, [@rand_addr=0x64010100]}]}}}}})
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000200)={0x7ff, 0x6, 0x100, 0x8, 0x15, "16fc41fd0b316794"})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index=0x7, 0x3, 0x1, 0x94b, 0x14}, 0x2)
sched_yield()
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:28:46 executing program 3:
connect$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x1, 0x0, 0x1, 0x80, 0x6, @remote}, 0x14)
ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'ip6_vti0\x00', <r0=>0x0, 0x4, 0x9, 0x86, 0x1, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, 0x8000, 0x10, 0x2, 0xff}})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000100)={'ip6tnl0\x00', r0, 0x4, 0x0, 0x9, 0x5605, 0x15, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40, 0x40, 0x1, 0x2}})
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f00000007c0)={'syztnl0\x00', &(0x7f0000000740)={'sit0\x00', 0x0, 0x2f, 0x1f, 0x8, 0x165, 0x0, @local, @empty, 0x10, 0x1, 0x2, 0x8}})

06:28:46 executing program 2:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip_vti0\x00', <r2=>r1, 0x0, 0x10, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x67, 0x0, 0x4, 0xb1fde26cf0cef217, 0x0, @private=0xa010100, @broadcast, {[@generic={0x7, 0x10, "98a1be21dcfff95b281d17e4850a"}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480)=0x5)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', <r3=>r1, 0x4, 0x3, 0x40, 0x7, 0x2, @loopback, @loopback, 0x8021, 0x8, 0x3f, 0x1f}})
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000600)={'syztnl0\x00', &(0x7f0000000580)={'ip6_vti0\x00', r3, 0x2f, 0x27, 0x0, 0x3, 0x3, @remote, @local, 0x1, 0x40, 0x4, 0x25b}})
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r4, 0x89f9, &(0x7f0000000c80)={'sit0\x00', &(0x7f0000000c00)={'sit0\x00', 0x0, 0x4, 0x80, 0x8, 0xafc, 0x18, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0xe, 0x8, 0x781, 0x3}})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), r4)
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
munlock(&(0x7f0000ff6000/0xa000)=nil, 0xa000)
sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x44, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x3a}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r4}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:28:46 executing program 0:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip_vti0\x00', <r2=>r1, 0x0, 0x10, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x67, 0x0, 0x4, 0xb1fde26cf0cef217, 0x0, @private=0xa010100, @broadcast, {[@generic={0x7, 0x10, "98a1be21dcfff95b281d17e4850a"}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480)=0x5)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', <r3=>r1, 0x4, 0x3, 0x40, 0x7, 0x2, @loopback, @loopback, 0x8021, 0x8, 0x3f, 0x1f}})
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000600)={'syztnl0\x00', &(0x7f0000000580)={'ip6_vti0\x00', r3, 0x2f, 0x27, 0x0, 0x3, 0x3, @remote, @local, 0x1, 0x40, 0x4, 0x25b}})
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', r3, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), r4)
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
munlock(&(0x7f0000ff6000/0xa000)=nil, 0xa000)
sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x44, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x3a}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r4}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:28:46 executing program 1:
getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, <r0=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000080)=0xffffffffffffffff)
recvmsg(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000140)=""/231, 0xe7}, {&(0x7f0000000240)=""/233, 0xe9}, {&(0x7f0000000340)=""/164, 0xa4}, {&(0x7f0000000400)=""/197, 0xc5}], 0x4}, 0x100)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000600)={'sit0\x00', &(0x7f0000000580)={'syztnl0\x00', <r2=>r0, 0x29, 0x0, 0x2, 0x1, 0x1, @dev={0xfe, 0x80, '\x00', 0x31}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7, 0x41db5e1226b1a6e, 0x10001, 0x2}})
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000006c0)={'sit0\x00', &(0x7f0000000640)={'syztnl2\x00', <r4=>r2, 0x29, 0x7, 0x9, 0xffff2cb6, 0x0, @empty, @local, 0x7, 0x1, 0x4, 0x7fffffff}})
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r3, 0x89f6, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000700)={'sit0\x00', <r5=>r4, 0x2f, 0x6, 0x5d, 0x401, 0x2, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x700, 0x40, 0x6, 0x8}})
openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x4c80, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(r3, 0x89f4, &(0x7f0000000880)={'syztnl1\x00', &(0x7f0000000800)={'ip6tnl0\x00', 0x0, 0x4, 0x3f, 0x3f, 0x6, 0x10, @mcast1, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7800, 0x80, 0x2}})
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_drop_memb(r6, 0x107, 0x2, &(0x7f0000001f40)={r5, 0x1, 0x6, @multicast}, 0x10)

06:28:46 executing program 5:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip_vti0\x00', <r2=>r1, 0x0, 0x10, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x67, 0x0, 0x4, 0xb1fde26cf0cef217, 0x0, @private=0xa010100, @broadcast, {[@generic={0x7, 0x10, "98a1be21dcfff95b281d17e4850a"}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480)=0x5)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', <r3=>r1, 0x4, 0x3, 0x40, 0x7, 0x2, @loopback, @loopback, 0x8021, 0x8, 0x3f, 0x1f}})
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000600)={'syztnl0\x00', &(0x7f0000000580)={'ip6_vti0\x00', r3, 0x2f, 0x27, 0x0, 0x3, 0x3, @remote, @local, 0x1, 0x40, 0x4, 0x25b}})
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', r3, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r4}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:28:46 executing program 6:
ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000))
ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000040))
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080))
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=<r0=>0x0)
ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000100)=r0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x8, 0x1, 0xb65, 0x8, {{0x15, 0x4, 0x2, 0x0, 0x54, 0x66, 0x0, 0x81, 0x2f, 0x0, @private=0xa010100, @multicast2, {[@end, @cipso={0x86, 0x29, 0x1, [{0x5, 0xf, "3e703dd712ca222ae8a3af2c04"}, {0x1, 0x7, "8caeda7b53"}, {0x0, 0xd, "3450bf32edd480c19ec31d"}]}, @timestamp={0x44, 0xc, 0x15, 0x0, 0x1, [0x3, 0x6]}, @ssrr={0x89, 0x7, 0x29, [@rand_addr=0x64010100]}]}}}}})
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000200)={0x7ff, 0x6, 0x100, 0x8, 0x15, "16fc41fd0b316794"})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index=0x7, 0x3, 0x1, 0x94b, 0x14}, 0x2)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x200040, 0x0)
pipe(&(0x7f0000000400))
ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000880)={0x0, 0x1, 0x1, 0xa, 0x174, &(0x7f0000000480)="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"})
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:28:46 executing program 7:
getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, <r0=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000080)=0xffffffffffffffff)
recvmsg(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000140)=""/231, 0xe7}, {&(0x7f0000000240)=""/233, 0xe9}, {&(0x7f0000000340)=""/164, 0xa4}, {&(0x7f0000000400)=""/197, 0xc5}], 0x4}, 0x100)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f00000023c0)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002380)={&(0x7f0000002300)={0x7c, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r0}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x800)

06:28:46 executing program 7:
getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, <r0=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000080)=0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f00000023c0)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002380)={&(0x7f0000002300)={0x7c, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r0}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x800)

06:28:55 executing program 2:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip_vti0\x00', <r2=>r1, 0x0, 0x10, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x67, 0x0, 0x4, 0xb1fde26cf0cef217, 0x0, @private=0xa010100, @broadcast, {[@generic={0x7, 0x10, "98a1be21dcfff95b281d17e4850a"}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480)=0x5)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', <r3=>r1, 0x4, 0x3, 0x40, 0x7, 0x2, @loopback, @loopback, 0x8021, 0x8, 0x3f, 0x1f}})
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000600)={'syztnl0\x00', &(0x7f0000000580)={'ip6_vti0\x00', r3, 0x2f, 0x27, 0x0, 0x3, 0x3, @remote, @local, 0x1, 0x40, 0x4, 0x25b}})
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r4, 0x89f9, &(0x7f0000000c80)={'sit0\x00', &(0x7f0000000c00)={'sit0\x00', 0x0, 0x4, 0x80, 0x8, 0xafc, 0x18, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0xe, 0x8, 0x781, 0x3}})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), r4)
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
munlock(&(0x7f0000ff6000/0xa000)=nil, 0xa000)
sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x44, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x3a}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r4}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:28:55 executing program 4:
ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000))
ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000040))
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080))
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=<r0=>0x0)
ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000100)=r0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x8, 0x1, 0xb65, 0x8, {{0x15, 0x4, 0x2, 0x0, 0x54, 0x66, 0x0, 0x81, 0x2f, 0x0, @private=0xa010100, @multicast2, {[@end, @cipso={0x86, 0x29, 0x1, [{0x5, 0xf, "3e703dd712ca222ae8a3af2c04"}, {0x1, 0x7, "8caeda7b53"}, {0x0, 0xd, "3450bf32edd480c19ec31d"}]}, @timestamp={0x44, 0xc, 0x15, 0x0, 0x1, [0x3, 0x6]}, @ssrr={0x89, 0x7, 0x29, [@rand_addr=0x64010100]}]}}}}})
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000200)={0x7ff, 0x6, 0x100, 0x8, 0x15, "16fc41fd0b316794"})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index=0x7, 0x3, 0x1, 0x94b, 0x14}, 0x2)
sched_yield()
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:28:55 executing program 3:
connect$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x1, 0x0, 0x1, 0x80, 0x6, @remote}, 0x14)
ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'ip6_vti0\x00', <r0=>0x0, 0x4, 0x9, 0x86, 0x1, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, 0x8000, 0x10, 0x2, 0xff}})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000100)={'ip6tnl0\x00', r0, 0x4, 0x0, 0x9, 0x5605, 0x15, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40, 0x40, 0x1, 0x2}})
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f00000007c0)={'syztnl0\x00', &(0x7f0000000740)={'sit0\x00', 0x0, 0x2f, 0x1f, 0x8, 0x165, 0x0, @local, @empty, 0x10, 0x1, 0x2, 0x8}})

06:28:55 executing program 0:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip_vti0\x00', <r2=>r1, 0x0, 0x10, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x67, 0x0, 0x4, 0xb1fde26cf0cef217, 0x0, @private=0xa010100, @broadcast, {[@generic={0x7, 0x10, "98a1be21dcfff95b281d17e4850a"}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480)=0x5)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', <r3=>r1, 0x4, 0x3, 0x40, 0x7, 0x2, @loopback, @loopback, 0x8021, 0x8, 0x3f, 0x1f}})
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000600)={'syztnl0\x00', &(0x7f0000000580)={'ip6_vti0\x00', r3, 0x2f, 0x27, 0x0, 0x3, 0x3, @remote, @local, 0x1, 0x40, 0x4, 0x25b}})
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', r3, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), r4)
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
munlock(&(0x7f0000ff6000/0xa000)=nil, 0xa000)
sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x44, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x3a}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r4}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:28:55 executing program 5:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip_vti0\x00', <r2=>r1, 0x0, 0x10, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x67, 0x0, 0x4, 0xb1fde26cf0cef217, 0x0, @private=0xa010100, @broadcast, {[@generic={0x7, 0x10, "98a1be21dcfff95b281d17e4850a"}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480)=0x5)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', <r3=>r1, 0x4, 0x3, 0x40, 0x7, 0x2, @loopback, @loopback, 0x8021, 0x8, 0x3f, 0x1f}})
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000600)={'syztnl0\x00', &(0x7f0000000580)={'ip6_vti0\x00', r3, 0x2f, 0x27, 0x0, 0x3, 0x3, @remote, @local, 0x1, 0x40, 0x4, 0x25b}})
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r4}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:28:55 executing program 1:
getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, <r0=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000080)=0xffffffffffffffff)
recvmsg(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000140)=""/231, 0xe7}, {&(0x7f0000000240)=""/233, 0xe9}, {&(0x7f0000000340)=""/164, 0xa4}, {&(0x7f0000000400)=""/197, 0xc5}], 0x4}, 0x100)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000600)={'sit0\x00', &(0x7f0000000580)={'syztnl0\x00', <r2=>r0, 0x29, 0x0, 0x2, 0x1, 0x1, @dev={0xfe, 0x80, '\x00', 0x31}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7, 0x41db5e1226b1a6e, 0x10001, 0x2}})
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000006c0)={'sit0\x00', &(0x7f0000000640)={'syztnl2\x00', <r4=>r2, 0x29, 0x7, 0x9, 0xffff2cb6, 0x0, @empty, @local, 0x7, 0x1, 0x4, 0x7fffffff}})
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r3, 0x89f6, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000700)={'sit0\x00', <r5=>r4, 0x2f, 0x6, 0x5d, 0x401, 0x2, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x700, 0x40, 0x6, 0x8}})
openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x4c80, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_drop_memb(r6, 0x107, 0x2, &(0x7f0000001f40)={r5, 0x1, 0x6, @multicast}, 0x10)

06:28:55 executing program 6:
ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000))
ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000040))
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080))
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=<r0=>0x0)
ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000100)=r0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x8, 0x1, 0xb65, 0x8, {{0x15, 0x4, 0x2, 0x0, 0x54, 0x66, 0x0, 0x81, 0x2f, 0x0, @private=0xa010100, @multicast2, {[@end, @cipso={0x86, 0x29, 0x1, [{0x5, 0xf, "3e703dd712ca222ae8a3af2c04"}, {0x1, 0x7, "8caeda7b53"}, {0x0, 0xd, "3450bf32edd480c19ec31d"}]}, @timestamp={0x44, 0xc, 0x15, 0x0, 0x1, [0x3, 0x6]}, @ssrr={0x89, 0x7, 0x29, [@rand_addr=0x64010100]}]}}}}})
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000200)={0x7ff, 0x6, 0x100, 0x8, 0x15, "16fc41fd0b316794"})
sched_yield()
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x200040, 0x0)
pipe(&(0x7f0000000400))
ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000880)={0x0, 0x1, 0x1, 0xa, 0x174, &(0x7f0000000480)="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"})
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:28:55 executing program 7:
getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, <r0=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f00000023c0)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002380)={&(0x7f0000002300)={0x7c, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r0}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x800)

06:29:03 executing program 4:
ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000))
ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000040))
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080))
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=<r0=>0x0)
ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000100)=r0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x8, 0x1, 0xb65, 0x8, {{0x15, 0x4, 0x2, 0x0, 0x54, 0x66, 0x0, 0x81, 0x2f, 0x0, @private=0xa010100, @multicast2, {[@end, @cipso={0x86, 0x29, 0x1, [{0x5, 0xf, "3e703dd712ca222ae8a3af2c04"}, {0x1, 0x7, "8caeda7b53"}, {0x0, 0xd, "3450bf32edd480c19ec31d"}]}, @timestamp={0x44, 0xc, 0x15, 0x0, 0x1, [0x3, 0x6]}, @ssrr={0x89, 0x7, 0x29, [@rand_addr=0x64010100]}]}}}}})
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000200)={0x7ff, 0x6, 0x100, 0x8, 0x15, "16fc41fd0b316794"})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index=0x7, 0x3, 0x1, 0x94b, 0x14}, 0x2)
sched_yield()
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:29:03 executing program 7:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f00000023c0)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002380)={&(0x7f0000002300)={0x7c, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x800)

06:29:03 executing program 2:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip_vti0\x00', <r2=>r1, 0x0, 0x10, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x67, 0x0, 0x4, 0xb1fde26cf0cef217, 0x0, @private=0xa010100, @broadcast, {[@generic={0x7, 0x10, "98a1be21dcfff95b281d17e4850a"}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480)=0x5)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', <r3=>r1, 0x4, 0x3, 0x40, 0x7, 0x2, @loopback, @loopback, 0x8021, 0x8, 0x3f, 0x1f}})
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000600)={'syztnl0\x00', &(0x7f0000000580)={'ip6_vti0\x00', r3, 0x2f, 0x27, 0x0, 0x3, 0x3, @remote, @local, 0x1, 0x40, 0x4, 0x25b}})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', <r4=>r3, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000c80)={'sit0\x00', &(0x7f0000000c00)={'sit0\x00', r4, 0x4, 0x80, 0x8, 0xafc, 0x18, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0xe, 0x8, 0x781, 0x3}})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff)
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
munlock(&(0x7f0000ff6000/0xa000)=nil, 0xa000)
sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x44, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x3a}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:29:03 executing program 0:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip_vti0\x00', <r2=>r1, 0x0, 0x10, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x67, 0x0, 0x4, 0xb1fde26cf0cef217, 0x0, @private=0xa010100, @broadcast, {[@generic={0x7, 0x10, "98a1be21dcfff95b281d17e4850a"}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480)=0x5)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', <r3=>r1, 0x4, 0x3, 0x40, 0x7, 0x2, @loopback, @loopback, 0x8021, 0x8, 0x3f, 0x1f}})
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000600)={'syztnl0\x00', &(0x7f0000000580)={'ip6_vti0\x00', r3, 0x2f, 0x27, 0x0, 0x3, 0x3, @remote, @local, 0x1, 0x40, 0x4, 0x25b}})
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', r3, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), r4)
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
munlock(&(0x7f0000ff6000/0xa000)=nil, 0xa000)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r4}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:29:03 executing program 1:
getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, <r0=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000080)=0xffffffffffffffff)
recvmsg(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000140)=""/231, 0xe7}, {&(0x7f0000000240)=""/233, 0xe9}, {&(0x7f0000000340)=""/164, 0xa4}, {&(0x7f0000000400)=""/197, 0xc5}], 0x4}, 0x100)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000600)={'sit0\x00', &(0x7f0000000580)={'syztnl0\x00', <r2=>r0, 0x29, 0x0, 0x2, 0x1, 0x1, @dev={0xfe, 0x80, '\x00', 0x31}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7, 0x41db5e1226b1a6e, 0x10001, 0x2}})
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000006c0)={'sit0\x00', &(0x7f0000000640)={'syztnl2\x00', <r4=>r2, 0x29, 0x7, 0x9, 0xffff2cb6, 0x0, @empty, @local, 0x7, 0x1, 0x4, 0x7fffffff}})
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r3, 0x89f6, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000700)={'sit0\x00', <r5=>r4, 0x2f, 0x6, 0x5d, 0x401, 0x2, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x700, 0x40, 0x6, 0x8}})
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_drop_memb(r6, 0x107, 0x2, &(0x7f0000001f40)={r5, 0x1, 0x6, @multicast}, 0x10)

06:29:03 executing program 6:
ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000))
ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000040))
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080))
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=<r0=>0x0)
ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000100)=r0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x8, 0x1, 0xb65, 0x8, {{0x15, 0x4, 0x2, 0x0, 0x54, 0x66, 0x0, 0x81, 0x2f, 0x0, @private=0xa010100, @multicast2, {[@end, @cipso={0x86, 0x29, 0x1, [{0x5, 0xf, "3e703dd712ca222ae8a3af2c04"}, {0x1, 0x7, "8caeda7b53"}, {0x0, 0xd, "3450bf32edd480c19ec31d"}]}, @timestamp={0x44, 0xc, 0x15, 0x0, 0x1, [0x3, 0x6]}, @ssrr={0x89, 0x7, 0x29, [@rand_addr=0x64010100]}]}}}}})
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000200)={0x7ff, 0x6, 0x100, 0x8, 0x15, "16fc41fd0b316794"})
sched_yield()
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x200040, 0x0)
pipe(&(0x7f0000000400))
ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000880)={0x0, 0x1, 0x1, 0xa, 0x174, &(0x7f0000000480)="5edb89eaad007f1a706b88cb3a9480a5562c7e564ce1a22c8df8f726fe37b4d862d84daee9ed2138f78aa73236b0f8aa29f6887a95c11b5632235b1ca585ef6e2b7d79ce6c276e0c0189f2f6db5247a5ab874e166f440f821e03103a32a9272c814236d289278b79c32ebf6ba6c5233b1f7a4d2c44a2a71cdb392a600e64a4af7a10fa0a8bea9cc5b90e126f49978fef66f5ade48a06d597417f758954e92a0a4c12a021983aaf60aa29f6cab1b2823a791039220ac2a52293635f2edb83dc426f276233492c81c2ed499c54fbb8111cfc01333e31d1e6284939f8b46349b320a0f165c6b1c7112dc9f76df0ed194c098450de5466e14e767d16039e649dfed15123f0380ac5b45a6af5920aac7b058e5bfb4e3eadc9d8465048073c050bb96ee01990875b09cf164a282a1f3e8b3ccf3f76077eace47e8d2f1e0a2a5fc00477ef309fd57c0d845dd2d86350e999349ff41d6a82704dabf9081eea0a228feb9308a03b69844b13d48b7082865047eefa7a70bfea6488322c7739c6446fbe0afb052a520dc3bd0c78b19c73e16ce0ef6ea5b883876cf677537b667fbcb430fd5f773ad2b86f4db609c89166cfbb4a090a35769055a68c45bbc8c58c8e9ba527a211a12730b3295be141c2092f17b2d8df1b02c3b3e06955d667737d8888eceae78b0888e09713470bdf19ddcd4ad497d41b41e6b4df45662e6801b4216c1965e3df45e645f9253fe67bd0f65d37a052bab9769a2a32c0da67496cddd7752b34f4a10cface1f531869f24d11733334baf3fa8b8450261d61f41218716e36c4edb502ba59ce7f4ac2abc53ca940fc92dbadeff2ba66debdf785776147c5709f31927a7e081883ef681b6591e9259fa33541c087f7884b2778a0cc839781be052050d3c71ea8d886c129b61e6bfcf4686934f18da4e7cede143e9c0db819675b4e1aeb1f87efafdb0279dd6d5d5b0efcd6a8e7c55141fc7ecfd50dd8cb9879e3768b4d6c481a7c310609e987303254bee0461c5fcd6cd35b46361b6b221894bc6153ef150d4f9e7d2f0fe479e3c71f17dc51dc39ed12e66dab898a54a232b675dfe4e7bb637fef8ea611585fcb66d3ee54dff31967f0089e47d249daffd1e014e2c2e11ca9e357b483c8b0e6c1d890874830f5d54b2b9f057b62a3ea0175bce6545ae55f523618384a2beb7f095f8882ce7105e10fc0b0cdc040c1c8da0eddfa642cd0e02ac42c9218617a0a6cf440752d8c8ec9bcb6e25c35b8636dcdee315811155b500e52911b3dc3c9f7a2d50cfbd560c6db46ca8d5614f047c048cbbdf9df5865916321f5533ce617005da2b39bfa433856a2f73d5ad40b97c7787feaf990de49222fd58d0f535b458f5f1ce067ddf0fb0d56ada3ae5e7d43afcc9ff15eb9e5706f6c902adfd4f8d38f4d8ef8832a070c739d7a4515d0aa75643597f71d7753"})
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:29:03 executing program 3:
connect$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x1, 0x0, 0x1, 0x80, 0x6, @remote}, 0x14)
ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x4, 0x9, 0x86, 0x1, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, 0x8000, 0x10, 0x2, 0xff}})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f00000007c0)={'syztnl0\x00', &(0x7f0000000740)={'sit0\x00', 0x0, 0x2f, 0x1f, 0x8, 0x165, 0x0, @local, @empty, 0x10, 0x1, 0x2, 0x8}})

06:29:03 executing program 5:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip_vti0\x00', <r2=>r1, 0x0, 0x10, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x67, 0x0, 0x4, 0xb1fde26cf0cef217, 0x0, @private=0xa010100, @broadcast, {[@generic={0x7, 0x10, "98a1be21dcfff95b281d17e4850a"}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480)=0x5)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', <r3=>r1, 0x4, 0x3, 0x40, 0x7, 0x2, @loopback, @loopback, 0x8021, 0x8, 0x3f, 0x1f}})
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000600)={'syztnl0\x00', &(0x7f0000000580)={'ip6_vti0\x00', r3, 0x2f, 0x27, 0x0, 0x3, 0x3, @remote, @local, 0x1, 0x40, 0x4, 0x25b}})
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:29:03 executing program 7:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x800)

06:29:03 executing program 5:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip_vti0\x00', <r2=>r1, 0x0, 0x10, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x67, 0x0, 0x4, 0xb1fde26cf0cef217, 0x0, @private=0xa010100, @broadcast, {[@generic={0x7, 0x10, "98a1be21dcfff95b281d17e4850a"}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480)=0x5)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', <r3=>r1, 0x4, 0x3, 0x40, 0x7, 0x2, @loopback, @loopback, 0x8021, 0x8, 0x3f, 0x1f}})
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000600)={'syztnl0\x00', &(0x7f0000000580)={'ip6_vti0\x00', r3, 0x2f, 0x27, 0x0, 0x3, 0x3, @remote, @local, 0x1, 0x40, 0x4, 0x25b}})
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:29:03 executing program 7:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)

06:29:03 executing program 0:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip_vti0\x00', <r2=>r1, 0x0, 0x10, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x67, 0x0, 0x4, 0xb1fde26cf0cef217, 0x0, @private=0xa010100, @broadcast, {[@generic={0x7, 0x10, "98a1be21dcfff95b281d17e4850a"}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480)=0x5)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', <r3=>r1, 0x4, 0x3, 0x40, 0x7, 0x2, @loopback, @loopback, 0x8021, 0x8, 0x3f, 0x1f}})
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000600)={'syztnl0\x00', &(0x7f0000000580)={'ip6_vti0\x00', r3, 0x2f, 0x27, 0x0, 0x3, 0x3, @remote, @local, 0x1, 0x40, 0x4, 0x25b}})
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', r3, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), r4)
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r4}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:29:03 executing program 4:
ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000))
ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000040))
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080))
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=<r0=>0x0)
ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000100)=r0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x8, 0x1, 0xb65, 0x8, {{0x15, 0x4, 0x2, 0x0, 0x54, 0x66, 0x0, 0x81, 0x2f, 0x0, @private=0xa010100, @multicast2, {[@end, @cipso={0x86, 0x29, 0x1, [{0x5, 0xf, "3e703dd712ca222ae8a3af2c04"}, {0x1, 0x7, "8caeda7b53"}, {0x0, 0xd, "3450bf32edd480c19ec31d"}]}, @timestamp={0x44, 0xc, 0x15, 0x0, 0x1, [0x3, 0x6]}, @ssrr={0x89, 0x7, 0x29, [@rand_addr=0x64010100]}]}}}}})
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000200)={0x7ff, 0x6, 0x100, 0x8, 0x15, "16fc41fd0b316794"})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index=0x7, 0x3, 0x1, 0x94b, 0x14}, 0x2)
openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x200040, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:29:03 executing program 6:
ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000))
ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000040))
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080))
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=<r0=>0x0)
ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000100)=r0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x8, 0x1, 0xb65, 0x8, {{0x15, 0x4, 0x2, 0x0, 0x54, 0x66, 0x0, 0x81, 0x2f, 0x0, @private=0xa010100, @multicast2, {[@end, @cipso={0x86, 0x29, 0x1, [{0x5, 0xf, "3e703dd712ca222ae8a3af2c04"}, {0x1, 0x7, "8caeda7b53"}, {0x0, 0xd, "3450bf32edd480c19ec31d"}]}, @timestamp={0x44, 0xc, 0x15, 0x0, 0x1, [0x3, 0x6]}, @ssrr={0x89, 0x7, 0x29, [@rand_addr=0x64010100]}]}}}}})
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000200)={0x7ff, 0x6, 0x100, 0x8, 0x15, "16fc41fd0b316794"})
sched_yield()
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x200040, 0x0)
pipe(&(0x7f0000000400))
ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000880)={0x0, 0x1, 0x1, 0xa, 0x174, &(0x7f0000000480)="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"})
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:29:03 executing program 7:
ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000))
ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000040))
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080))
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=<r0=>0x0)
ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000100)=r0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x8, 0x1, 0xb65, 0x8, {{0x15, 0x4, 0x2, 0x0, 0x54, 0x66, 0x0, 0x81, 0x2f, 0x0, @private=0xa010100, @multicast2, {[@end, @cipso={0x86, 0x29, 0x1, [{0x5, 0xf, "3e703dd712ca222ae8a3af2c04"}, {0x1, 0x7, "8caeda7b53"}, {0x0, 0xd, "3450bf32edd480c19ec31d"}]}, @timestamp={0x44, 0xc, 0x15, 0x0, 0x1, [0x3, 0x6]}, @ssrr={0x89, 0x7, 0x29, [@rand_addr=0x64010100]}]}}}}})
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000200)={0x7ff, 0x6, 0x100, 0x8, 0x15, "16fc41fd0b316794"})
sched_yield()
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x200040, 0x0)
pipe(&(0x7f0000000400))
ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000880)={0x0, 0x1, 0x1, 0xa, 0x174, &(0x7f0000000480)="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"})
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:29:03 executing program 3:
connect$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x1, 0x0, 0x1, 0x80, 0x6, @remote}, 0x14)
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f00000007c0)={'syztnl0\x00', &(0x7f0000000740)={'sit0\x00', 0x0, 0x2f, 0x1f, 0x8, 0x165, 0x0, @local, @empty, 0x10, 0x1, 0x2, 0x8}})

06:29:03 executing program 2:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip_vti0\x00', <r2=>r1, 0x0, 0x10, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x67, 0x0, 0x4, 0xb1fde26cf0cef217, 0x0, @private=0xa010100, @broadcast, {[@generic={0x7, 0x10, "98a1be21dcfff95b281d17e4850a"}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480)=0x5)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', <r3=>r1, 0x4, 0x3, 0x40, 0x7, 0x2, @loopback, @loopback, 0x8021, 0x8, 0x3f, 0x1f}})
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000600)={'syztnl0\x00', &(0x7f0000000580)={'ip6_vti0\x00', r3, 0x2f, 0x27, 0x0, 0x3, 0x3, @remote, @local, 0x1, 0x40, 0x4, 0x25b}})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', <r4=>r3, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000c80)={'sit0\x00', &(0x7f0000000c00)={'sit0\x00', r4, 0x4, 0x80, 0x8, 0xafc, 0x18, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0xe, 0x8, 0x781, 0x3}})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff)
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
munlock(&(0x7f0000ff6000/0xa000)=nil, 0xa000)
sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x44, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x3a}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:29:03 executing program 0:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip_vti0\x00', <r2=>r1, 0x0, 0x10, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x67, 0x0, 0x4, 0xb1fde26cf0cef217, 0x0, @private=0xa010100, @broadcast, {[@generic={0x7, 0x10, "98a1be21dcfff95b281d17e4850a"}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480)=0x5)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', <r3=>r1, 0x4, 0x3, 0x40, 0x7, 0x2, @loopback, @loopback, 0x8021, 0x8, 0x3f, 0x1f}})
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000600)={'syztnl0\x00', &(0x7f0000000580)={'ip6_vti0\x00', r3, 0x2f, 0x27, 0x0, 0x3, 0x3, @remote, @local, 0x1, 0x40, 0x4, 0x25b}})
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', r3, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), r4)
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r4}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:29:03 executing program 7:
ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000))
ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000040))
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080))
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=<r0=>0x0)
ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000100)=r0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x8, 0x1, 0xb65, 0x8, {{0x15, 0x4, 0x2, 0x0, 0x54, 0x66, 0x0, 0x81, 0x2f, 0x0, @private=0xa010100, @multicast2, {[@end, @cipso={0x86, 0x29, 0x1, [{0x5, 0xf, "3e703dd712ca222ae8a3af2c04"}, {0x1, 0x7, "8caeda7b53"}, {0x0, 0xd, "3450bf32edd480c19ec31d"}]}, @timestamp={0x44, 0xc, 0x15, 0x0, 0x1, [0x3, 0x6]}, @ssrr={0x89, 0x7, 0x29, [@rand_addr=0x64010100]}]}}}}})
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000200)={0x7ff, 0x6, 0x100, 0x8, 0x15, "16fc41fd0b316794"})
sched_yield()
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x200040, 0x0)
pipe(&(0x7f0000000400))
ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000880)={0x0, 0x1, 0x1, 0xa, 0x174, &(0x7f0000000480)="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"})
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:29:03 executing program 1:
getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, <r0=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000080)=0xffffffffffffffff)
recvmsg(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000140)=""/231, 0xe7}, {&(0x7f0000000240)=""/233, 0xe9}, {&(0x7f0000000340)=""/164, 0xa4}, {&(0x7f0000000400)=""/197, 0xc5}], 0x4}, 0x100)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000600)={'sit0\x00', &(0x7f0000000580)={'syztnl0\x00', <r2=>r0, 0x29, 0x0, 0x2, 0x1, 0x1, @dev={0xfe, 0x80, '\x00', 0x31}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7, 0x41db5e1226b1a6e, 0x10001, 0x2}})
socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000006c0)={'sit0\x00', &(0x7f0000000640)={'syztnl2\x00', r2, 0x29, 0x7, 0x9, 0xffff2cb6, 0x0, @empty, @local, 0x7, 0x1, 0x4, 0x7fffffff}})
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f0000001f40)={0x0, 0x1, 0x6, @multicast}, 0x10)

06:29:03 executing program 5:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip_vti0\x00', <r2=>r1, 0x0, 0x10, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x67, 0x0, 0x4, 0xb1fde26cf0cef217, 0x0, @private=0xa010100, @broadcast, {[@generic={0x7, 0x10, "98a1be21dcfff95b281d17e4850a"}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480)=0x5)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', r1, 0x4, 0x3, 0x40, 0x7, 0x2, @loopback, @loopback, 0x8021, 0x8, 0x3f, 0x1f}})
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:29:03 executing program 4:
ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000))
ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000040))
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080))
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=<r0=>0x0)
ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000100)=r0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x8, 0x1, 0xb65, 0x8, {{0x15, 0x4, 0x2, 0x0, 0x54, 0x66, 0x0, 0x81, 0x2f, 0x0, @private=0xa010100, @multicast2, {[@end, @cipso={0x86, 0x29, 0x1, [{0x5, 0xf, "3e703dd712ca222ae8a3af2c04"}, {0x1, 0x7, "8caeda7b53"}, {0x0, 0xd, "3450bf32edd480c19ec31d"}]}, @timestamp={0x44, 0xc, 0x15, 0x0, 0x1, [0x3, 0x6]}, @ssrr={0x89, 0x7, 0x29, [@rand_addr=0x64010100]}]}}}}})
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000200)={0x7ff, 0x6, 0x100, 0x8, 0x15, "16fc41fd0b316794"})
openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x200040, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:29:04 executing program 1:
getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, <r0=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000080)=0xffffffffffffffff)
recvmsg(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000140)=""/231, 0xe7}, {&(0x7f0000000240)=""/233, 0xe9}, {&(0x7f0000000340)=""/164, 0xa4}, {&(0x7f0000000400)=""/197, 0xc5}], 0x4}, 0x100)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000600)={'sit0\x00', &(0x7f0000000580)={'syztnl0\x00', r0, 0x29, 0x0, 0x2, 0x1, 0x1, @dev={0xfe, 0x80, '\x00', 0x31}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7, 0x41db5e1226b1a6e, 0x10001, 0x2}})
socket$inet6_udplite(0xa, 0x2, 0x88)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000001f40)={0x0, 0x1, 0x6, @multicast}, 0x10)

06:29:04 executing program 6:
ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000))
ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000040))
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080))
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=<r0=>0x0)
ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000100)=r0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x8, 0x1, 0xb65, 0x8, {{0x15, 0x4, 0x2, 0x0, 0x54, 0x66, 0x0, 0x81, 0x2f, 0x0, @private=0xa010100, @multicast2, {[@end, @cipso={0x86, 0x29, 0x1, [{0x5, 0xf, "3e703dd712ca222ae8a3af2c04"}, {0x1, 0x7, "8caeda7b53"}, {0x0, 0xd, "3450bf32edd480c19ec31d"}]}, @timestamp={0x44, 0xc, 0x15, 0x0, 0x1, [0x3, 0x6]}, @ssrr={0x89, 0x7, 0x29, [@rand_addr=0x64010100]}]}}}}})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index=0x7, 0x3, 0x1, 0x94b, 0x14}, 0x2)
sched_yield()
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x200040, 0x0)
pipe(&(0x7f0000000400))
ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000880)={0x0, 0x1, 0x1, 0xa, 0x174, &(0x7f0000000480)="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"})
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:29:11 executing program 3:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f00000007c0)={'syztnl0\x00', &(0x7f0000000740)={'sit0\x00', 0x0, 0x2f, 0x1f, 0x8, 0x165, 0x0, @local, @empty, 0x10, 0x1, 0x2, 0x8}})

06:29:11 executing program 6:
ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000))
ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000040))
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080))
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=<r0=>0x0)
ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000100)=r0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x8, 0x1, 0xb65, 0x8, {{0x15, 0x4, 0x2, 0x0, 0x54, 0x66, 0x0, 0x81, 0x2f, 0x0, @private=0xa010100, @multicast2, {[@end, @cipso={0x86, 0x29, 0x1, [{0x5, 0xf, "3e703dd712ca222ae8a3af2c04"}, {0x1, 0x7, "8caeda7b53"}, {0x0, 0xd, "3450bf32edd480c19ec31d"}]}, @timestamp={0x44, 0xc, 0x15, 0x0, 0x1, [0x3, 0x6]}, @ssrr={0x89, 0x7, 0x29, [@rand_addr=0x64010100]}]}}}}})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index=0x7, 0x3, 0x1, 0x94b, 0x14}, 0x2)
sched_yield()
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x200040, 0x0)
pipe(&(0x7f0000000400))
ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000880)={0x0, 0x1, 0x1, 0xa, 0x174, &(0x7f0000000480)="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"})
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:29:11 executing program 5:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip_vti0\x00', <r2=>r1, 0x0, 0x10, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x67, 0x0, 0x4, 0xb1fde26cf0cef217, 0x0, @private=0xa010100, @broadcast, {[@generic={0x7, 0x10, "98a1be21dcfff95b281d17e4850a"}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480)=0x5)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:29:11 executing program 4:
ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000))
ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000040))
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080))
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=<r0=>0x0)
ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000100)=r0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x8, 0x1, 0xb65, 0x8, {{0x15, 0x4, 0x2, 0x0, 0x54, 0x66, 0x0, 0x81, 0x2f, 0x0, @private=0xa010100, @multicast2, {[@end, @cipso={0x86, 0x29, 0x1, [{0x5, 0xf, "3e703dd712ca222ae8a3af2c04"}, {0x1, 0x7, "8caeda7b53"}, {0x0, 0xd, "3450bf32edd480c19ec31d"}]}, @timestamp={0x44, 0xc, 0x15, 0x0, 0x1, [0x3, 0x6]}, @ssrr={0x89, 0x7, 0x29, [@rand_addr=0x64010100]}]}}}}})
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000200)={0x7ff, 0x6, 0x100, 0x8, 0x15, "16fc41fd0b316794"})
openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x200040, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:29:11 executing program 7:
ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000))
ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000040))
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080))
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=<r0=>0x0)
ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000100)=r0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x8, 0x1, 0xb65, 0x8, {{0x15, 0x4, 0x2, 0x0, 0x54, 0x66, 0x0, 0x81, 0x2f, 0x0, @private=0xa010100, @multicast2, {[@end, @cipso={0x86, 0x29, 0x1, [{0x5, 0xf, "3e703dd712ca222ae8a3af2c04"}, {0x1, 0x7, "8caeda7b53"}, {0x0, 0xd, "3450bf32edd480c19ec31d"}]}, @timestamp={0x44, 0xc, 0x15, 0x0, 0x1, [0x3, 0x6]}, @ssrr={0x89, 0x7, 0x29, [@rand_addr=0x64010100]}]}}}}})
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000200)={0x7ff, 0x6, 0x100, 0x8, 0x15, "16fc41fd0b316794"})
sched_yield()
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x200040, 0x0)
pipe(&(0x7f0000000400))
ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000880)={0x0, 0x1, 0x1, 0xa, 0x174, &(0x7f0000000480)="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"})
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:29:11 executing program 1:
getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, <r0=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000080)=0xffffffffffffffff)
recvmsg(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000140)=""/231, 0xe7}, {&(0x7f0000000240)=""/233, 0xe9}, {&(0x7f0000000340)=""/164, 0xa4}, {&(0x7f0000000400)=""/197, 0xc5}], 0x4}, 0x100)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000600)={'sit0\x00', &(0x7f0000000580)={'syztnl0\x00', r0, 0x29, 0x0, 0x2, 0x1, 0x1, @dev={0xfe, 0x80, '\x00', 0x31}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7, 0x41db5e1226b1a6e, 0x10001, 0x2}})
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000001f40)={0x0, 0x1, 0x6, @multicast}, 0x10)

06:29:11 executing program 2:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip_vti0\x00', <r2=>r1, 0x0, 0x10, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x67, 0x0, 0x4, 0xb1fde26cf0cef217, 0x0, @private=0xa010100, @broadcast, {[@generic={0x7, 0x10, "98a1be21dcfff95b281d17e4850a"}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480)=0x5)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', <r3=>r1, 0x4, 0x3, 0x40, 0x7, 0x2, @loopback, @loopback, 0x8021, 0x8, 0x3f, 0x1f}})
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000600)={'syztnl0\x00', &(0x7f0000000580)={'ip6_vti0\x00', r3, 0x2f, 0x27, 0x0, 0x3, 0x3, @remote, @local, 0x1, 0x40, 0x4, 0x25b}})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', <r4=>r3, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000c80)={'sit0\x00', &(0x7f0000000c00)={'sit0\x00', r4, 0x4, 0x80, 0x8, 0xafc, 0x18, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0xe, 0x8, 0x781, 0x3}})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff)
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
munlock(&(0x7f0000ff6000/0xa000)=nil, 0xa000)
sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x44, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x3a}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:29:11 executing program 0:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip_vti0\x00', <r2=>r1, 0x0, 0x10, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x67, 0x0, 0x4, 0xb1fde26cf0cef217, 0x0, @private=0xa010100, @broadcast, {[@generic={0x7, 0x10, "98a1be21dcfff95b281d17e4850a"}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480)=0x5)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', <r3=>r1, 0x4, 0x3, 0x40, 0x7, 0x2, @loopback, @loopback, 0x8021, 0x8, 0x3f, 0x1f}})
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000600)={'syztnl0\x00', &(0x7f0000000580)={'ip6_vti0\x00', r3, 0x2f, 0x27, 0x0, 0x3, 0x3, @remote, @local, 0x1, 0x40, 0x4, 0x25b}})
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', r3, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), r4)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r4}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:29:19 executing program 1:
getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000080)=0xffffffffffffffff)
recvmsg(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000140)=""/231, 0xe7}, {&(0x7f0000000240)=""/233, 0xe9}, {&(0x7f0000000340)=""/164, 0xa4}, {&(0x7f0000000400)=""/197, 0xc5}], 0x4}, 0x100)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000001f40)={0x0, 0x1, 0x6, @multicast}, 0x10)

06:29:19 executing program 7:
ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000))
ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000040))
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080))
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=<r0=>0x0)
ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000100)=r0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x8, 0x1, 0xb65, 0x8, {{0x15, 0x4, 0x2, 0x0, 0x54, 0x66, 0x0, 0x81, 0x2f, 0x0, @private=0xa010100, @multicast2, {[@end, @cipso={0x86, 0x29, 0x1, [{0x5, 0xf, "3e703dd712ca222ae8a3af2c04"}, {0x1, 0x7, "8caeda7b53"}, {0x0, 0xd, "3450bf32edd480c19ec31d"}]}, @timestamp={0x44, 0xc, 0x15, 0x0, 0x1, [0x3, 0x6]}, @ssrr={0x89, 0x7, 0x29, [@rand_addr=0x64010100]}]}}}}})
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000200)={0x7ff, 0x6, 0x100, 0x8, 0x15, "16fc41fd0b316794"})
sched_yield()
openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x200040, 0x0)
pipe(&(0x7f0000000400))
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:29:19 executing program 0:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip_vti0\x00', <r2=>r1, 0x0, 0x10, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x67, 0x0, 0x4, 0xb1fde26cf0cef217, 0x0, @private=0xa010100, @broadcast, {[@generic={0x7, 0x10, "98a1be21dcfff95b281d17e4850a"}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480)=0x5)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', <r3=>r1, 0x4, 0x3, 0x40, 0x7, 0x2, @loopback, @loopback, 0x8021, 0x8, 0x3f, 0x1f}})
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000600)={'syztnl0\x00', &(0x7f0000000580)={'ip6_vti0\x00', r3, 0x2f, 0x27, 0x0, 0x3, 0x3, @remote, @local, 0x1, 0x40, 0x4, 0x25b}})
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', r3, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), r4)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r4}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:29:19 executing program 3:
socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f00000007c0)={'syztnl0\x00', &(0x7f0000000740)={'sit0\x00', 0x0, 0x2f, 0x1f, 0x8, 0x165, 0x0, @local, @empty, 0x10, 0x1, 0x2, 0x8}})

06:29:19 executing program 6:
ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000))
ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000040))
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080))
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=<r0=>0x0)
ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000100)=r0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x8, 0x1, 0xb65, 0x8, {{0x15, 0x4, 0x2, 0x0, 0x54, 0x66, 0x0, 0x81, 0x2f, 0x0, @private=0xa010100, @multicast2, {[@end, @cipso={0x86, 0x29, 0x1, [{0x5, 0xf, "3e703dd712ca222ae8a3af2c04"}, {0x1, 0x7, "8caeda7b53"}, {0x0, 0xd, "3450bf32edd480c19ec31d"}]}, @timestamp={0x44, 0xc, 0x15, 0x0, 0x1, [0x3, 0x6]}, @ssrr={0x89, 0x7, 0x29, [@rand_addr=0x64010100]}]}}}}})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index=0x7, 0x3, 0x1, 0x94b, 0x14}, 0x2)
sched_yield()
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x200040, 0x0)
pipe(&(0x7f0000000400))
ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000880)={0x0, 0x1, 0x1, 0xa, 0x174, &(0x7f0000000480)="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"})
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:29:19 executing program 2:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip_vti0\x00', <r2=>r1, 0x0, 0x10, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x67, 0x0, 0x4, 0xb1fde26cf0cef217, 0x0, @private=0xa010100, @broadcast, {[@generic={0x7, 0x10, "98a1be21dcfff95b281d17e4850a"}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480)=0x5)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', <r3=>r1, 0x4, 0x3, 0x40, 0x7, 0x2, @loopback, @loopback, 0x8021, 0x8, 0x3f, 0x1f}})
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', <r5=>r3, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r4, 0x89f9, &(0x7f0000000c80)={'sit0\x00', &(0x7f0000000c00)={'sit0\x00', r5, 0x4, 0x80, 0x8, 0xafc, 0x18, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0xe, 0x8, 0x781, 0x3}})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), r4)
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
munlock(&(0x7f0000ff6000/0xa000)=nil, 0xa000)
sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x44, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x3a}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r4}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:29:19 executing program 5:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip_vti0\x00', <r2=>r1, 0x0, 0x10, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x67, 0x0, 0x4, 0xb1fde26cf0cef217, 0x0, @private=0xa010100, @broadcast, {[@generic={0x7, 0x10, "98a1be21dcfff95b281d17e4850a"}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:29:19 executing program 4:
ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000))
ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000040))
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080))
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=<r0=>0x0)
ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000100)=r0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x8, 0x1, 0xb65, 0x8, {{0x15, 0x4, 0x2, 0x0, 0x54, 0x66, 0x0, 0x81, 0x2f, 0x0, @private=0xa010100, @multicast2, {[@end, @cipso={0x86, 0x29, 0x1, [{0x5, 0xf, "3e703dd712ca222ae8a3af2c04"}, {0x1, 0x7, "8caeda7b53"}, {0x0, 0xd, "3450bf32edd480c19ec31d"}]}, @timestamp={0x44, 0xc, 0x15, 0x0, 0x1, [0x3, 0x6]}, @ssrr={0x89, 0x7, 0x29, [@rand_addr=0x64010100]}]}}}}})
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000200)={0x7ff, 0x6, 0x100, 0x8, 0x15, "16fc41fd0b316794"})
openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x200040, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:29:19 executing program 3:
socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f00000007c0)={'syztnl0\x00', &(0x7f0000000740)={'sit0\x00', 0x0, 0x2f, 0x1f, 0x8, 0x165, 0x0, @local, @empty, 0x10, 0x1, 0x2, 0x8}})

06:29:19 executing program 7:
ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000))
ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000040))
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080))
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=<r0=>0x0)
ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000100)=r0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x8, 0x1, 0xb65, 0x8, {{0x15, 0x4, 0x2, 0x0, 0x54, 0x66, 0x0, 0x81, 0x2f, 0x0, @private=0xa010100, @multicast2, {[@end, @cipso={0x86, 0x29, 0x1, [{0x5, 0xf, "3e703dd712ca222ae8a3af2c04"}, {0x1, 0x7, "8caeda7b53"}, {0x0, 0xd, "3450bf32edd480c19ec31d"}]}, @timestamp={0x44, 0xc, 0x15, 0x0, 0x1, [0x3, 0x6]}, @ssrr={0x89, 0x7, 0x29, [@rand_addr=0x64010100]}]}}}}})
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000200)={0x7ff, 0x6, 0x100, 0x8, 0x15, "16fc41fd0b316794"})
sched_yield()
openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x200040, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:29:19 executing program 5:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip_vti0\x00', <r2=>r1, 0x0, 0x10, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x67, 0x0, 0x4, 0xb1fde26cf0cef217, 0x0, @private=0xa010100, @broadcast, {[@generic={0x7, 0x10, "98a1be21dcfff95b281d17e4850a"}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:29:19 executing program 1:
getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000080)=0xffffffffffffffff)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000001f40)={0x0, 0x1, 0x6, @multicast}, 0x10)

06:29:19 executing program 2:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip_vti0\x00', <r2=>r1, 0x0, 0x10, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x67, 0x0, 0x4, 0xb1fde26cf0cef217, 0x0, @private=0xa010100, @broadcast, {[@generic={0x7, 0x10, "98a1be21dcfff95b281d17e4850a"}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480)=0x5)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', <r4=>0x0, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000000c80)={'sit0\x00', &(0x7f0000000c00)={'sit0\x00', r4, 0x4, 0x80, 0x8, 0xafc, 0x18, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0xe, 0x8, 0x781, 0x3}})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), r3)
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
munlock(&(0x7f0000ff6000/0xa000)=nil, 0xa000)
sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x44, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x3a}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r3}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:29:19 executing program 3:
socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f00000007c0)={'syztnl0\x00', &(0x7f0000000740)={'sit0\x00', 0x0, 0x2f, 0x1f, 0x8, 0x165, 0x0, @local, @empty, 0x10, 0x1, 0x2, 0x8}})

06:29:19 executing program 6:
ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000))
ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000040))
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080))
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=<r0=>0x0)
ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000100)=r0)
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000200)={0x7ff, 0x6, 0x100, 0x8, 0x15, "16fc41fd0b316794"})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index=0x7, 0x3, 0x1, 0x94b, 0x14}, 0x2)
sched_yield()
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x200040, 0x0)
pipe(&(0x7f0000000400))
ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000880)={0x0, 0x1, 0x1, 0xa, 0x174, &(0x7f0000000480)="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"})
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:29:19 executing program 4:
ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000))
ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000040))
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080))
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=<r0=>0x0)
ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000100)=r0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x8, 0x1, 0xb65, 0x8, {{0x15, 0x4, 0x2, 0x0, 0x54, 0x66, 0x0, 0x81, 0x2f, 0x0, @private=0xa010100, @multicast2, {[@end, @cipso={0x86, 0x29, 0x1, [{0x5, 0xf, "3e703dd712ca222ae8a3af2c04"}, {0x1, 0x7, "8caeda7b53"}, {0x0, 0xd, "3450bf32edd480c19ec31d"}]}, @timestamp={0x44, 0xc, 0x15, 0x0, 0x1, [0x3, 0x6]}, @ssrr={0x89, 0x7, 0x29, [@rand_addr=0x64010100]}]}}}}})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index=0x7, 0x3, 0x1, 0x94b, 0x14}, 0x2)
openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x200040, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:29:19 executing program 0:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip_vti0\x00', <r2=>r1, 0x0, 0x10, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x67, 0x0, 0x4, 0xb1fde26cf0cef217, 0x0, @private=0xa010100, @broadcast, {[@generic={0x7, 0x10, "98a1be21dcfff95b281d17e4850a"}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480)=0x5)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', <r3=>r1, 0x4, 0x3, 0x40, 0x7, 0x2, @loopback, @loopback, 0x8021, 0x8, 0x3f, 0x1f}})
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000600)={'syztnl0\x00', &(0x7f0000000580)={'ip6_vti0\x00', r3, 0x2f, 0x27, 0x0, 0x3, 0x3, @remote, @local, 0x1, 0x40, 0x4, 0x25b}})
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', r3, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), r4)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r4}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:29:19 executing program 7:
ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000))
ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000040))
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080))
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=<r0=>0x0)
ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000100)=r0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x8, 0x1, 0xb65, 0x8, {{0x15, 0x4, 0x2, 0x0, 0x54, 0x66, 0x0, 0x81, 0x2f, 0x0, @private=0xa010100, @multicast2, {[@end, @cipso={0x86, 0x29, 0x1, [{0x5, 0xf, "3e703dd712ca222ae8a3af2c04"}, {0x1, 0x7, "8caeda7b53"}, {0x0, 0xd, "3450bf32edd480c19ec31d"}]}, @timestamp={0x44, 0xc, 0x15, 0x0, 0x1, [0x3, 0x6]}, @ssrr={0x89, 0x7, 0x29, [@rand_addr=0x64010100]}]}}}}})
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000200)={0x7ff, 0x6, 0x100, 0x8, 0x15, "16fc41fd0b316794"})
sched_yield()
openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x200040, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:29:19 executing program 5:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip_vti0\x00', <r2=>r1, 0x0, 0x10, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x67, 0x0, 0x4, 0xb1fde26cf0cef217, 0x0, @private=0xa010100, @broadcast, {[@generic={0x7, 0x10, "98a1be21dcfff95b281d17e4850a"}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:29:19 executing program 3:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, 0x0)

06:29:19 executing program 1:
getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000001f40)={0x0, 0x1, 0x6, @multicast}, 0x10)

06:29:19 executing program 2:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip_vti0\x00', <r2=>r1, 0x0, 0x10, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x67, 0x0, 0x4, 0xb1fde26cf0cef217, 0x0, @private=0xa010100, @broadcast, {[@generic={0x7, 0x10, "98a1be21dcfff95b281d17e4850a"}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480)=0x5)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', <r4=>0x0, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000000c80)={'sit0\x00', &(0x7f0000000c00)={'sit0\x00', r4, 0x4, 0x80, 0x8, 0xafc, 0x18, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0xe, 0x8, 0x781, 0x3}})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), r3)
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
munlock(&(0x7f0000ff6000/0xa000)=nil, 0xa000)
sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x44, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x3a}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r3}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:29:19 executing program 0:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip_vti0\x00', <r2=>r1, 0x0, 0x10, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x67, 0x0, 0x4, 0xb1fde26cf0cef217, 0x0, @private=0xa010100, @broadcast, {[@generic={0x7, 0x10, "98a1be21dcfff95b281d17e4850a"}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480)=0x5)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', <r3=>r1, 0x4, 0x3, 0x40, 0x7, 0x2, @loopback, @loopback, 0x8021, 0x8, 0x3f, 0x1f}})
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000600)={'syztnl0\x00', &(0x7f0000000580)={'ip6_vti0\x00', r3, 0x2f, 0x27, 0x0, 0x3, 0x3, @remote, @local, 0x1, 0x40, 0x4, 0x25b}})
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', r3, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r4}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:29:27 executing program 6:
ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000))
ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000040))
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080))
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=<r0=>0x0)
ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000100)=r0)
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000200)={0x7ff, 0x6, 0x100, 0x8, 0x15, "16fc41fd0b316794"})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index=0x7, 0x3, 0x1, 0x94b, 0x14}, 0x2)
sched_yield()
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x200040, 0x0)
pipe(&(0x7f0000000400))
ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000880)={0x0, 0x1, 0x1, 0xa, 0x174, &(0x7f0000000480)="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"})
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:29:27 executing program 0:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip_vti0\x00', <r2=>r1, 0x0, 0x10, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x67, 0x0, 0x4, 0xb1fde26cf0cef217, 0x0, @private=0xa010100, @broadcast, {[@generic={0x7, 0x10, "98a1be21dcfff95b281d17e4850a"}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480)=0x5)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', <r3=>r1, 0x4, 0x3, 0x40, 0x7, 0x2, @loopback, @loopback, 0x8021, 0x8, 0x3f, 0x1f}})
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000600)={'syztnl0\x00', &(0x7f0000000580)={'ip6_vti0\x00', r3, 0x2f, 0x27, 0x0, 0x3, 0x3, @remote, @local, 0x1, 0x40, 0x4, 0x25b}})
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', r3, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r4}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:29:27 executing program 4:
ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000))
ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000040))
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080))
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=<r0=>0x0)
ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000100)=r0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x8, 0x1, 0xb65, 0x8, {{0x15, 0x4, 0x2, 0x0, 0x54, 0x66, 0x0, 0x81, 0x2f, 0x0, @private=0xa010100, @multicast2, {[@end, @cipso={0x86, 0x29, 0x1, [{0x5, 0xf, "3e703dd712ca222ae8a3af2c04"}, {0x1, 0x7, "8caeda7b53"}, {0x0, 0xd, "3450bf32edd480c19ec31d"}]}, @timestamp={0x44, 0xc, 0x15, 0x0, 0x1, [0x3, 0x6]}, @ssrr={0x89, 0x7, 0x29, [@rand_addr=0x64010100]}]}}}}})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index=0x7, 0x3, 0x1, 0x94b, 0x14}, 0x2)
openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x200040, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:29:27 executing program 2:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip_vti0\x00', <r2=>r1, 0x0, 0x10, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x67, 0x0, 0x4, 0xb1fde26cf0cef217, 0x0, @private=0xa010100, @broadcast, {[@generic={0x7, 0x10, "98a1be21dcfff95b281d17e4850a"}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480)=0x5)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', <r4=>0x0, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000000c80)={'sit0\x00', &(0x7f0000000c00)={'sit0\x00', r4, 0x4, 0x80, 0x8, 0xafc, 0x18, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0xe, 0x8, 0x781, 0x3}})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), r3)
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
munlock(&(0x7f0000ff6000/0xa000)=nil, 0xa000)
sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x44, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x3a}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r3}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:29:27 executing program 7:
ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000))
ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000040))
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080))
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=<r0=>0x0)
ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000100)=r0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x8, 0x1, 0xb65, 0x8, {{0x15, 0x4, 0x2, 0x0, 0x54, 0x66, 0x0, 0x81, 0x2f, 0x0, @private=0xa010100, @multicast2, {[@end, @cipso={0x86, 0x29, 0x1, [{0x5, 0xf, "3e703dd712ca222ae8a3af2c04"}, {0x1, 0x7, "8caeda7b53"}, {0x0, 0xd, "3450bf32edd480c19ec31d"}]}, @timestamp={0x44, 0xc, 0x15, 0x0, 0x1, [0x3, 0x6]}, @ssrr={0x89, 0x7, 0x29, [@rand_addr=0x64010100]}]}}}}})
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000200)={0x7ff, 0x6, 0x100, 0x8, 0x15, "16fc41fd0b316794"})
sched_yield()
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:29:27 executing program 1:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000001f40)={0x0, 0x1, 0x6, @multicast}, 0x10)

06:29:27 executing program 5:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip_vti0\x00', r1, 0x0, 0x10, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x67, 0x0, 0x4, 0xb1fde26cf0cef217, 0x0, @private=0xa010100, @broadcast, {[@generic={0x7, 0x10, "98a1be21dcfff95b281d17e4850a"}]}}}}})
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:29:27 executing program 3:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, 0x0)

06:29:27 executing program 3:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, 0x0)

06:29:27 executing program 0:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip_vti0\x00', <r2=>r1, 0x0, 0x10, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x67, 0x0, 0x4, 0xb1fde26cf0cef217, 0x0, @private=0xa010100, @broadcast, {[@generic={0x7, 0x10, "98a1be21dcfff95b281d17e4850a"}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480)=0x5)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', <r3=>r1, 0x4, 0x3, 0x40, 0x7, 0x2, @loopback, @loopback, 0x8021, 0x8, 0x3f, 0x1f}})
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000600)={'syztnl0\x00', &(0x7f0000000580)={'ip6_vti0\x00', r3, 0x2f, 0x27, 0x0, 0x3, 0x3, @remote, @local, 0x1, 0x40, 0x4, 0x25b}})
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r4}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:29:27 executing program 5:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip_vti0\x00', r1, 0x0, 0x10, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x67, 0x0, 0x4, 0xb1fde26cf0cef217, 0x0, @private=0xa010100, @broadcast, {[@generic={0x7, 0x10, "98a1be21dcfff95b281d17e4850a"}]}}}}})
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:29:28 executing program 1:
r0 = socket$packet(0x11, 0x0, 0x300)
setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000001f40)={0x0, 0x1, 0x6, @multicast}, 0x10)

06:29:28 executing program 7:
ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000))
ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000040))
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080))
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=<r0=>0x0)
ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000100)=r0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x8, 0x1, 0xb65, 0x8, {{0x15, 0x4, 0x2, 0x0, 0x54, 0x66, 0x0, 0x81, 0x2f, 0x0, @private=0xa010100, @multicast2, {[@end, @cipso={0x86, 0x29, 0x1, [{0x5, 0xf, "3e703dd712ca222ae8a3af2c04"}, {0x1, 0x7, "8caeda7b53"}, {0x0, 0xd, "3450bf32edd480c19ec31d"}]}, @timestamp={0x44, 0xc, 0x15, 0x0, 0x1, [0x3, 0x6]}, @ssrr={0x89, 0x7, 0x29, [@rand_addr=0x64010100]}]}}}}})
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000200)={0x7ff, 0x6, 0x100, 0x8, 0x15, "16fc41fd0b316794"})
sched_yield()
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:29:28 executing program 2:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip_vti0\x00', <r2=>r1, 0x0, 0x10, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x67, 0x0, 0x4, 0xb1fde26cf0cef217, 0x0, @private=0xa010100, @broadcast, {[@generic={0x7, 0x10, "98a1be21dcfff95b281d17e4850a"}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', <r3=>r1, 0x4, 0x3, 0x40, 0x7, 0x2, @loopback, @loopback, 0x8021, 0x8, 0x3f, 0x1f}})
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', <r5=>r3, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r4, 0x89f9, &(0x7f0000000c80)={'sit0\x00', &(0x7f0000000c00)={'sit0\x00', r5, 0x4, 0x80, 0x8, 0xafc, 0x18, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0xe, 0x8, 0x781, 0x3}})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), r4)
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
munlock(&(0x7f0000ff6000/0xa000)=nil, 0xa000)
sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x44, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x3a}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r4}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:29:28 executing program 4:
ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000))
ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000040))
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080))
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=<r0=>0x0)
ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000100)=r0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x8, 0x1, 0xb65, 0x8, {{0x15, 0x4, 0x2, 0x0, 0x54, 0x66, 0x0, 0x81, 0x2f, 0x0, @private=0xa010100, @multicast2, {[@end, @cipso={0x86, 0x29, 0x1, [{0x5, 0xf, "3e703dd712ca222ae8a3af2c04"}, {0x1, 0x7, "8caeda7b53"}, {0x0, 0xd, "3450bf32edd480c19ec31d"}]}, @timestamp={0x44, 0xc, 0x15, 0x0, 0x1, [0x3, 0x6]}, @ssrr={0x89, 0x7, 0x29, [@rand_addr=0x64010100]}]}}}}})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index=0x7, 0x3, 0x1, 0x94b, 0x14}, 0x2)
openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x200040, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:29:28 executing program 0:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip_vti0\x00', <r2=>r1, 0x0, 0x10, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x67, 0x0, 0x4, 0xb1fde26cf0cef217, 0x0, @private=0xa010100, @broadcast, {[@generic={0x7, 0x10, "98a1be21dcfff95b281d17e4850a"}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480)=0x5)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', <r3=>r1, 0x4, 0x3, 0x40, 0x7, 0x2, @loopback, @loopback, 0x8021, 0x8, 0x3f, 0x1f}})
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000600)={'syztnl0\x00', &(0x7f0000000580)={'ip6_vti0\x00', r3, 0x2f, 0x27, 0x0, 0x3, 0x3, @remote, @local, 0x1, 0x40, 0x4, 0x25b}})
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r4}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:29:36 executing program 1:
r0 = socket$packet(0x11, 0x0, 0x300)
setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000001f40)={0x0, 0x1, 0x6, @multicast}, 0x10)

06:29:36 executing program 3:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f00000007c0)={'syztnl0\x00', 0x0})

06:29:36 executing program 5:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:29:36 executing program 4:
ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000))
ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000040))
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080))
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=<r0=>0x0)
ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000100)=r0)
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000200)={0x7ff, 0x6, 0x100, 0x8, 0x15, "16fc41fd0b316794"})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index=0x7, 0x3, 0x1, 0x94b, 0x14}, 0x2)
openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x200040, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:29:36 executing program 6:
ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000))
ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000040))
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080))
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=<r0=>0x0)
ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000100)=r0)
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000200)={0x7ff, 0x6, 0x100, 0x8, 0x15, "16fc41fd0b316794"})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index=0x7, 0x3, 0x1, 0x94b, 0x14}, 0x2)
sched_yield()
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x200040, 0x0)
pipe(&(0x7f0000000400))
ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000880)={0x0, 0x1, 0x1, 0xa, 0x174, &(0x7f0000000480)="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"})
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:29:36 executing program 0:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip_vti0\x00', <r2=>r1, 0x0, 0x10, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x67, 0x0, 0x4, 0xb1fde26cf0cef217, 0x0, @private=0xa010100, @broadcast, {[@generic={0x7, 0x10, "98a1be21dcfff95b281d17e4850a"}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480)=0x5)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', <r3=>r1, 0x4, 0x3, 0x40, 0x7, 0x2, @loopback, @loopback, 0x8021, 0x8, 0x3f, 0x1f}})
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000600)={'syztnl0\x00', &(0x7f0000000580)={'ip6_vti0\x00', r3, 0x2f, 0x27, 0x0, 0x3, 0x3, @remote, @local, 0x1, 0x40, 0x4, 0x25b}})
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r4}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:29:36 executing program 2:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip_vti0\x00', <r2=>r1, 0x0, 0x10, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x67, 0x0, 0x4, 0xb1fde26cf0cef217, 0x0, @private=0xa010100, @broadcast, {[@generic={0x7, 0x10, "98a1be21dcfff95b281d17e4850a"}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', <r3=>r1, 0x4, 0x3, 0x40, 0x7, 0x2, @loopback, @loopback, 0x8021, 0x8, 0x3f, 0x1f}})
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', <r5=>r3, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r4, 0x89f9, &(0x7f0000000c80)={'sit0\x00', &(0x7f0000000c00)={'sit0\x00', r5, 0x4, 0x80, 0x8, 0xafc, 0x18, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0xe, 0x8, 0x781, 0x3}})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), r4)
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
munlock(&(0x7f0000ff6000/0xa000)=nil, 0xa000)
sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x44, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x3a}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r4}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:29:36 executing program 7:
ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000))
ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000040))
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080))
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=<r0=>0x0)
ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000100)=r0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x8, 0x1, 0xb65, 0x8, {{0x15, 0x4, 0x2, 0x0, 0x54, 0x66, 0x0, 0x81, 0x2f, 0x0, @private=0xa010100, @multicast2, {[@end, @cipso={0x86, 0x29, 0x1, [{0x5, 0xf, "3e703dd712ca222ae8a3af2c04"}, {0x1, 0x7, "8caeda7b53"}, {0x0, 0xd, "3450bf32edd480c19ec31d"}]}, @timestamp={0x44, 0xc, 0x15, 0x0, 0x1, [0x3, 0x6]}, @ssrr={0x89, 0x7, 0x29, [@rand_addr=0x64010100]}]}}}}})
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000200)={0x7ff, 0x6, 0x100, 0x8, 0x15, "16fc41fd0b316794"})
sched_yield()
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:29:36 executing program 1:
r0 = socket$packet(0x11, 0x0, 0x300)
setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000001f40)={0x0, 0x1, 0x6, @multicast}, 0x10)

06:29:36 executing program 6:
ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000))
ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000040))
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080))
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0))
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x8, 0x1, 0xb65, 0x8, {{0x15, 0x4, 0x2, 0x0, 0x54, 0x66, 0x0, 0x81, 0x2f, 0x0, @private=0xa010100, @multicast2, {[@end, @cipso={0x86, 0x29, 0x1, [{0x5, 0xf, "3e703dd712ca222ae8a3af2c04"}, {0x1, 0x7, "8caeda7b53"}, {0x0, 0xd, "3450bf32edd480c19ec31d"}]}, @timestamp={0x44, 0xc, 0x15, 0x0, 0x1, [0x3, 0x6]}, @ssrr={0x89, 0x7, 0x29, [@rand_addr=0x64010100]}]}}}}})
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000200)={0x7ff, 0x6, 0x100, 0x8, 0x15, "16fc41fd0b316794"})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index=0x7, 0x3, 0x1, 0x94b, 0x14}, 0x2)
sched_yield()
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x200040, 0x0)
pipe(&(0x7f0000000400))
ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000880)={0x0, 0x1, 0x1, 0xa, 0x174, &(0x7f0000000480)="5edb89eaad007f1a706b88cb3a9480a5562c7e564ce1a22c8df8f726fe37b4d862d84daee9ed2138f78aa73236b0f8aa29f6887a95c11b5632235b1ca585ef6e2b7d79ce6c276e0c0189f2f6db5247a5ab874e166f440f821e03103a32a9272c814236d289278b79c32ebf6ba6c5233b1f7a4d2c44a2a71cdb392a600e64a4af7a10fa0a8bea9cc5b90e126f49978fef66f5ade48a06d597417f758954e92a0a4c12a021983aaf60aa29f6cab1b2823a791039220ac2a52293635f2edb83dc426f276233492c81c2ed499c54fbb8111cfc01333e31d1e6284939f8b46349b320a0f165c6b1c7112dc9f76df0ed194c098450de5466e14e767d16039e649dfed15123f0380ac5b45a6af5920aac7b058e5bfb4e3eadc9d8465048073c050bb96ee01990875b09cf164a282a1f3e8b3ccf3f76077eace47e8d2f1e0a2a5fc00477ef309fd57c0d845dd2d86350e999349ff41d6a82704dabf9081eea0a228feb9308a03b69844b13d48b7082865047eefa7a70bfea6488322c7739c6446fbe0afb052a520dc3bd0c78b19c73e16ce0ef6ea5b883876cf677537b667fbcb430fd5f773ad2b86f4db609c89166cfbb4a090a35769055a68c45bbc8c58c8e9ba527a211a12730b3295be141c2092f17b2d8df1b02c3b3e06955d667737d8888eceae78b0888e09713470bdf19ddcd4ad497d41b41e6b4df45662e6801b4216c1965e3df45e645f9253fe67bd0f65d37a052bab9769a2a32c0da67496cddd7752b34f4a10cface1f531869f24d11733334baf3fa8b8450261d61f41218716e36c4edb502ba59ce7f4ac2abc53ca940fc92dbadeff2ba66debdf785776147c5709f31927a7e081883ef681b6591e9259fa33541c087f7884b2778a0cc839781be052050d3c71ea8d886c129b61e6bfcf4686934f18da4e7cede143e9c0db819675b4e1aeb1f87efafdb0279dd6d5d5b0efcd6a8e7c55141fc7ecfd50dd8cb9879e3768b4d6c481a7c310609e987303254bee0461c5fcd6cd35b46361b6b221894bc6153ef150d4f9e7d2f0fe479e3c71f17dc51dc39ed12e66dab898a54a232b675dfe4e7bb637fef8ea611585fcb66d3ee54dff31967f0089e47d249daffd1e014e2c2e11ca9e357b483c8b0e6c1d890874830f5d54b2b9f057b62a3ea0175bce6545ae55f523618384a2beb7f095f8882ce7105e10fc0b0cdc040c1c8da0eddfa642cd0e02ac42c9218617a0a6cf440752d8c8ec9bcb6e25c35b8636dcdee315811155b500e52911b3dc3c9f7a2d50cfbd560c6db46ca8d5614f047c048cbbdf9df5865916321f5533ce617005da2b39bfa433856a2f73d5ad40b97c7787feaf990de49222fd58d0f535b458f5f1ce067ddf0fb0d56ada3ae5e7d43afcc9ff15eb9e5706f6c902adfd4f8d38f4d8ef8832a070c739d7a4515d0aa75643597f71d7753"})
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:29:36 executing program 0:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip_vti0\x00', <r2=>r1, 0x0, 0x10, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x67, 0x0, 0x4, 0xb1fde26cf0cef217, 0x0, @private=0xa010100, @broadcast, {[@generic={0x7, 0x10, "98a1be21dcfff95b281d17e4850a"}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480)=0x5)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', <r3=>r1, 0x4, 0x3, 0x40, 0x7, 0x2, @loopback, @loopback, 0x8021, 0x8, 0x3f, 0x1f}})
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000600)={'syztnl0\x00', &(0x7f0000000580)={'ip6_vti0\x00', r3, 0x2f, 0x27, 0x0, 0x3, 0x3, @remote, @local, 0x1, 0x40, 0x4, 0x25b}})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', r3, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:29:44 executing program 3:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip_vti0\x00', <r2=>r1, 0x0, 0x10, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x67, 0x0, 0x4, 0xb1fde26cf0cef217, 0x0, @private=0xa010100, @broadcast, {[@generic={0x7, 0x10, "98a1be21dcfff95b281d17e4850a"}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', <r3=>r1, 0x4, 0x3, 0x40, 0x7, 0x2, @loopback, @loopback, 0x8021, 0x8, 0x3f, 0x1f}})
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', <r5=>r3, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r4, 0x89f9, &(0x7f0000000c80)={'sit0\x00', &(0x7f0000000c00)={'sit0\x00', r5, 0x4, 0x80, 0x8, 0xafc, 0x18, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0xe, 0x8, 0x781, 0x3}})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), r4)
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
munlock(&(0x7f0000ff6000/0xa000)=nil, 0xa000)
sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x44, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x3a}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r4}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:29:44 executing program 6:
ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000))
ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000040))
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080))
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0))
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x8, 0x1, 0xb65, 0x8, {{0x15, 0x4, 0x2, 0x0, 0x54, 0x66, 0x0, 0x81, 0x2f, 0x0, @private=0xa010100, @multicast2, {[@end, @cipso={0x86, 0x29, 0x1, [{0x5, 0xf, "3e703dd712ca222ae8a3af2c04"}, {0x1, 0x7, "8caeda7b53"}, {0x0, 0xd, "3450bf32edd480c19ec31d"}]}, @timestamp={0x44, 0xc, 0x15, 0x0, 0x1, [0x3, 0x6]}, @ssrr={0x89, 0x7, 0x29, [@rand_addr=0x64010100]}]}}}}})
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000200)={0x7ff, 0x6, 0x100, 0x8, 0x15, "16fc41fd0b316794"})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index=0x7, 0x3, 0x1, 0x94b, 0x14}, 0x2)
sched_yield()
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x200040, 0x0)
pipe(&(0x7f0000000400))
ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000880)={0x0, 0x1, 0x1, 0xa, 0x174, &(0x7f0000000480)="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"})
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:29:44 executing program 2:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip_vti0\x00', <r2=>r1, 0x0, 0x10, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x67, 0x0, 0x4, 0xb1fde26cf0cef217, 0x0, @private=0xa010100, @broadcast, {[@generic={0x7, 0x10, "98a1be21dcfff95b281d17e4850a"}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', <r3=>r1, 0x4, 0x3, 0x40, 0x7, 0x2, @loopback, @loopback, 0x8021, 0x8, 0x3f, 0x1f}})
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', <r5=>r3, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r4, 0x89f9, &(0x7f0000000c80)={'sit0\x00', &(0x7f0000000c00)={'sit0\x00', r5, 0x4, 0x80, 0x8, 0xafc, 0x18, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0xe, 0x8, 0x781, 0x3}})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), r4)
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
munlock(&(0x7f0000ff6000/0xa000)=nil, 0xa000)
sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x44, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x3a}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r4}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:29:44 executing program 7:
ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000))
ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000040))
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080))
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=<r0=>0x0)
ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000100)=r0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x8, 0x1, 0xb65, 0x8, {{0x15, 0x4, 0x2, 0x0, 0x54, 0x66, 0x0, 0x81, 0x2f, 0x0, @private=0xa010100, @multicast2, {[@end, @cipso={0x86, 0x29, 0x1, [{0x5, 0xf, "3e703dd712ca222ae8a3af2c04"}, {0x1, 0x7, "8caeda7b53"}, {0x0, 0xd, "3450bf32edd480c19ec31d"}]}, @timestamp={0x44, 0xc, 0x15, 0x0, 0x1, [0x3, 0x6]}, @ssrr={0x89, 0x7, 0x29, [@rand_addr=0x64010100]}]}}}}})
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000200)={0x7ff, 0x6, 0x100, 0x8, 0x15, "16fc41fd0b316794"})
openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x200040, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:29:44 executing program 0:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip_vti0\x00', <r2=>r1, 0x0, 0x10, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x67, 0x0, 0x4, 0xb1fde26cf0cef217, 0x0, @private=0xa010100, @broadcast, {[@generic={0x7, 0x10, "98a1be21dcfff95b281d17e4850a"}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480)=0x5)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', <r3=>r1, 0x4, 0x3, 0x40, 0x7, 0x2, @loopback, @loopback, 0x8021, 0x8, 0x3f, 0x1f}})
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000600)={'syztnl0\x00', &(0x7f0000000580)={'ip6_vti0\x00', r3, 0x2f, 0x27, 0x0, 0x3, 0x3, @remote, @local, 0x1, 0x40, 0x4, 0x25b}})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', r3, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:29:44 executing program 4:
ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000))
ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000040))
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080))
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0))
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000200)={0x7ff, 0x6, 0x100, 0x8, 0x15, "16fc41fd0b316794"})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index=0x7, 0x3, 0x1, 0x94b, 0x14}, 0x2)
openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x200040, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:29:44 executing program 5:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:29:44 executing program 1:
socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000001f40)={0x0, 0x1, 0x6, @multicast}, 0x10)

06:29:44 executing program 2:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip_vti0\x00', <r2=>r1, 0x0, 0x10, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x67, 0x0, 0x4, 0xb1fde26cf0cef217, 0x0, @private=0xa010100, @broadcast, {[@generic={0x7, 0x10, "98a1be21dcfff95b281d17e4850a"}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', <r3=>r1, 0x4, 0x3, 0x40, 0x7, 0x2, @loopback, @loopback, 0x8021, 0x8, 0x3f, 0x1f}})
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', <r5=>r3, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r4, 0x89f9, &(0x7f0000000c80)={'sit0\x00', &(0x7f0000000c00)={'sit0\x00', r5, 0x4, 0x80, 0x8, 0xafc, 0x18, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0xe, 0x8, 0x781, 0x3}})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), r4)
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
munlock(&(0x7f0000ff6000/0xa000)=nil, 0xa000)
sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x44, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x3a}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r4}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:29:44 executing program 1:
socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000001f40)={0x0, 0x1, 0x6, @multicast}, 0x10)

06:29:44 executing program 5:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:29:44 executing program 0:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip_vti0\x00', <r2=>r1, 0x0, 0x10, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x67, 0x0, 0x4, 0xb1fde26cf0cef217, 0x0, @private=0xa010100, @broadcast, {[@generic={0x7, 0x10, "98a1be21dcfff95b281d17e4850a"}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480)=0x5)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', <r3=>r1, 0x4, 0x3, 0x40, 0x7, 0x2, @loopback, @loopback, 0x8021, 0x8, 0x3f, 0x1f}})
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000600)={'syztnl0\x00', &(0x7f0000000580)={'ip6_vti0\x00', r3, 0x2f, 0x27, 0x0, 0x3, 0x3, @remote, @local, 0x1, 0x40, 0x4, 0x25b}})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', r3, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:29:44 executing program 6:
ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000))
ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000040))
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080))
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0))
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x8, 0x1, 0xb65, 0x8, {{0x15, 0x4, 0x2, 0x0, 0x54, 0x66, 0x0, 0x81, 0x2f, 0x0, @private=0xa010100, @multicast2, {[@end, @cipso={0x86, 0x29, 0x1, [{0x5, 0xf, "3e703dd712ca222ae8a3af2c04"}, {0x1, 0x7, "8caeda7b53"}, {0x0, 0xd, "3450bf32edd480c19ec31d"}]}, @timestamp={0x44, 0xc, 0x15, 0x0, 0x1, [0x3, 0x6]}, @ssrr={0x89, 0x7, 0x29, [@rand_addr=0x64010100]}]}}}}})
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000200)={0x7ff, 0x6, 0x100, 0x8, 0x15, "16fc41fd0b316794"})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index=0x7, 0x3, 0x1, 0x94b, 0x14}, 0x2)
sched_yield()
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x200040, 0x0)
pipe(&(0x7f0000000400))
ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000880)={0x0, 0x1, 0x1, 0xa, 0x174, &(0x7f0000000480)="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"})
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:29:44 executing program 5:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip_vti0\x00', r1, 0x0, 0x10, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x67, 0x0, 0x4, 0xb1fde26cf0cef217, 0x0, @private=0xa010100, @broadcast, {[@generic={0x7, 0x10, "98a1be21dcfff95b281d17e4850a"}]}}}}})
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:29:44 executing program 2:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip_vti0\x00', <r2=>r1, 0x0, 0x10, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x67, 0x0, 0x4, 0xb1fde26cf0cef217, 0x0, @private=0xa010100, @broadcast, {[@generic={0x7, 0x10, "98a1be21dcfff95b281d17e4850a"}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', <r3=>r1, 0x4, 0x3, 0x40, 0x7, 0x2, @loopback, @loopback, 0x8021, 0x8, 0x3f, 0x1f}})
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', <r5=>r3, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r4, 0x89f9, &(0x7f0000000c80)={'sit0\x00', &(0x7f0000000c00)={'sit0\x00', r5, 0x4, 0x80, 0x8, 0xafc, 0x18, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0xe, 0x8, 0x781, 0x3}})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), r4)
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
munlock(&(0x7f0000ff6000/0xa000)=nil, 0xa000)
sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x44, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x3a}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r4}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:29:44 executing program 4:
ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000))
ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000040))
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080))
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0))
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000200)={0x7ff, 0x6, 0x100, 0x8, 0x15, "16fc41fd0b316794"})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index=0x7, 0x3, 0x1, 0x94b, 0x14}, 0x2)
openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x200040, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:29:44 executing program 7:
ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000))
ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000040))
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080))
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=<r0=>0x0)
ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000100)=r0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x8, 0x1, 0xb65, 0x8, {{0x15, 0x4, 0x2, 0x0, 0x54, 0x66, 0x0, 0x81, 0x2f, 0x0, @private=0xa010100, @multicast2, {[@end, @cipso={0x86, 0x29, 0x1, [{0x5, 0xf, "3e703dd712ca222ae8a3af2c04"}, {0x1, 0x7, "8caeda7b53"}, {0x0, 0xd, "3450bf32edd480c19ec31d"}]}, @timestamp={0x44, 0xc, 0x15, 0x0, 0x1, [0x3, 0x6]}, @ssrr={0x89, 0x7, 0x29, [@rand_addr=0x64010100]}]}}}}})
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000200)={0x7ff, 0x6, 0x100, 0x8, 0x15, "16fc41fd0b316794"})
openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x200040, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:29:44 executing program 3:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip_vti0\x00', <r2=>r1, 0x0, 0x10, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x67, 0x0, 0x4, 0xb1fde26cf0cef217, 0x0, @private=0xa010100, @broadcast, {[@generic={0x7, 0x10, "98a1be21dcfff95b281d17e4850a"}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', <r3=>r1, 0x4, 0x3, 0x40, 0x7, 0x2, @loopback, @loopback, 0x8021, 0x8, 0x3f, 0x1f}})
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', <r5=>r3, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r4, 0x89f9, &(0x7f0000000c80)={'sit0\x00', &(0x7f0000000c00)={'sit0\x00', r5, 0x4, 0x80, 0x8, 0xafc, 0x18, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0xe, 0x8, 0x781, 0x3}})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), r4)
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
munlock(&(0x7f0000ff6000/0xa000)=nil, 0xa000)
sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x44, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x3a}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r4}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:29:44 executing program 1:
socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000001f40)={0x0, 0x1, 0x6, @multicast}, 0x10)

06:29:44 executing program 0:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip_vti0\x00', <r2=>r1, 0x0, 0x10, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x67, 0x0, 0x4, 0xb1fde26cf0cef217, 0x0, @private=0xa010100, @broadcast, {[@generic={0x7, 0x10, "98a1be21dcfff95b281d17e4850a"}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480)=0x5)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', <r3=>r1, 0x4, 0x3, 0x40, 0x7, 0x2, @loopback, @loopback, 0x8021, 0x8, 0x3f, 0x1f}})
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', r3, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r4}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:29:53 executing program 1:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_drop_memb(r0, 0x107, 0x2, 0x0, 0x0)

06:29:53 executing program 4:
ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000))
ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000040))
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080))
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0))
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000200)={0x7ff, 0x6, 0x100, 0x8, 0x15, "16fc41fd0b316794"})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index=0x7, 0x3, 0x1, 0x94b, 0x14}, 0x2)
openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x200040, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:29:53 executing program 5:
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r0=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip_vti0\x00', r0, 0x0, 0x10, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x67, 0x0, 0x4, 0xb1fde26cf0cef217, 0x0, @private=0xa010100, @broadcast, {[@generic={0x7, 0x10, "98a1be21dcfff95b281d17e4850a"}]}}}}})
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:29:53 executing program 6:
ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000))
ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000040))
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080))
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x8, 0x1, 0xb65, 0x8, {{0x15, 0x4, 0x2, 0x0, 0x54, 0x66, 0x0, 0x81, 0x2f, 0x0, @private=0xa010100, @multicast2, {[@end, @cipso={0x86, 0x29, 0x1, [{0x5, 0xf, "3e703dd712ca222ae8a3af2c04"}, {0x1, 0x7, "8caeda7b53"}, {0x0, 0xd, "3450bf32edd480c19ec31d"}]}, @timestamp={0x44, 0xc, 0x15, 0x0, 0x1, [0x3, 0x6]}, @ssrr={0x89, 0x7, 0x29, [@rand_addr=0x64010100]}]}}}}})
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000200)={0x7ff, 0x6, 0x100, 0x8, 0x15, "16fc41fd0b316794"})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index=0x7, 0x3, 0x1, 0x94b, 0x14}, 0x2)
sched_yield()
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x200040, 0x0)
pipe(&(0x7f0000000400))
ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000880)={0x0, 0x1, 0x1, 0xa, 0x174, &(0x7f0000000480)="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"})
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:29:53 executing program 0:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip_vti0\x00', <r2=>r1, 0x0, 0x10, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x67, 0x0, 0x4, 0xb1fde26cf0cef217, 0x0, @private=0xa010100, @broadcast, {[@generic={0x7, 0x10, "98a1be21dcfff95b281d17e4850a"}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480)=0x5)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', 0x0, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r3}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:29:53 executing program 3:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip_vti0\x00', <r2=>r1, 0x0, 0x10, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x67, 0x0, 0x4, 0xb1fde26cf0cef217, 0x0, @private=0xa010100, @broadcast, {[@generic={0x7, 0x10, "98a1be21dcfff95b281d17e4850a"}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', <r3=>r1, 0x4, 0x3, 0x40, 0x7, 0x2, @loopback, @loopback, 0x8021, 0x8, 0x3f, 0x1f}})
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', <r5=>r3, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r4, 0x89f9, &(0x7f0000000c80)={'sit0\x00', &(0x7f0000000c00)={'sit0\x00', r5, 0x4, 0x80, 0x8, 0xafc, 0x18, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0xe, 0x8, 0x781, 0x3}})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), r4)
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
munlock(&(0x7f0000ff6000/0xa000)=nil, 0xa000)
sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x44, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x3a}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r4}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:29:53 executing program 7:
ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000))
ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000040))
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080))
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=<r0=>0x0)
ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000100)=r0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x8, 0x1, 0xb65, 0x8, {{0x15, 0x4, 0x2, 0x0, 0x54, 0x66, 0x0, 0x81, 0x2f, 0x0, @private=0xa010100, @multicast2, {[@end, @cipso={0x86, 0x29, 0x1, [{0x5, 0xf, "3e703dd712ca222ae8a3af2c04"}, {0x1, 0x7, "8caeda7b53"}, {0x0, 0xd, "3450bf32edd480c19ec31d"}]}, @timestamp={0x44, 0xc, 0x15, 0x0, 0x1, [0x3, 0x6]}, @ssrr={0x89, 0x7, 0x29, [@rand_addr=0x64010100]}]}}}}})
openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x200040, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:29:53 executing program 2:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip_vti0\x00', <r2=>r1, 0x0, 0x10, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x67, 0x0, 0x4, 0xb1fde26cf0cef217, 0x0, @private=0xa010100, @broadcast, {[@generic={0x7, 0x10, "98a1be21dcfff95b281d17e4850a"}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', <r3=>r1, 0x4, 0x3, 0x40, 0x7, 0x2, @loopback, @loopback, 0x8021, 0x8, 0x3f, 0x1f}})
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', <r5=>r3, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r4, 0x89f9, &(0x7f0000000c80)={'sit0\x00', &(0x7f0000000c00)={'sit0\x00', r5, 0x4, 0x80, 0x8, 0xafc, 0x18, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0xe, 0x8, 0x781, 0x3}})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), r4)
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
munlock(&(0x7f0000ff6000/0xa000)=nil, 0xa000)
sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x44, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x3a}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r4}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:29:53 executing program 1:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_drop_memb(r0, 0x107, 0x2, 0x0, 0x0)

06:29:53 executing program 4:
ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000))
ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000040))
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080))
ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000100))
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000200)={0x7ff, 0x6, 0x100, 0x8, 0x15, "16fc41fd0b316794"})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index=0x7, 0x3, 0x1, 0x94b, 0x14}, 0x2)
openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x200040, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:29:53 executing program 7:
ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000))
ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000040))
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080))
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=<r0=>0x0)
ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000100)=r0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x8, 0x1, 0xb65, 0x8, {{0x15, 0x4, 0x2, 0x0, 0x54, 0x66, 0x0, 0x81, 0x2f, 0x0, @private=0xa010100, @multicast2, {[@end, @cipso={0x86, 0x29, 0x1, [{0x5, 0xf, "3e703dd712ca222ae8a3af2c04"}, {0x1, 0x7, "8caeda7b53"}, {0x0, 0xd, "3450bf32edd480c19ec31d"}]}, @timestamp={0x44, 0xc, 0x15, 0x0, 0x1, [0x3, 0x6]}, @ssrr={0x89, 0x7, 0x29, [@rand_addr=0x64010100]}]}}}}})
openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x200040, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:29:53 executing program 3:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip_vti0\x00', <r2=>r1, 0x0, 0x10, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x67, 0x0, 0x4, 0xb1fde26cf0cef217, 0x0, @private=0xa010100, @broadcast, {[@generic={0x7, 0x10, "98a1be21dcfff95b281d17e4850a"}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', <r3=>r1, 0x4, 0x3, 0x40, 0x7, 0x2, @loopback, @loopback, 0x8021, 0x8, 0x3f, 0x1f}})
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', <r5=>r3, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r4, 0x89f9, &(0x7f0000000c80)={'sit0\x00', &(0x7f0000000c00)={'sit0\x00', r5, 0x4, 0x80, 0x8, 0xafc, 0x18, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0xe, 0x8, 0x781, 0x3}})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), r4)
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
munlock(&(0x7f0000ff6000/0xa000)=nil, 0xa000)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r4}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:29:53 executing program 6:
ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000))
ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000040))
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x8, 0x1, 0xb65, 0x8, {{0x15, 0x4, 0x2, 0x0, 0x54, 0x66, 0x0, 0x81, 0x2f, 0x0, @private=0xa010100, @multicast2, {[@end, @cipso={0x86, 0x29, 0x1, [{0x5, 0xf, "3e703dd712ca222ae8a3af2c04"}, {0x1, 0x7, "8caeda7b53"}, {0x0, 0xd, "3450bf32edd480c19ec31d"}]}, @timestamp={0x44, 0xc, 0x15, 0x0, 0x1, [0x3, 0x6]}, @ssrr={0x89, 0x7, 0x29, [@rand_addr=0x64010100]}]}}}}})
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000200)={0x7ff, 0x6, 0x100, 0x8, 0x15, "16fc41fd0b316794"})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index=0x7, 0x3, 0x1, 0x94b, 0x14}, 0x2)
sched_yield()
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x200040, 0x0)
pipe(&(0x7f0000000400))
ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000880)={0x0, 0x1, 0x1, 0xa, 0x174, &(0x7f0000000480)="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"})
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:29:53 executing program 5:
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip_vti0\x00', 0x0, 0x0, 0x10, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x67, 0x0, 0x4, 0xb1fde26cf0cef217, 0x0, @private=0xa010100, @broadcast, {[@generic={0x7, 0x10, "98a1be21dcfff95b281d17e4850a"}]}}}}})
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:29:53 executing program 2:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip_vti0\x00', r1, 0x0, 0x10, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x67, 0x0, 0x4, 0xb1fde26cf0cef217, 0x0, @private=0xa010100, @broadcast, {[@generic={0x7, 0x10, "98a1be21dcfff95b281d17e4850a"}]}}}}})
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', <r2=>r1, 0x4, 0x3, 0x40, 0x7, 0x2, @loopback, @loopback, 0x8021, 0x8, 0x3f, 0x1f}})
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', <r4=>r2, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000000c80)={'sit0\x00', &(0x7f0000000c00)={'sit0\x00', r4, 0x4, 0x80, 0x8, 0xafc, 0x18, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0xe, 0x8, 0x781, 0x3}})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), r3)
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
munlock(&(0x7f0000ff6000/0xa000)=nil, 0xa000)
sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x44, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x3a}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r3}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:29:53 executing program 1:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_drop_memb(r0, 0x107, 0x2, 0x0, 0x0)

06:29:53 executing program 0:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip_vti0\x00', <r2=>r1, 0x0, 0x10, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x67, 0x0, 0x4, 0xb1fde26cf0cef217, 0x0, @private=0xa010100, @broadcast, {[@generic={0x7, 0x10, "98a1be21dcfff95b281d17e4850a"}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480)=0x5)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', 0x0, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r3}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:29:53 executing program 7:
ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000))
ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000040))
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080))
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=<r0=>0x0)
ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000100)=r0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x8, 0x1, 0xb65, 0x8, {{0x15, 0x4, 0x2, 0x0, 0x54, 0x66, 0x0, 0x81, 0x2f, 0x0, @private=0xa010100, @multicast2, {[@end, @cipso={0x86, 0x29, 0x1, [{0x5, 0xf, "3e703dd712ca222ae8a3af2c04"}, {0x1, 0x7, "8caeda7b53"}, {0x0, 0xd, "3450bf32edd480c19ec31d"}]}, @timestamp={0x44, 0xc, 0x15, 0x0, 0x1, [0x3, 0x6]}, @ssrr={0x89, 0x7, 0x29, [@rand_addr=0x64010100]}]}}}}})
openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x200040, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:29:54 executing program 1:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip_vti0\x00', <r2=>r1, 0x0, 0x10, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x67, 0x0, 0x4, 0xb1fde26cf0cef217, 0x0, @private=0xa010100, @broadcast, {[@generic={0x7, 0x10, "98a1be21dcfff95b281d17e4850a"}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480)=0x5)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', 0x0, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r3}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:30:02 executing program 0:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip_vti0\x00', <r2=>r1, 0x0, 0x10, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x67, 0x0, 0x4, 0xb1fde26cf0cef217, 0x0, @private=0xa010100, @broadcast, {[@generic={0x7, 0x10, "98a1be21dcfff95b281d17e4850a"}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480)=0x5)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', 0x0, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r3}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:30:02 executing program 4:
ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000))
ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000040))
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080))
ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000100))
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000200)={0x7ff, 0x6, 0x100, 0x8, 0x15, "16fc41fd0b316794"})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index=0x7, 0x3, 0x1, 0x94b, 0x14}, 0x2)
openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x200040, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:30:02 executing program 1:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip_vti0\x00', <r2=>r1, 0x0, 0x10, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x67, 0x0, 0x4, 0xb1fde26cf0cef217, 0x0, @private=0xa010100, @broadcast, {[@generic={0x7, 0x10, "98a1be21dcfff95b281d17e4850a"}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480)=0x5)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', 0x0, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r3}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:30:02 executing program 7:
ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000))
ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000040))
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080))
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=<r0=>0x0)
ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000100)=r0)
openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x200040, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:30:02 executing program 5:
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip_vti0\x00', 0x0, 0x0, 0x10, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x67, 0x0, 0x4, 0xb1fde26cf0cef217, 0x0, @private=0xa010100, @broadcast, {[@generic={0x7, 0x10, "98a1be21dcfff95b281d17e4850a"}]}}}}})
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:30:02 executing program 3:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip_vti0\x00', <r2=>r1, 0x0, 0x10, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x67, 0x0, 0x4, 0xb1fde26cf0cef217, 0x0, @private=0xa010100, @broadcast, {[@generic={0x7, 0x10, "98a1be21dcfff95b281d17e4850a"}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', <r3=>r1, 0x4, 0x3, 0x40, 0x7, 0x2, @loopback, @loopback, 0x8021, 0x8, 0x3f, 0x1f}})
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', <r5=>r3, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r4, 0x89f9, &(0x7f0000000c80)={'sit0\x00', &(0x7f0000000c00)={'sit0\x00', r5, 0x4, 0x80, 0x8, 0xafc, 0x18, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0xe, 0x8, 0x781, 0x3}})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), r4)
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
munlock(&(0x7f0000ff6000/0xa000)=nil, 0xa000)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r4}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:30:02 executing program 2:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip_vti0\x00', r1, 0x0, 0x10, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x67, 0x0, 0x4, 0xb1fde26cf0cef217, 0x0, @private=0xa010100, @broadcast, {[@generic={0x7, 0x10, "98a1be21dcfff95b281d17e4850a"}]}}}}})
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', <r2=>r1, 0x4, 0x3, 0x40, 0x7, 0x2, @loopback, @loopback, 0x8021, 0x8, 0x3f, 0x1f}})
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', <r4=>r2, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000000c80)={'sit0\x00', &(0x7f0000000c00)={'sit0\x00', r4, 0x4, 0x80, 0x8, 0xafc, 0x18, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0xe, 0x8, 0x781, 0x3}})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), r3)
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
munlock(&(0x7f0000ff6000/0xa000)=nil, 0xa000)
sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x44, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x3a}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r3}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:30:02 executing program 6:
ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000))
ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000040))
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x8, 0x1, 0xb65, 0x8, {{0x15, 0x4, 0x2, 0x0, 0x54, 0x66, 0x0, 0x81, 0x2f, 0x0, @private=0xa010100, @multicast2, {[@end, @cipso={0x86, 0x29, 0x1, [{0x5, 0xf, "3e703dd712ca222ae8a3af2c04"}, {0x1, 0x7, "8caeda7b53"}, {0x0, 0xd, "3450bf32edd480c19ec31d"}]}, @timestamp={0x44, 0xc, 0x15, 0x0, 0x1, [0x3, 0x6]}, @ssrr={0x89, 0x7, 0x29, [@rand_addr=0x64010100]}]}}}}})
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000200)={0x7ff, 0x6, 0x100, 0x8, 0x15, "16fc41fd0b316794"})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index=0x7, 0x3, 0x1, 0x94b, 0x14}, 0x2)
sched_yield()
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x200040, 0x0)
pipe(&(0x7f0000000400))
ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000880)={0x0, 0x1, 0x1, 0xa, 0x174, &(0x7f0000000480)="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"})
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:30:02 executing program 5:
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:30:02 executing program 6:
ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000))
ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000040))
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x8, 0x1, 0xb65, 0x8, {{0x15, 0x4, 0x2, 0x0, 0x54, 0x66, 0x0, 0x81, 0x2f, 0x0, @private=0xa010100, @multicast2, {[@end, @cipso={0x86, 0x29, 0x1, [{0x5, 0xf, "3e703dd712ca222ae8a3af2c04"}, {0x1, 0x7, "8caeda7b53"}, {0x0, 0xd, "3450bf32edd480c19ec31d"}]}, @timestamp={0x44, 0xc, 0x15, 0x0, 0x1, [0x3, 0x6]}, @ssrr={0x89, 0x7, 0x29, [@rand_addr=0x64010100]}]}}}}})
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000200)={0x7ff, 0x6, 0x100, 0x8, 0x15, "16fc41fd0b316794"})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index=0x7, 0x3, 0x1, 0x94b, 0x14}, 0x2)
sched_yield()
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x200040, 0x0)
pipe(&(0x7f0000000400))
ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000880)={0x0, 0x1, 0x1, 0xa, 0x174, &(0x7f0000000480)="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"})
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:30:02 executing program 4:
ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000))
ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000040))
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080))
ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000100))
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000200)={0x7ff, 0x6, 0x100, 0x8, 0x15, "16fc41fd0b316794"})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index=0x7, 0x3, 0x1, 0x94b, 0x14}, 0x2)
openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x200040, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:30:02 executing program 0:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip_vti0\x00', <r2=>r1, 0x0, 0x10, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x67, 0x0, 0x4, 0xb1fde26cf0cef217, 0x0, @private=0xa010100, @broadcast, {[@generic={0x7, 0x10, "98a1be21dcfff95b281d17e4850a"}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', 0x0, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r3}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:30:02 executing program 5:
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:30:11 executing program 1:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip_vti0\x00', <r2=>r1, 0x0, 0x10, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x67, 0x0, 0x4, 0xb1fde26cf0cef217, 0x0, @private=0xa010100, @broadcast, {[@generic={0x7, 0x10, "98a1be21dcfff95b281d17e4850a"}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480)=0x5)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', 0x0, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r3}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:30:11 executing program 2:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip_vti0\x00', r1, 0x0, 0x10, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x67, 0x0, 0x4, 0xb1fde26cf0cef217, 0x0, @private=0xa010100, @broadcast, {[@generic={0x7, 0x10, "98a1be21dcfff95b281d17e4850a"}]}}}}})
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', <r2=>r1, 0x4, 0x3, 0x40, 0x7, 0x2, @loopback, @loopback, 0x8021, 0x8, 0x3f, 0x1f}})
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', <r4=>r2, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000000c80)={'sit0\x00', &(0x7f0000000c00)={'sit0\x00', r4, 0x4, 0x80, 0x8, 0xafc, 0x18, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0xe, 0x8, 0x781, 0x3}})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), r3)
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
munlock(&(0x7f0000ff6000/0xa000)=nil, 0xa000)
sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x44, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x3a}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r3}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:30:11 executing program 4:
ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000))
ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000040))
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=<r0=>0x0)
ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000100)=r0)
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000200)={0x7ff, 0x6, 0x100, 0x8, 0x15, "16fc41fd0b316794"})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index=0x7, 0x3, 0x1, 0x94b, 0x14}, 0x2)
openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x200040, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:30:11 executing program 0:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip_vti0\x00', <r2=>r1, 0x0, 0x10, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x67, 0x0, 0x4, 0xb1fde26cf0cef217, 0x0, @private=0xa010100, @broadcast, {[@generic={0x7, 0x10, "98a1be21dcfff95b281d17e4850a"}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', 0x0, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r3}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:30:11 executing program 7:
ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000))
ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000040))
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080))
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0))
openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x200040, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:30:11 executing program 5:
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
syz_io_uring_setup(0x0, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:30:11 executing program 6:
ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000))
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x8, 0x1, 0xb65, 0x8, {{0x15, 0x4, 0x2, 0x0, 0x54, 0x66, 0x0, 0x81, 0x2f, 0x0, @private=0xa010100, @multicast2, {[@end, @cipso={0x86, 0x29, 0x1, [{0x5, 0xf, "3e703dd712ca222ae8a3af2c04"}, {0x1, 0x7, "8caeda7b53"}, {0x0, 0xd, "3450bf32edd480c19ec31d"}]}, @timestamp={0x44, 0xc, 0x15, 0x0, 0x1, [0x3, 0x6]}, @ssrr={0x89, 0x7, 0x29, [@rand_addr=0x64010100]}]}}}}})
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000200)={0x7ff, 0x6, 0x100, 0x8, 0x15, "16fc41fd0b316794"})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index=0x7, 0x3, 0x1, 0x94b, 0x14}, 0x2)
sched_yield()
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x200040, 0x0)
pipe(&(0x7f0000000400))
ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000880)={0x0, 0x1, 0x1, 0xa, 0x174, &(0x7f0000000480)="5edb89eaad007f1a706b88cb3a9480a5562c7e564ce1a22c8df8f726fe37b4d862d84daee9ed2138f78aa73236b0f8aa29f6887a95c11b5632235b1ca585ef6e2b7d79ce6c276e0c0189f2f6db5247a5ab874e166f440f821e03103a32a9272c814236d289278b79c32ebf6ba6c5233b1f7a4d2c44a2a71cdb392a600e64a4af7a10fa0a8bea9cc5b90e126f49978fef66f5ade48a06d597417f758954e92a0a4c12a021983aaf60aa29f6cab1b2823a791039220ac2a52293635f2edb83dc426f276233492c81c2ed499c54fbb8111cfc01333e31d1e6284939f8b46349b320a0f165c6b1c7112dc9f76df0ed194c098450de5466e14e767d16039e649dfed15123f0380ac5b45a6af5920aac7b058e5bfb4e3eadc9d8465048073c050bb96ee01990875b09cf164a282a1f3e8b3ccf3f76077eace47e8d2f1e0a2a5fc00477ef309fd57c0d845dd2d86350e999349ff41d6a82704dabf9081eea0a228feb9308a03b69844b13d48b7082865047eefa7a70bfea6488322c7739c6446fbe0afb052a520dc3bd0c78b19c73e16ce0ef6ea5b883876cf677537b667fbcb430fd5f773ad2b86f4db609c89166cfbb4a090a35769055a68c45bbc8c58c8e9ba527a211a12730b3295be141c2092f17b2d8df1b02c3b3e06955d667737d8888eceae78b0888e09713470bdf19ddcd4ad497d41b41e6b4df45662e6801b4216c1965e3df45e645f9253fe67bd0f65d37a052bab9769a2a32c0da67496cddd7752b34f4a10cface1f531869f24d11733334baf3fa8b8450261d61f41218716e36c4edb502ba59ce7f4ac2abc53ca940fc92dbadeff2ba66debdf785776147c5709f31927a7e081883ef681b6591e9259fa33541c087f7884b2778a0cc839781be052050d3c71ea8d886c129b61e6bfcf4686934f18da4e7cede143e9c0db819675b4e1aeb1f87efafdb0279dd6d5d5b0efcd6a8e7c55141fc7ecfd50dd8cb9879e3768b4d6c481a7c310609e987303254bee0461c5fcd6cd35b46361b6b221894bc6153ef150d4f9e7d2f0fe479e3c71f17dc51dc39ed12e66dab898a54a232b675dfe4e7bb637fef8ea611585fcb66d3ee54dff31967f0089e47d249daffd1e014e2c2e11ca9e357b483c8b0e6c1d890874830f5d54b2b9f057b62a3ea0175bce6545ae55f523618384a2beb7f095f8882ce7105e10fc0b0cdc040c1c8da0eddfa642cd0e02ac42c9218617a0a6cf440752d8c8ec9bcb6e25c35b8636dcdee315811155b500e52911b3dc3c9f7a2d50cfbd560c6db46ca8d5614f047c048cbbdf9df5865916321f5533ce617005da2b39bfa433856a2f73d5ad40b97c7787feaf990de49222fd58d0f535b458f5f1ce067ddf0fb0d56ada3ae5e7d43afcc9ff15eb9e5706f6c902adfd4f8d38f4d8ef8832a070c739d7a4515d0aa75643597f71d7753"})
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:30:11 executing program 3:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip_vti0\x00', <r2=>r1, 0x0, 0x10, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x67, 0x0, 0x4, 0xb1fde26cf0cef217, 0x0, @private=0xa010100, @broadcast, {[@generic={0x7, 0x10, "98a1be21dcfff95b281d17e4850a"}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', <r3=>r1, 0x4, 0x3, 0x40, 0x7, 0x2, @loopback, @loopback, 0x8021, 0x8, 0x3f, 0x1f}})
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', <r5=>r3, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r4, 0x89f9, &(0x7f0000000c80)={'sit0\x00', &(0x7f0000000c00)={'sit0\x00', r5, 0x4, 0x80, 0x8, 0xafc, 0x18, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0xe, 0x8, 0x781, 0x3}})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), r4)
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
munlock(&(0x7f0000ff6000/0xa000)=nil, 0xa000)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r4}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:30:11 executing program 5:
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
syz_io_uring_setup(0x0, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:30:11 executing program 1:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip_vti0\x00', <r2=>r1, 0x0, 0x10, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x67, 0x0, 0x4, 0xb1fde26cf0cef217, 0x0, @private=0xa010100, @broadcast, {[@generic={0x7, 0x10, "98a1be21dcfff95b281d17e4850a"}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480)=0x5)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', 0x0, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)

06:30:11 executing program 5:
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
syz_io_uring_setup(0x0, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:30:11 executing program 3:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip_vti0\x00', <r2=>r1, 0x0, 0x10, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x67, 0x0, 0x4, 0xb1fde26cf0cef217, 0x0, @private=0xa010100, @broadcast, {[@generic={0x7, 0x10, "98a1be21dcfff95b281d17e4850a"}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', <r3=>r1, 0x4, 0x3, 0x40, 0x7, 0x2, @loopback, @loopback, 0x8021, 0x8, 0x3f, 0x1f}})
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', <r5=>r3, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r4, 0x89f9, &(0x7f0000000c80)={'sit0\x00', &(0x7f0000000c00)={'sit0\x00', r5, 0x4, 0x80, 0x8, 0xafc, 0x18, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0xe, 0x8, 0x781, 0x3}})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), r4)
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r4}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:30:11 executing program 5:
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
syz_io_uring_setup(0xb88, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:30:11 executing program 6:
ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000))
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x8, 0x1, 0xb65, 0x8, {{0x15, 0x4, 0x2, 0x0, 0x54, 0x66, 0x0, 0x81, 0x2f, 0x0, @private=0xa010100, @multicast2, {[@end, @cipso={0x86, 0x29, 0x1, [{0x5, 0xf, "3e703dd712ca222ae8a3af2c04"}, {0x1, 0x7, "8caeda7b53"}, {0x0, 0xd, "3450bf32edd480c19ec31d"}]}, @timestamp={0x44, 0xc, 0x15, 0x0, 0x1, [0x3, 0x6]}, @ssrr={0x89, 0x7, 0x29, [@rand_addr=0x64010100]}]}}}}})
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000200)={0x7ff, 0x6, 0x100, 0x8, 0x15, "16fc41fd0b316794"})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index=0x7, 0x3, 0x1, 0x94b, 0x14}, 0x2)
sched_yield()
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x200040, 0x0)
pipe(&(0x7f0000000400))
ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000880)={0x0, 0x1, 0x1, 0xa, 0x174, &(0x7f0000000480)="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"})
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:30:11 executing program 4:
ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000))
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=<r0=>0x0)
ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000100)=r0)
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000200)={0x7ff, 0x6, 0x100, 0x8, 0x15, "16fc41fd0b316794"})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index=0x7, 0x3, 0x1, 0x94b, 0x14}, 0x2)
openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x200040, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:30:20 executing program 6:
ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000))
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x8, 0x1, 0xb65, 0x8, {{0x15, 0x4, 0x2, 0x0, 0x54, 0x66, 0x0, 0x81, 0x2f, 0x0, @private=0xa010100, @multicast2, {[@end, @cipso={0x86, 0x29, 0x1, [{0x5, 0xf, "3e703dd712ca222ae8a3af2c04"}, {0x1, 0x7, "8caeda7b53"}, {0x0, 0xd, "3450bf32edd480c19ec31d"}]}, @timestamp={0x44, 0xc, 0x15, 0x0, 0x1, [0x3, 0x6]}, @ssrr={0x89, 0x7, 0x29, [@rand_addr=0x64010100]}]}}}}})
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000200)={0x7ff, 0x6, 0x100, 0x8, 0x15, "16fc41fd0b316794"})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index=0x7, 0x3, 0x1, 0x94b, 0x14}, 0x2)
sched_yield()
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x200040, 0x0)
pipe(&(0x7f0000000400))
ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000880)={0x0, 0x1, 0x1, 0xa, 0x174, &(0x7f0000000480)="5edb89eaad007f1a706b88cb3a9480a5562c7e564ce1a22c8df8f726fe37b4d862d84daee9ed2138f78aa73236b0f8aa29f6887a95c11b5632235b1ca585ef6e2b7d79ce6c276e0c0189f2f6db5247a5ab874e166f440f821e03103a32a9272c814236d289278b79c32ebf6ba6c5233b1f7a4d2c44a2a71cdb392a600e64a4af7a10fa0a8bea9cc5b90e126f49978fef66f5ade48a06d597417f758954e92a0a4c12a021983aaf60aa29f6cab1b2823a791039220ac2a52293635f2edb83dc426f276233492c81c2ed499c54fbb8111cfc01333e31d1e6284939f8b46349b320a0f165c6b1c7112dc9f76df0ed194c098450de5466e14e767d16039e649dfed15123f0380ac5b45a6af5920aac7b058e5bfb4e3eadc9d8465048073c050bb96ee01990875b09cf164a282a1f3e8b3ccf3f76077eace47e8d2f1e0a2a5fc00477ef309fd57c0d845dd2d86350e999349ff41d6a82704dabf9081eea0a228feb9308a03b69844b13d48b7082865047eefa7a70bfea6488322c7739c6446fbe0afb052a520dc3bd0c78b19c73e16ce0ef6ea5b883876cf677537b667fbcb430fd5f773ad2b86f4db609c89166cfbb4a090a35769055a68c45bbc8c58c8e9ba527a211a12730b3295be141c2092f17b2d8df1b02c3b3e06955d667737d8888eceae78b0888e09713470bdf19ddcd4ad497d41b41e6b4df45662e6801b4216c1965e3df45e645f9253fe67bd0f65d37a052bab9769a2a32c0da67496cddd7752b34f4a10cface1f531869f24d11733334baf3fa8b8450261d61f41218716e36c4edb502ba59ce7f4ac2abc53ca940fc92dbadeff2ba66debdf785776147c5709f31927a7e081883ef681b6591e9259fa33541c087f7884b2778a0cc839781be052050d3c71ea8d886c129b61e6bfcf4686934f18da4e7cede143e9c0db819675b4e1aeb1f87efafdb0279dd6d5d5b0efcd6a8e7c55141fc7ecfd50dd8cb9879e3768b4d6c481a7c310609e987303254bee0461c5fcd6cd35b46361b6b221894bc6153ef150d4f9e7d2f0fe479e3c71f17dc51dc39ed12e66dab898a54a232b675dfe4e7bb637fef8ea611585fcb66d3ee54dff31967f0089e47d249daffd1e014e2c2e11ca9e357b483c8b0e6c1d890874830f5d54b2b9f057b62a3ea0175bce6545ae55f523618384a2beb7f095f8882ce7105e10fc0b0cdc040c1c8da0eddfa642cd0e02ac42c9218617a0a6cf440752d8c8ec9bcb6e25c35b8636dcdee315811155b500e52911b3dc3c9f7a2d50cfbd560c6db46ca8d5614f047c048cbbdf9df5865916321f5533ce617005da2b39bfa433856a2f73d5ad40b97c7787feaf990de49222fd58d0f535b458f5f1ce067ddf0fb0d56ada3ae5e7d43afcc9ff15eb9e5706f6c902adfd4f8d38f4d8ef8832a070c739d7a4515d0aa75643597f71d7753"})
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:30:20 executing program 4:
ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000))
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=<r0=>0x0)
ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000100)=r0)
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000200)={0x7ff, 0x6, 0x100, 0x8, 0x15, "16fc41fd0b316794"})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index=0x7, 0x3, 0x1, 0x94b, 0x14}, 0x2)
openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x200040, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:30:20 executing program 7:
ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000))
ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000040))
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080))
openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x200040, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:30:20 executing program 5:
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
syz_io_uring_setup(0xb88, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:30:20 executing program 0:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip_vti0\x00', <r2=>r1, 0x0, 0x10, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x67, 0x0, 0x4, 0xb1fde26cf0cef217, 0x0, @private=0xa010100, @broadcast, {[@generic={0x7, 0x10, "98a1be21dcfff95b281d17e4850a"}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', 0x0, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r3}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:30:20 executing program 3:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip_vti0\x00', <r2=>r1, 0x0, 0x10, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x67, 0x0, 0x4, 0xb1fde26cf0cef217, 0x0, @private=0xa010100, @broadcast, {[@generic={0x7, 0x10, "98a1be21dcfff95b281d17e4850a"}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', <r3=>r1, 0x4, 0x3, 0x40, 0x7, 0x2, @loopback, @loopback, 0x8021, 0x8, 0x3f, 0x1f}})
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', <r5=>r3, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r4, 0x89f9, &(0x7f0000000c80)={'sit0\x00', &(0x7f0000000c00)={'sit0\x00', r5, 0x4, 0x80, 0x8, 0xafc, 0x18, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0xe, 0x8, 0x781, 0x3}})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), r4)
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r4}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:30:20 executing program 2:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', <r2=>r1, 0x4, 0x3, 0x40, 0x7, 0x2, @loopback, @loopback, 0x8021, 0x8, 0x3f, 0x1f}})
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', <r4=>r2, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000000c80)={'sit0\x00', &(0x7f0000000c00)={'sit0\x00', r4, 0x4, 0x80, 0x8, 0xafc, 0x18, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0xe, 0x8, 0x781, 0x3}})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), r3)
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
munlock(&(0x7f0000ff6000/0xa000)=nil, 0xa000)
sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x44, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x3a}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r3}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:30:20 executing program 1:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip_vti0\x00', <r2=>r1, 0x0, 0x10, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x67, 0x0, 0x4, 0xb1fde26cf0cef217, 0x0, @private=0xa010100, @broadcast, {[@generic={0x7, 0x10, "98a1be21dcfff95b281d17e4850a"}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480)=0x5)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', 0x0, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)

06:30:20 executing program 5:
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
syz_io_uring_setup(0xb88, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:30:20 executing program 6:
ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000040))
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x8, 0x1, 0xb65, 0x8, {{0x15, 0x4, 0x2, 0x0, 0x54, 0x66, 0x0, 0x81, 0x2f, 0x0, @private=0xa010100, @multicast2, {[@end, @cipso={0x86, 0x29, 0x1, [{0x5, 0xf, "3e703dd712ca222ae8a3af2c04"}, {0x1, 0x7, "8caeda7b53"}, {0x0, 0xd, "3450bf32edd480c19ec31d"}]}, @timestamp={0x44, 0xc, 0x15, 0x0, 0x1, [0x3, 0x6]}, @ssrr={0x89, 0x7, 0x29, [@rand_addr=0x64010100]}]}}}}})
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000200)={0x7ff, 0x6, 0x100, 0x8, 0x15, "16fc41fd0b316794"})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index=0x7, 0x3, 0x1, 0x94b, 0x14}, 0x2)
sched_yield()
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x200040, 0x0)
pipe(&(0x7f0000000400))
ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000880)={0x0, 0x1, 0x1, 0xa, 0x174, &(0x7f0000000480)="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"})
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:30:20 executing program 4:
ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000))
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=<r0=>0x0)
ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000100)=r0)
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000200)={0x7ff, 0x6, 0x100, 0x8, 0x15, "16fc41fd0b316794"})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index=0x7, 0x3, 0x1, 0x94b, 0x14}, 0x2)
openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x200040, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:30:20 executing program 3:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip_vti0\x00', <r2=>r1, 0x0, 0x10, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x67, 0x0, 0x4, 0xb1fde26cf0cef217, 0x0, @private=0xa010100, @broadcast, {[@generic={0x7, 0x10, "98a1be21dcfff95b281d17e4850a"}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', <r3=>r1, 0x4, 0x3, 0x40, 0x7, 0x2, @loopback, @loopback, 0x8021, 0x8, 0x3f, 0x1f}})
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', <r5=>r3, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r4, 0x89f9, &(0x7f0000000c80)={'sit0\x00', &(0x7f0000000c00)={'sit0\x00', r5, 0x4, 0x80, 0x8, 0xafc, 0x18, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0xe, 0x8, 0x781, 0x3}})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), r4)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r4}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:30:20 executing program 0:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip_vti0\x00', <r2=>r1, 0x0, 0x10, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x67, 0x0, 0x4, 0xb1fde26cf0cef217, 0x0, @private=0xa010100, @broadcast, {[@generic={0x7, 0x10, "98a1be21dcfff95b281d17e4850a"}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480)=0x5)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', 0x0, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r3}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:30:20 executing program 2:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', <r2=>r1, 0x4, 0x3, 0x40, 0x7, 0x2, @loopback, @loopback, 0x8021, 0x8, 0x3f, 0x1f}})
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', <r4=>r2, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000000c80)={'sit0\x00', &(0x7f0000000c00)={'sit0\x00', r4, 0x4, 0x80, 0x8, 0xafc, 0x18, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0xe, 0x8, 0x781, 0x3}})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), r3)
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
munlock(&(0x7f0000ff6000/0xa000)=nil, 0xa000)
sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x44, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x3a}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r3}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:30:20 executing program 7:
ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000))
ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000040))
openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x200040, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:30:20 executing program 5:
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x0, 0x8, 0x3, 0x247}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:30:20 executing program 1:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip_vti0\x00', <r2=>r1, 0x0, 0x10, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x67, 0x0, 0x4, 0xb1fde26cf0cef217, 0x0, @private=0xa010100, @broadcast, {[@generic={0x7, 0x10, "98a1be21dcfff95b281d17e4850a"}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480)=0x5)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', 0x0, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)

06:30:20 executing program 5:
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x0, 0x8, 0x3, 0x247}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:30:28 executing program 4:
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=<r0=>0x0)
ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000100)=r0)
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000200)={0x7ff, 0x6, 0x100, 0x8, 0x15, "16fc41fd0b316794"})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index=0x7, 0x3, 0x1, 0x94b, 0x14}, 0x2)
openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x200040, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:30:28 executing program 2:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', <r2=>r1, 0x4, 0x3, 0x40, 0x7, 0x2, @loopback, @loopback, 0x8021, 0x8, 0x3f, 0x1f}})
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', <r4=>r2, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000000c80)={'sit0\x00', &(0x7f0000000c00)={'sit0\x00', r4, 0x4, 0x80, 0x8, 0xafc, 0x18, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0xe, 0x8, 0x781, 0x3}})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), r3)
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
munlock(&(0x7f0000ff6000/0xa000)=nil, 0xa000)
sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x44, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x3a}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r3}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:30:28 executing program 0:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip_vti0\x00', <r2=>r1, 0x0, 0x10, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x67, 0x0, 0x4, 0xb1fde26cf0cef217, 0x0, @private=0xa010100, @broadcast, {[@generic={0x7, 0x10, "98a1be21dcfff95b281d17e4850a"}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480)=0x5)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', 0x0, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r3}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:30:28 executing program 7:
ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000))
openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x200040, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:30:28 executing program 5:
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x0, 0x8, 0x3, 0x247}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:30:28 executing program 6:
ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x8, 0x1, 0xb65, 0x8, {{0x15, 0x4, 0x2, 0x0, 0x54, 0x66, 0x0, 0x81, 0x2f, 0x0, @private=0xa010100, @multicast2, {[@end, @cipso={0x86, 0x29, 0x1, [{0x5, 0xf, "3e703dd712ca222ae8a3af2c04"}, {0x1, 0x7, "8caeda7b53"}, {0x0, 0xd, "3450bf32edd480c19ec31d"}]}, @timestamp={0x44, 0xc, 0x15, 0x0, 0x1, [0x3, 0x6]}, @ssrr={0x89, 0x7, 0x29, [@rand_addr=0x64010100]}]}}}}})
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000200)={0x7ff, 0x6, 0x100, 0x8, 0x15, "16fc41fd0b316794"})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index=0x7, 0x3, 0x1, 0x94b, 0x14}, 0x2)
sched_yield()
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x200040, 0x0)
pipe(&(0x7f0000000400))
ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000880)={0x0, 0x1, 0x1, 0xa, 0x174, &(0x7f0000000480)="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"})
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:30:28 executing program 1:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip_vti0\x00', <r2=>r1, 0x0, 0x10, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x67, 0x0, 0x4, 0xb1fde26cf0cef217, 0x0, @private=0xa010100, @broadcast, {[@generic={0x7, 0x10, "98a1be21dcfff95b281d17e4850a"}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480)=0x5)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', 0x0, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r3}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:30:28 executing program 3:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip_vti0\x00', <r2=>r1, 0x0, 0x10, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x67, 0x0, 0x4, 0xb1fde26cf0cef217, 0x0, @private=0xa010100, @broadcast, {[@generic={0x7, 0x10, "98a1be21dcfff95b281d17e4850a"}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', <r3=>r1, 0x4, 0x3, 0x40, 0x7, 0x2, @loopback, @loopback, 0x8021, 0x8, 0x3f, 0x1f}})
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', <r5=>r3, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r4, 0x89f9, &(0x7f0000000c80)={'sit0\x00', &(0x7f0000000c00)={'sit0\x00', r5, 0x4, 0x80, 0x8, 0xafc, 0x18, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0xe, 0x8, 0x781, 0x3}})
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r4}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:30:29 executing program 5:
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x0, 0x3, 0x247}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:30:29 executing program 4:
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=<r0=>0x0)
ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000100)=r0)
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000200)={0x7ff, 0x6, 0x100, 0x8, 0x15, "16fc41fd0b316794"})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index=0x7, 0x3, 0x1, 0x94b, 0x14}, 0x2)
openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x200040, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:30:29 executing program 2:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', <r2=>r1, 0x4, 0x3, 0x40, 0x7, 0x2, @loopback, @loopback, 0x8021, 0x8, 0x3f, 0x1f}})
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', <r4=>r2, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000000c80)={'sit0\x00', &(0x7f0000000c00)={'sit0\x00', r4, 0x4, 0x80, 0x8, 0xafc, 0x18, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0xe, 0x8, 0x781, 0x3}})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), r3)
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
munlock(&(0x7f0000ff6000/0xa000)=nil, 0xa000)
sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x44, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x3a}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r3}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:30:29 executing program 1:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip_vti0\x00', <r2=>r1, 0x0, 0x10, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x67, 0x0, 0x4, 0xb1fde26cf0cef217, 0x0, @private=0xa010100, @broadcast, {[@generic={0x7, 0x10, "98a1be21dcfff95b281d17e4850a"}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480)=0x5)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', 0x0, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r3}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:30:29 executing program 7:
ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000))
openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x200040, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:30:29 executing program 6:
ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x8, 0x1, 0xb65, 0x8, {{0x15, 0x4, 0x2, 0x0, 0x54, 0x66, 0x0, 0x81, 0x2f, 0x0, @private=0xa010100, @multicast2, {[@end, @cipso={0x86, 0x29, 0x1, [{0x5, 0xf, "3e703dd712ca222ae8a3af2c04"}, {0x1, 0x7, "8caeda7b53"}, {0x0, 0xd, "3450bf32edd480c19ec31d"}]}, @timestamp={0x44, 0xc, 0x15, 0x0, 0x1, [0x3, 0x6]}, @ssrr={0x89, 0x7, 0x29, [@rand_addr=0x64010100]}]}}}}})
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000200)={0x7ff, 0x6, 0x100, 0x8, 0x15, "16fc41fd0b316794"})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index=0x7, 0x3, 0x1, 0x94b, 0x14}, 0x2)
sched_yield()
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x200040, 0x0)
pipe(&(0x7f0000000400))
ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000880)={0x0, 0x1, 0x1, 0xa, 0x174, &(0x7f0000000480)="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"})
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:30:29 executing program 0:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip_vti0\x00', <r2=>r1, 0x0, 0x10, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x67, 0x0, 0x4, 0xb1fde26cf0cef217, 0x0, @private=0xa010100, @broadcast, {[@generic={0x7, 0x10, "98a1be21dcfff95b281d17e4850a"}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480)=0x5)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', 0x0, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r3}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:30:37 executing program 7:
ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000))
openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x200040, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:30:37 executing program 4:
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=<r0=>0x0)
ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000100)=r0)
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000200)={0x7ff, 0x6, 0x100, 0x8, 0x15, "16fc41fd0b316794"})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index=0x7, 0x3, 0x1, 0x94b, 0x14}, 0x2)
openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x200040, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:30:37 executing program 5:
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x0, 0x3, 0x247}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:30:37 executing program 1:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip_vti0\x00', <r2=>r1, 0x0, 0x10, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x67, 0x0, 0x4, 0xb1fde26cf0cef217, 0x0, @private=0xa010100, @broadcast, {[@generic={0x7, 0x10, "98a1be21dcfff95b281d17e4850a"}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480)=0x5)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', 0x0, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r3}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:30:37 executing program 6:
ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x8, 0x1, 0xb65, 0x8, {{0x15, 0x4, 0x2, 0x0, 0x54, 0x66, 0x0, 0x81, 0x2f, 0x0, @private=0xa010100, @multicast2, {[@end, @cipso={0x86, 0x29, 0x1, [{0x5, 0xf, "3e703dd712ca222ae8a3af2c04"}, {0x1, 0x7, "8caeda7b53"}, {0x0, 0xd, "3450bf32edd480c19ec31d"}]}, @timestamp={0x44, 0xc, 0x15, 0x0, 0x1, [0x3, 0x6]}, @ssrr={0x89, 0x7, 0x29, [@rand_addr=0x64010100]}]}}}}})
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000200)={0x7ff, 0x6, 0x100, 0x8, 0x15, "16fc41fd0b316794"})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index=0x7, 0x3, 0x1, 0x94b, 0x14}, 0x2)
sched_yield()
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x200040, 0x0)
pipe(&(0x7f0000000400))
ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000880)={0x0, 0x1, 0x1, 0xa, 0x174, &(0x7f0000000480)="5edb89eaad007f1a706b88cb3a9480a5562c7e564ce1a22c8df8f726fe37b4d862d84daee9ed2138f78aa73236b0f8aa29f6887a95c11b5632235b1ca585ef6e2b7d79ce6c276e0c0189f2f6db5247a5ab874e166f440f821e03103a32a9272c814236d289278b79c32ebf6ba6c5233b1f7a4d2c44a2a71cdb392a600e64a4af7a10fa0a8bea9cc5b90e126f49978fef66f5ade48a06d597417f758954e92a0a4c12a021983aaf60aa29f6cab1b2823a791039220ac2a52293635f2edb83dc426f276233492c81c2ed499c54fbb8111cfc01333e31d1e6284939f8b46349b320a0f165c6b1c7112dc9f76df0ed194c098450de5466e14e767d16039e649dfed15123f0380ac5b45a6af5920aac7b058e5bfb4e3eadc9d8465048073c050bb96ee01990875b09cf164a282a1f3e8b3ccf3f76077eace47e8d2f1e0a2a5fc00477ef309fd57c0d845dd2d86350e999349ff41d6a82704dabf9081eea0a228feb9308a03b69844b13d48b7082865047eefa7a70bfea6488322c7739c6446fbe0afb052a520dc3bd0c78b19c73e16ce0ef6ea5b883876cf677537b667fbcb430fd5f773ad2b86f4db609c89166cfbb4a090a35769055a68c45bbc8c58c8e9ba527a211a12730b3295be141c2092f17b2d8df1b02c3b3e06955d667737d8888eceae78b0888e09713470bdf19ddcd4ad497d41b41e6b4df45662e6801b4216c1965e3df45e645f9253fe67bd0f65d37a052bab9769a2a32c0da67496cddd7752b34f4a10cface1f531869f24d11733334baf3fa8b8450261d61f41218716e36c4edb502ba59ce7f4ac2abc53ca940fc92dbadeff2ba66debdf785776147c5709f31927a7e081883ef681b6591e9259fa33541c087f7884b2778a0cc839781be052050d3c71ea8d886c129b61e6bfcf4686934f18da4e7cede143e9c0db819675b4e1aeb1f87efafdb0279dd6d5d5b0efcd6a8e7c55141fc7ecfd50dd8cb9879e3768b4d6c481a7c310609e987303254bee0461c5fcd6cd35b46361b6b221894bc6153ef150d4f9e7d2f0fe479e3c71f17dc51dc39ed12e66dab898a54a232b675dfe4e7bb637fef8ea611585fcb66d3ee54dff31967f0089e47d249daffd1e014e2c2e11ca9e357b483c8b0e6c1d890874830f5d54b2b9f057b62a3ea0175bce6545ae55f523618384a2beb7f095f8882ce7105e10fc0b0cdc040c1c8da0eddfa642cd0e02ac42c9218617a0a6cf440752d8c8ec9bcb6e25c35b8636dcdee315811155b500e52911b3dc3c9f7a2d50cfbd560c6db46ca8d5614f047c048cbbdf9df5865916321f5533ce617005da2b39bfa433856a2f73d5ad40b97c7787feaf990de49222fd58d0f535b458f5f1ce067ddf0fb0d56ada3ae5e7d43afcc9ff15eb9e5706f6c902adfd4f8d38f4d8ef8832a070c739d7a4515d0aa75643597f71d7753"})
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:30:37 executing program 2:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', <r2=>r1, 0x4, 0x3, 0x40, 0x7, 0x2, @loopback, @loopback, 0x8021, 0x8, 0x3f, 0x1f}})
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', <r4=>r2, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000000c80)={'sit0\x00', &(0x7f0000000c00)={'sit0\x00', r4, 0x4, 0x80, 0x8, 0xafc, 0x18, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0xe, 0x8, 0x781, 0x3}})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), r3)
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
munlock(&(0x7f0000ff6000/0xa000)=nil, 0xa000)
sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x44, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x3a}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r3}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:30:37 executing program 0:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip_vti0\x00', r1, 0x0, 0x10, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x67, 0x0, 0x4, 0xb1fde26cf0cef217, 0x0, @private=0xa010100, @broadcast, {[@generic={0x7, 0x10, "98a1be21dcfff95b281d17e4850a"}]}}}}})
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480)=0x5)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', 0x0, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:30:37 executing program 3:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip_vti0\x00', <r2=>r1, 0x0, 0x10, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x67, 0x0, 0x4, 0xb1fde26cf0cef217, 0x0, @private=0xa010100, @broadcast, {[@generic={0x7, 0x10, "98a1be21dcfff95b281d17e4850a"}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', <r3=>r1, 0x4, 0x3, 0x40, 0x7, 0x2, @loopback, @loopback, 0x8021, 0x8, 0x3f, 0x1f}})
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', r3, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r4}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:30:37 executing program 5:
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x0, 0x3, 0x247}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:30:37 executing program 4:
ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=<r0=>0x0)
ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000100)=r0)
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000200)={0x7ff, 0x6, 0x100, 0x8, 0x15, "16fc41fd0b316794"})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index=0x7, 0x3, 0x1, 0x94b, 0x14}, 0x2)
openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x200040, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:30:37 executing program 6:
ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000200)={0x7ff, 0x6, 0x100, 0x8, 0x15, "16fc41fd0b316794"})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index=0x7, 0x3, 0x1, 0x94b, 0x14}, 0x2)
sched_yield()
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x200040, 0x0)
pipe(&(0x7f0000000400))
ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000880)={0x0, 0x1, 0x1, 0xa, 0x174, &(0x7f0000000480)="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"})
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:30:37 executing program 5:
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x0, 0x247}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:30:37 executing program 2:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', <r2=>r1, 0x4, 0x3, 0x40, 0x7, 0x2, @loopback, @loopback, 0x8021, 0x8, 0x3f, 0x1f}})
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', <r4=>r2, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000000c80)={'sit0\x00', &(0x7f0000000c00)={'sit0\x00', r4, 0x4, 0x80, 0x8, 0xafc, 0x18, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0xe, 0x8, 0x781, 0x3}})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), r3)
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
munlock(&(0x7f0000ff6000/0xa000)=nil, 0xa000)
sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x44, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x3a}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r3}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:30:46 executing program 5:
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:30:46 executing program 2:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', <r2=>r1, 0x4, 0x3, 0x40, 0x7, 0x2, @loopback, @loopback, 0x8021, 0x8, 0x3f, 0x1f}})
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', <r4=>r2, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000000c80)={'sit0\x00', &(0x7f0000000c00)={'sit0\x00', r4, 0x4, 0x80, 0x8, 0xafc, 0x18, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0xe, 0x8, 0x781, 0x3}})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), r3)
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
munlock(&(0x7f0000ff6000/0xa000)=nil, 0xa000)
sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x44, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x3a}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r3}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:30:46 executing program 4:
ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0)
ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000100))
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000200)={0x7ff, 0x6, 0x100, 0x8, 0x15, "16fc41fd0b316794"})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index=0x7, 0x3, 0x1, 0x94b, 0x14}, 0x2)
openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x200040, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:30:46 executing program 6:
ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
ioctl$TCSETA(0xffffffffffffffff, 0x5406, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index=0x7, 0x3, 0x1, 0x94b, 0x14}, 0x2)
sched_yield()
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x200040, 0x0)
pipe(&(0x7f0000000400))
ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000880)={0x0, 0x1, 0x1, 0xa, 0x174, &(0x7f0000000480)="5edb89eaad007f1a706b88cb3a9480a5562c7e564ce1a22c8df8f726fe37b4d862d84daee9ed2138f78aa73236b0f8aa29f6887a95c11b5632235b1ca585ef6e2b7d79ce6c276e0c0189f2f6db5247a5ab874e166f440f821e03103a32a9272c814236d289278b79c32ebf6ba6c5233b1f7a4d2c44a2a71cdb392a600e64a4af7a10fa0a8bea9cc5b90e126f49978fef66f5ade48a06d597417f758954e92a0a4c12a021983aaf60aa29f6cab1b2823a791039220ac2a52293635f2edb83dc426f276233492c81c2ed499c54fbb8111cfc01333e31d1e6284939f8b46349b320a0f165c6b1c7112dc9f76df0ed194c098450de5466e14e767d16039e649dfed15123f0380ac5b45a6af5920aac7b058e5bfb4e3eadc9d8465048073c050bb96ee01990875b09cf164a282a1f3e8b3ccf3f76077eace47e8d2f1e0a2a5fc00477ef309fd57c0d845dd2d86350e999349ff41d6a82704dabf9081eea0a228feb9308a03b69844b13d48b7082865047eefa7a70bfea6488322c7739c6446fbe0afb052a520dc3bd0c78b19c73e16ce0ef6ea5b883876cf677537b667fbcb430fd5f773ad2b86f4db609c89166cfbb4a090a35769055a68c45bbc8c58c8e9ba527a211a12730b3295be141c2092f17b2d8df1b02c3b3e06955d667737d8888eceae78b0888e09713470bdf19ddcd4ad497d41b41e6b4df45662e6801b4216c1965e3df45e645f9253fe67bd0f65d37a052bab9769a2a32c0da67496cddd7752b34f4a10cface1f531869f24d11733334baf3fa8b8450261d61f41218716e36c4edb502ba59ce7f4ac2abc53ca940fc92dbadeff2ba66debdf785776147c5709f31927a7e081883ef681b6591e9259fa33541c087f7884b2778a0cc839781be052050d3c71ea8d886c129b61e6bfcf4686934f18da4e7cede143e9c0db819675b4e1aeb1f87efafdb0279dd6d5d5b0efcd6a8e7c55141fc7ecfd50dd8cb9879e3768b4d6c481a7c310609e987303254bee0461c5fcd6cd35b46361b6b221894bc6153ef150d4f9e7d2f0fe479e3c71f17dc51dc39ed12e66dab898a54a232b675dfe4e7bb637fef8ea611585fcb66d3ee54dff31967f0089e47d249daffd1e014e2c2e11ca9e357b483c8b0e6c1d890874830f5d54b2b9f057b62a3ea0175bce6545ae55f523618384a2beb7f095f8882ce7105e10fc0b0cdc040c1c8da0eddfa642cd0e02ac42c9218617a0a6cf440752d8c8ec9bcb6e25c35b8636dcdee315811155b500e52911b3dc3c9f7a2d50cfbd560c6db46ca8d5614f047c048cbbdf9df5865916321f5533ce617005da2b39bfa433856a2f73d5ad40b97c7787feaf990de49222fd58d0f535b458f5f1ce067ddf0fb0d56ada3ae5e7d43afcc9ff15eb9e5706f6c902adfd4f8d38f4d8ef8832a070c739d7a4515d0aa75643597f71d7753"})
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:30:46 executing program 7:
openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x200040, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:30:46 executing program 0:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480)=0x5)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', 0x0, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:30:46 executing program 1:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip_vti0\x00', <r2=>r1, 0x0, 0x10, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x67, 0x0, 0x4, 0xb1fde26cf0cef217, 0x0, @private=0xa010100, @broadcast, {[@generic={0x7, 0x10, "98a1be21dcfff95b281d17e4850a"}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480)=0x5)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r3}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:30:46 executing program 3:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip_vti0\x00', <r2=>r1, 0x0, 0x10, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x67, 0x0, 0x4, 0xb1fde26cf0cef217, 0x0, @private=0xa010100, @broadcast, {[@generic={0x7, 0x10, "98a1be21dcfff95b281d17e4850a"}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', <r3=>r1, 0x4, 0x3, 0x40, 0x7, 0x2, @loopback, @loopback, 0x8021, 0x8, 0x3f, 0x1f}})
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', r3, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r4}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:30:46 executing program 5:
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, 0x0, &(0x7f00000010c0))

06:30:46 executing program 7:
openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x200040, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:30:46 executing program 1:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip_vti0\x00', <r2=>r1, 0x0, 0x10, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x67, 0x0, 0x4, 0xb1fde26cf0cef217, 0x0, @private=0xa010100, @broadcast, {[@generic={0x7, 0x10, "98a1be21dcfff95b281d17e4850a"}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480)=0x5)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r3}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:30:46 executing program 4:
ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0)
ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000100))
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000200)={0x7ff, 0x6, 0x100, 0x8, 0x15, "16fc41fd0b316794"})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index=0x7, 0x3, 0x1, 0x94b, 0x14}, 0x2)
openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x200040, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:30:46 executing program 5:
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, 0x0, &(0x7f00000010c0))

06:30:46 executing program 3:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip_vti0\x00', <r2=>r1, 0x0, 0x10, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x67, 0x0, 0x4, 0xb1fde26cf0cef217, 0x0, @private=0xa010100, @broadcast, {[@generic={0x7, 0x10, "98a1be21dcfff95b281d17e4850a"}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', <r3=>r1, 0x4, 0x3, 0x40, 0x7, 0x2, @loopback, @loopback, 0x8021, 0x8, 0x3f, 0x1f}})
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', r3, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r4}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:30:46 executing program 2:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', <r2=>r1, 0x4, 0x3, 0x40, 0x7, 0x2, @loopback, @loopback, 0x8021, 0x8, 0x3f, 0x1f}})
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', <r4=>r2, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000000c80)={'sit0\x00', &(0x7f0000000c00)={'sit0\x00', r4, 0x4, 0x80, 0x8, 0xafc, 0x18, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0xe, 0x8, 0x781, 0x3}})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), r3)
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
munlock(&(0x7f0000ff6000/0xa000)=nil, 0xa000)
sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x44, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x3a}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r3}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:30:46 executing program 6:
ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
ioctl$TCSETA(0xffffffffffffffff, 0x5406, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index=0x7, 0x3, 0x1, 0x94b, 0x14}, 0x2)
sched_yield()
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x200040, 0x0)
pipe(&(0x7f0000000400))
ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000880)={0x0, 0x1, 0x1, 0xa, 0x174, &(0x7f0000000480)="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"})
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:30:46 executing program 0:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480)=0x5)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', 0x0, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:30:55 executing program 5:
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, 0x0, &(0x7f00000010c0))

06:30:55 executing program 1:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip_vti0\x00', <r2=>r1, 0x0, 0x10, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x67, 0x0, 0x4, 0xb1fde26cf0cef217, 0x0, @private=0xa010100, @broadcast, {[@generic={0x7, 0x10, "98a1be21dcfff95b281d17e4850a"}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480)=0x5)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r3}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:30:55 executing program 0:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480)=0x5)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', 0x0, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:30:55 executing program 3:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip_vti0\x00', <r2=>r1, 0x0, 0x10, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x67, 0x0, 0x4, 0xb1fde26cf0cef217, 0x0, @private=0xa010100, @broadcast, {[@generic={0x7, 0x10, "98a1be21dcfff95b281d17e4850a"}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', r1, 0x4, 0x3, 0x40, 0x7, 0x2, @loopback, @loopback, 0x8021, 0x8, 0x3f, 0x1f}})
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r3}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:30:55 executing program 6:
ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
ioctl$TCSETA(0xffffffffffffffff, 0x5406, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index=0x7, 0x3, 0x1, 0x94b, 0x14}, 0x2)
sched_yield()
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x200040, 0x0)
pipe(&(0x7f0000000400))
ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000880)={0x0, 0x1, 0x1, 0xa, 0x174, &(0x7f0000000480)="5edb89eaad007f1a706b88cb3a9480a5562c7e564ce1a22c8df8f726fe37b4d862d84daee9ed2138f78aa73236b0f8aa29f6887a95c11b5632235b1ca585ef6e2b7d79ce6c276e0c0189f2f6db5247a5ab874e166f440f821e03103a32a9272c814236d289278b79c32ebf6ba6c5233b1f7a4d2c44a2a71cdb392a600e64a4af7a10fa0a8bea9cc5b90e126f49978fef66f5ade48a06d597417f758954e92a0a4c12a021983aaf60aa29f6cab1b2823a791039220ac2a52293635f2edb83dc426f276233492c81c2ed499c54fbb8111cfc01333e31d1e6284939f8b46349b320a0f165c6b1c7112dc9f76df0ed194c098450de5466e14e767d16039e649dfed15123f0380ac5b45a6af5920aac7b058e5bfb4e3eadc9d8465048073c050bb96ee01990875b09cf164a282a1f3e8b3ccf3f76077eace47e8d2f1e0a2a5fc00477ef309fd57c0d845dd2d86350e999349ff41d6a82704dabf9081eea0a228feb9308a03b69844b13d48b7082865047eefa7a70bfea6488322c7739c6446fbe0afb052a520dc3bd0c78b19c73e16ce0ef6ea5b883876cf677537b667fbcb430fd5f773ad2b86f4db609c89166cfbb4a090a35769055a68c45bbc8c58c8e9ba527a211a12730b3295be141c2092f17b2d8df1b02c3b3e06955d667737d8888eceae78b0888e09713470bdf19ddcd4ad497d41b41e6b4df45662e6801b4216c1965e3df45e645f9253fe67bd0f65d37a052bab9769a2a32c0da67496cddd7752b34f4a10cface1f531869f24d11733334baf3fa8b8450261d61f41218716e36c4edb502ba59ce7f4ac2abc53ca940fc92dbadeff2ba66debdf785776147c5709f31927a7e081883ef681b6591e9259fa33541c087f7884b2778a0cc839781be052050d3c71ea8d886c129b61e6bfcf4686934f18da4e7cede143e9c0db819675b4e1aeb1f87efafdb0279dd6d5d5b0efcd6a8e7c55141fc7ecfd50dd8cb9879e3768b4d6c481a7c310609e987303254bee0461c5fcd6cd35b46361b6b221894bc6153ef150d4f9e7d2f0fe479e3c71f17dc51dc39ed12e66dab898a54a232b675dfe4e7bb637fef8ea611585fcb66d3ee54dff31967f0089e47d249daffd1e014e2c2e11ca9e357b483c8b0e6c1d890874830f5d54b2b9f057b62a3ea0175bce6545ae55f523618384a2beb7f095f8882ce7105e10fc0b0cdc040c1c8da0eddfa642cd0e02ac42c9218617a0a6cf440752d8c8ec9bcb6e25c35b8636dcdee315811155b500e52911b3dc3c9f7a2d50cfbd560c6db46ca8d5614f047c048cbbdf9df5865916321f5533ce617005da2b39bfa433856a2f73d5ad40b97c7787feaf990de49222fd58d0f535b458f5f1ce067ddf0fb0d56ada3ae5e7d43afcc9ff15eb9e5706f6c902adfd4f8d38f4d8ef8832a070c739d7a4515d0aa75643597f71d7753"})
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:30:55 executing program 4:
ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0)
ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000100))
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000200)={0x7ff, 0x6, 0x100, 0x8, 0x15, "16fc41fd0b316794"})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index=0x7, 0x3, 0x1, 0x94b, 0x14}, 0x2)
openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x200040, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:30:55 executing program 2:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', <r2=>r1, 0x4, 0x3, 0x40, 0x7, 0x2, @loopback, @loopback, 0x8021, 0x8, 0x3f, 0x1f}})
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', <r4=>r2, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000000c80)={'sit0\x00', &(0x7f0000000c00)={'sit0\x00', r4, 0x4, 0x80, 0x8, 0xafc, 0x18, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0xe, 0x8, 0x781, 0x3}})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), r3)
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
munlock(&(0x7f0000ff6000/0xa000)=nil, 0xa000)
sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x44, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x3a}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r3}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:30:55 executing program 7:
openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x200040, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:30:55 executing program 5:
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), 0x0)

06:30:55 executing program 0:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480)=0x5)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', 0x0, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:30:55 executing program 6:
ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000200)={0x0, 0x6, 0x100, 0x8, 0x15, "16fc41fd0b316794"})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index=0x7, 0x3, 0x1, 0x94b, 0x14}, 0x2)
sched_yield()
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x200040, 0x0)
pipe(&(0x7f0000000400))
ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000880)={0x0, 0x1, 0x1, 0xa, 0x174, &(0x7f0000000480)="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"})
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:30:55 executing program 4:
ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0))
ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0)
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000200)={0x7ff, 0x6, 0x100, 0x8, 0x15, "16fc41fd0b316794"})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index=0x7, 0x3, 0x1, 0x94b, 0x14}, 0x2)
openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x200040, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:30:56 executing program 1:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip_vti0\x00', <r2=>r1, 0x0, 0x10, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x67, 0x0, 0x4, 0xb1fde26cf0cef217, 0x0, @private=0xa010100, @broadcast, {[@generic={0x7, 0x10, "98a1be21dcfff95b281d17e4850a"}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480)=0x5)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', 0x0, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:30:56 executing program 7:
ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x200040, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:30:56 executing program 5:
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), 0x0)

06:30:56 executing program 3:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip_vti0\x00', <r2=>r1, 0x0, 0x10, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x67, 0x0, 0x4, 0xb1fde26cf0cef217, 0x0, @private=0xa010100, @broadcast, {[@generic={0x7, 0x10, "98a1be21dcfff95b281d17e4850a"}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', r1, 0x4, 0x3, 0x40, 0x7, 0x2, @loopback, @loopback, 0x8021, 0x8, 0x3f, 0x1f}})
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:30:56 executing program 2:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', <r1=>0x0, 0x4, 0x3, 0x40, 0x7, 0x2, @loopback, @loopback, 0x8021, 0x8, 0x3f, 0x1f}})
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', <r3=>r1, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r2, 0x89f9, &(0x7f0000000c80)={'sit0\x00', &(0x7f0000000c00)={'sit0\x00', r3, 0x4, 0x80, 0x8, 0xafc, 0x18, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0xe, 0x8, 0x781, 0x3}})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), r2)
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
munlock(&(0x7f0000ff6000/0xa000)=nil, 0xa000)
sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x44, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x3a}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:30:56 executing program 5:
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), 0x0)

06:30:56 executing program 0:
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480)=0x5)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', 0x0, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:31:05 executing program 6:
ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000200)={0x0, 0x6, 0x100, 0x8, 0x15, "16fc41fd0b316794"})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index=0x7, 0x3, 0x1, 0x94b, 0x14}, 0x2)
sched_yield()
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x200040, 0x0)
pipe(&(0x7f0000000400))
ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000880)={0x0, 0x1, 0x1, 0xa, 0x174, &(0x7f0000000480)="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"})
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:31:05 executing program 4:
ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0))
ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0)
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000200)={0x7ff, 0x6, 0x100, 0x8, 0x15, "16fc41fd0b316794"})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index=0x7, 0x3, 0x1, 0x94b, 0x14}, 0x2)
openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x200040, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:31:05 executing program 1:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip_vti0\x00', <r2=>r1, 0x0, 0x10, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x67, 0x0, 0x4, 0xb1fde26cf0cef217, 0x0, @private=0xa010100, @broadcast, {[@generic={0x7, 0x10, "98a1be21dcfff95b281d17e4850a"}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480)=0x5)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', 0x0, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:31:05 executing program 5:
ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x200040, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:31:05 executing program 7:
ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x200040, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:31:05 executing program 0:
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480)=0x5)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', 0x0, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:31:05 executing program 3:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip_vti0\x00', <r2=>r1, 0x0, 0x10, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x67, 0x0, 0x4, 0xb1fde26cf0cef217, 0x0, @private=0xa010100, @broadcast, {[@generic={0x7, 0x10, "98a1be21dcfff95b281d17e4850a"}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', r1, 0x4, 0x3, 0x40, 0x7, 0x2, @loopback, @loopback, 0x8021, 0x8, 0x3f, 0x1f}})
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:31:05 executing program 2:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', <r1=>0x0, 0x4, 0x3, 0x40, 0x7, 0x2, @loopback, @loopback, 0x8021, 0x8, 0x3f, 0x1f}})
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', <r3=>r1, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r2, 0x89f9, &(0x7f0000000c80)={'sit0\x00', &(0x7f0000000c00)={'sit0\x00', r3, 0x4, 0x80, 0x8, 0xafc, 0x18, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0xe, 0x8, 0x781, 0x3}})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), r2)
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
munlock(&(0x7f0000ff6000/0xa000)=nil, 0xa000)
sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x44, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x3a}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:31:05 executing program 1:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip_vti0\x00', <r2=>r1, 0x0, 0x10, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x67, 0x0, 0x4, 0xb1fde26cf0cef217, 0x0, @private=0xa010100, @broadcast, {[@generic={0x7, 0x10, "98a1be21dcfff95b281d17e4850a"}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480)=0x5)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', 0x0, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:31:05 executing program 4:
ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0))
ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0)
ioctl$TCSETA(0xffffffffffffffff, 0x5406, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index=0x7, 0x3, 0x1, 0x94b, 0x14}, 0x2)
openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x200040, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:31:05 executing program 6:
ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000200)={0x0, 0x6, 0x100, 0x8, 0x15, "16fc41fd0b316794"})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index=0x7, 0x3, 0x1, 0x94b, 0x14}, 0x2)
sched_yield()
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x200040, 0x0)
pipe(&(0x7f0000000400))
ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000880)={0x0, 0x1, 0x1, 0xa, 0x174, &(0x7f0000000480)="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"})
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:31:05 executing program 5:
ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x200040, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:31:05 executing program 7:
ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x200040, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:31:05 executing program 3:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip_vti0\x00', <r2=>r1, 0x0, 0x10, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x67, 0x0, 0x4, 0xb1fde26cf0cef217, 0x0, @private=0xa010100, @broadcast, {[@generic={0x7, 0x10, "98a1be21dcfff95b281d17e4850a"}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', r1, 0x4, 0x3, 0x40, 0x7, 0x2, @loopback, @loopback, 0x8021, 0x8, 0x3f, 0x1f}})
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:31:05 executing program 0:
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480)=0x5)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', 0x0, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:31:05 executing program 2:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', <r1=>0x0, 0x4, 0x3, 0x40, 0x7, 0x2, @loopback, @loopback, 0x8021, 0x8, 0x3f, 0x1f}})
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', <r3=>r1, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r2, 0x89f9, &(0x7f0000000c80)={'sit0\x00', &(0x7f0000000c00)={'sit0\x00', r3, 0x4, 0x80, 0x8, 0xafc, 0x18, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0xe, 0x8, 0x781, 0x3}})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), r2)
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
munlock(&(0x7f0000ff6000/0xa000)=nil, 0xa000)
sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x44, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x3a}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:31:05 executing program 4:
ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0))
ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0)
ioctl$TCSETA(0xffffffffffffffff, 0x5406, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index=0x7, 0x3, 0x1, 0x94b, 0x14}, 0x2)
openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x200040, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:31:05 executing program 6:
ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000200)={0x7ff, 0x0, 0x100, 0x8, 0x15, "16fc41fd0b316794"})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index=0x7, 0x3, 0x1, 0x94b, 0x14}, 0x2)
sched_yield()
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x200040, 0x0)
pipe(&(0x7f0000000400))
ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000880)={0x0, 0x1, 0x1, 0xa, 0x174, &(0x7f0000000480)="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"})
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:31:13 executing program 7:
ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000))
openat$full(0xffffffffffffff9c, 0x0, 0x200040, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:31:13 executing program 1:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip_vti0\x00', <r2=>r1, 0x0, 0x10, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x67, 0x0, 0x4, 0xb1fde26cf0cef217, 0x0, @private=0xa010100, @broadcast, {[@generic={0x7, 0x10, "98a1be21dcfff95b281d17e4850a"}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', 0x0, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r3}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:31:13 executing program 3:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip_vti0\x00', <r2=>r1, 0x0, 0x10, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x67, 0x0, 0x4, 0xb1fde26cf0cef217, 0x0, @private=0xa010100, @broadcast, {[@generic={0x7, 0x10, "98a1be21dcfff95b281d17e4850a"}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:31:13 executing program 6:
ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000200)={0x7ff, 0x0, 0x100, 0x8, 0x15, "16fc41fd0b316794"})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index=0x7, 0x3, 0x1, 0x94b, 0x14}, 0x2)
sched_yield()
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x200040, 0x0)
pipe(&(0x7f0000000400))
ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000880)={0x0, 0x1, 0x1, 0xa, 0x174, &(0x7f0000000480)="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"})
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:31:13 executing program 4:
ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0))
ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0)
ioctl$TCSETA(0xffffffffffffffff, 0x5406, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index=0x7, 0x3, 0x1, 0x94b, 0x14}, 0x2)
openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x200040, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:31:13 executing program 0:
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480)=0x5)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', 0x0, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:31:13 executing program 5:
ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x200040, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:31:13 executing program 2:
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r0=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r0}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', <r1=>r0, 0x4, 0x3, 0x40, 0x7, 0x2, @loopback, @loopback, 0x8021, 0x8, 0x3f, 0x1f}})
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', <r3=>r1, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r2, 0x89f9, &(0x7f0000000c80)={'sit0\x00', &(0x7f0000000c00)={'sit0\x00', r3, 0x4, 0x80, 0x8, 0xafc, 0x18, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0xe, 0x8, 0x781, 0x3}})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), r2)
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
munlock(&(0x7f0000ff6000/0xa000)=nil, 0xa000)
sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x44, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x3a}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:31:13 executing program 4:
ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0))
ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0)
ioctl$TCSETA(0xffffffffffffffff, 0x5406, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x2)
openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x200040, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:31:13 executing program 6:
ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000200)={0x7ff, 0x0, 0x100, 0x8, 0x15, "16fc41fd0b316794"})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index=0x7, 0x3, 0x1, 0x94b, 0x14}, 0x2)
sched_yield()
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x200040, 0x0)
pipe(&(0x7f0000000400))
ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000880)={0x0, 0x1, 0x1, 0xa, 0x174, &(0x7f0000000480)="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"})
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:31:13 executing program 7:
ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000))
openat$full(0xffffffffffffff9c, 0x0, 0x200040, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:31:21 executing program 4:
ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0))
ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0)
ioctl$TCSETA(0xffffffffffffffff, 0x5406, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x200040, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:31:21 executing program 0:
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480)=0x5)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', 0x0, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:31:21 executing program 7:
ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000))
openat$full(0xffffffffffffff9c, 0x0, 0x200040, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:31:21 executing program 6:
ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000200)={0x7ff, 0x6, 0x0, 0x8, 0x15, "16fc41fd0b316794"})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index=0x7, 0x3, 0x1, 0x94b, 0x14}, 0x2)
sched_yield()
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x200040, 0x0)
pipe(&(0x7f0000000400))
ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000880)={0x0, 0x1, 0x1, 0xa, 0x174, &(0x7f0000000480)="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"})
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:31:21 executing program 5:
ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x200040, 0x0)

06:31:21 executing program 1:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip_vti0\x00', <r2=>r1, 0x0, 0x10, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x67, 0x0, 0x4, 0xb1fde26cf0cef217, 0x0, @private=0xa010100, @broadcast, {[@generic={0x7, 0x10, "98a1be21dcfff95b281d17e4850a"}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', 0x0, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r3}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:31:21 executing program 3:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip_vti0\x00', <r2=>r1, 0x0, 0x10, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x67, 0x0, 0x4, 0xb1fde26cf0cef217, 0x0, @private=0xa010100, @broadcast, {[@generic={0x7, 0x10, "98a1be21dcfff95b281d17e4850a"}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:31:21 executing program 2:
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r0=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r0}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', <r1=>r0, 0x4, 0x3, 0x40, 0x7, 0x2, @loopback, @loopback, 0x8021, 0x8, 0x3f, 0x1f}})
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', <r3=>r1, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r2, 0x89f9, &(0x7f0000000c80)={'sit0\x00', &(0x7f0000000c00)={'sit0\x00', r3, 0x4, 0x80, 0x8, 0xafc, 0x18, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0xe, 0x8, 0x781, 0x3}})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), r2)
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
munlock(&(0x7f0000ff6000/0xa000)=nil, 0xa000)
sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x44, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x3a}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:31:21 executing program 5:
openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x200040, 0x0)

06:31:21 executing program 1:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip_vti0\x00', <r2=>r1, 0x0, 0x10, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x67, 0x0, 0x4, 0xb1fde26cf0cef217, 0x0, @private=0xa010100, @broadcast, {[@generic={0x7, 0x10, "98a1be21dcfff95b281d17e4850a"}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', 0x0, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r3}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:31:21 executing program 2:
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, 0x0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', <r0=>0x0, 0x4, 0x3, 0x40, 0x7, 0x2, @loopback, @loopback, 0x8021, 0x8, 0x3f, 0x1f}})
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', <r2=>r0, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000c80)={'sit0\x00', &(0x7f0000000c00)={'sit0\x00', r2, 0x4, 0x80, 0x8, 0xafc, 0x18, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0xe, 0x8, 0x781, 0x3}})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), r1)
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
munlock(&(0x7f0000ff6000/0xa000)=nil, 0xa000)
sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x44, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x3a}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:31:22 executing program 3:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip_vti0\x00', <r2=>r1, 0x0, 0x10, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x67, 0x0, 0x4, 0xb1fde26cf0cef217, 0x0, @private=0xa010100, @broadcast, {[@generic={0x7, 0x10, "98a1be21dcfff95b281d17e4850a"}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:31:22 executing program 7:
ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000))
openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:31:22 executing program 0:
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480)=0x5)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', 0x0, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:31:22 executing program 6:
ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000200)={0x7ff, 0x6, 0x0, 0x8, 0x15, "16fc41fd0b316794"})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index=0x7, 0x3, 0x1, 0x94b, 0x14}, 0x2)
sched_yield()
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x200040, 0x0)
pipe(&(0x7f0000000400))
ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000880)={0x0, 0x1, 0x1, 0xa, 0x174, &(0x7f0000000480)="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"})
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:31:22 executing program 5:
openat$full(0xffffffffffffff9c, 0x0, 0x200040, 0x0)

06:31:22 executing program 4:
ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0))
ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0)
ioctl$TCSETA(0xffffffffffffffff, 0x5406, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
openat$full(0xffffffffffffff9c, 0x0, 0x200040, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:31:22 executing program 0:
shmget(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480)=0x5)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', 0x0, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:31:22 executing program 5:
openat$full(0xffffffffffffff9c, 0x0, 0x200040, 0x0)

06:31:22 executing program 2:
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, 0x0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', <r0=>0x0, 0x4, 0x3, 0x40, 0x7, 0x2, @loopback, @loopback, 0x8021, 0x8, 0x3f, 0x1f}})
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', <r2=>r0, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000c80)={'sit0\x00', &(0x7f0000000c00)={'sit0\x00', r2, 0x4, 0x80, 0x8, 0xafc, 0x18, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0xe, 0x8, 0x781, 0x3}})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), r1)
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
munlock(&(0x7f0000ff6000/0xa000)=nil, 0xa000)
sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x44, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x3a}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:31:22 executing program 1:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip_vti0\x00', <r2=>r1, 0x0, 0x10, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x67, 0x0, 0x4, 0xb1fde26cf0cef217, 0x0, @private=0xa010100, @broadcast, {[@generic={0x7, 0x10, "98a1be21dcfff95b281d17e4850a"}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480)=0x5)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', 0x0, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r3}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:31:22 executing program 7:
ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000))
openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:31:30 executing program 4:
ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0))
ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0)
ioctl$TCSETA(0xffffffffffffffff, 0x5406, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
openat$full(0xffffffffffffff9c, 0x0, 0x200040, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:31:30 executing program 3:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip_vti0\x00', r1, 0x0, 0x10, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x67, 0x0, 0x4, 0xb1fde26cf0cef217, 0x0, @private=0xa010100, @broadcast, {[@generic={0x7, 0x10, "98a1be21dcfff95b281d17e4850a"}]}}}}})
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:31:30 executing program 1:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip_vti0\x00', <r2=>r1, 0x0, 0x10, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x67, 0x0, 0x4, 0xb1fde26cf0cef217, 0x0, @private=0xa010100, @broadcast, {[@generic={0x7, 0x10, "98a1be21dcfff95b281d17e4850a"}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480)=0x5)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', 0x0, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r3}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:31:30 executing program 7:
ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000))
openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:31:30 executing program 0:
shmget(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, 0x0)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', 0x0, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:31:30 executing program 2:
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, 0x0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', <r0=>0x0, 0x4, 0x3, 0x40, 0x7, 0x2, @loopback, @loopback, 0x8021, 0x8, 0x3f, 0x1f}})
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', <r2=>r0, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000c80)={'sit0\x00', &(0x7f0000000c00)={'sit0\x00', r2, 0x4, 0x80, 0x8, 0xafc, 0x18, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0xe, 0x8, 0x781, 0x3}})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), r1)
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
munlock(&(0x7f0000ff6000/0xa000)=nil, 0xa000)
sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x44, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x3a}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:31:30 executing program 5:
openat$full(0xffffffffffffff9c, 0x0, 0x200040, 0x0)

06:31:30 executing program 6:
ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000200)={0x7ff, 0x6, 0x0, 0x0, 0x15, "16fc41fd0b316794"})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index=0x7, 0x3, 0x1, 0x94b, 0x14}, 0x2)
sched_yield()
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x200040, 0x0)
pipe(&(0x7f0000000400))
ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000880)={0x0, 0x1, 0x1, 0xa, 0x174, &(0x7f0000000480)="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"})
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:31:38 executing program 5:
openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)

06:31:38 executing program 1:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip_vti0\x00', <r2=>r1, 0x0, 0x10, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x67, 0x0, 0x4, 0xb1fde26cf0cef217, 0x0, @private=0xa010100, @broadcast, {[@generic={0x7, 0x10, "98a1be21dcfff95b281d17e4850a"}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480)=0x5)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', 0x0, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r3}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:31:38 executing program 3:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip_vti0\x00', r1, 0x0, 0x10, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x67, 0x0, 0x4, 0xb1fde26cf0cef217, 0x0, @private=0xa010100, @broadcast, {[@generic={0x7, 0x10, "98a1be21dcfff95b281d17e4850a"}]}}}}})
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:31:38 executing program 6:
ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000200)={0x7ff, 0x6, 0x0, 0x0, 0x15, "16fc41fd0b316794"})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index=0x7, 0x3, 0x1, 0x94b, 0x14}, 0x2)
sched_yield()
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x200040, 0x0)
pipe(&(0x7f0000000400))
ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000880)={0x0, 0x1, 0x1, 0xa, 0x174, &(0x7f0000000480)="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"})
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:31:38 executing program 4:
ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0))
ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0)
ioctl$TCSETA(0xffffffffffffffff, 0x5406, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
openat$full(0xffffffffffffff9c, 0x0, 0x200040, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:31:38 executing program 0:
shmget(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, 0x0)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', 0x0, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:31:38 executing program 7:
ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000))
openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x200040, 0x0)
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)

06:31:38 executing program 2:
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, 0x0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, 0x0, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', <r0=>0x0, 0x4, 0x3, 0x40, 0x7, 0x2, @loopback, @loopback, 0x8021, 0x8, 0x3f, 0x1f}})
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', <r2=>r0, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000c80)={'sit0\x00', &(0x7f0000000c00)={'sit0\x00', r2, 0x4, 0x80, 0x8, 0xafc, 0x18, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0xe, 0x8, 0x781, 0x3}})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), r1)
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
munlock(&(0x7f0000ff6000/0xa000)=nil, 0xa000)
sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x44, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x3a}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:31:38 executing program 7:
ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000))
openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x200040, 0x0)
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)

06:31:38 executing program 6:
ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000200)={0x7ff, 0x6, 0x0, 0x0, 0x0, "16fc41fd0b316794"})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index=0x7, 0x3, 0x1, 0x94b, 0x14}, 0x2)
sched_yield()
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x200040, 0x0)
pipe(&(0x7f0000000400))
ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000880)={0x0, 0x1, 0x1, 0xa, 0x174, &(0x7f0000000480)="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"})
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:31:38 executing program 1:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip_vti0\x00', r1, 0x0, 0x10, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x67, 0x0, 0x4, 0xb1fde26cf0cef217, 0x0, @private=0xa010100, @broadcast, {[@generic={0x7, 0x10, "98a1be21dcfff95b281d17e4850a"}]}}}}})
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480)=0x5)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', 0x0, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:31:38 executing program 5:
openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)

06:31:38 executing program 0:
shmget(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, 0x0)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', 0x0, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:31:38 executing program 2:
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, 0x0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, 0x0, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', <r0=>0x0, 0x4, 0x3, 0x40, 0x7, 0x2, @loopback, @loopback, 0x8021, 0x8, 0x3f, 0x1f}})
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', <r2=>r0, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000c80)={'sit0\x00', &(0x7f0000000c00)={'sit0\x00', r2, 0x4, 0x80, 0x8, 0xafc, 0x18, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0xe, 0x8, 0x781, 0x3}})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), r1)
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
munlock(&(0x7f0000ff6000/0xa000)=nil, 0xa000)
sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x44, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x3a}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:31:38 executing program 4:
ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0))
ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0)
ioctl$TCSETA(0xffffffffffffffff, 0x5406, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:31:38 executing program 0:
shmget(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480))
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', 0x0, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:31:38 executing program 7:
ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000))
openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x200040, 0x0)
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)

06:31:38 executing program 3:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:31:38 executing program 1:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480)=0x5)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', 0x0, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:31:38 executing program 5:
openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)

06:31:46 executing program 1:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480)=0x5)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', 0x0, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:31:46 executing program 7:
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, 0x0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, 0x0, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', <r0=>0x0, 0x4, 0x3, 0x40, 0x7, 0x2, @loopback, @loopback, 0x8021, 0x8, 0x3f, 0x1f}})
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', <r2=>r0, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000c80)={'sit0\x00', &(0x7f0000000c00)={'sit0\x00', r2, 0x4, 0x80, 0x8, 0xafc, 0x18, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0xe, 0x8, 0x781, 0x3}})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), r1)
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
munlock(&(0x7f0000ff6000/0xa000)=nil, 0xa000)
sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x44, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x3a}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:31:46 executing program 2:
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, 0x0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, 0x0, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', <r0=>0x0, 0x4, 0x3, 0x40, 0x7, 0x2, @loopback, @loopback, 0x8021, 0x8, 0x3f, 0x1f}})
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', <r2=>r0, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000c80)={'sit0\x00', &(0x7f0000000c00)={'sit0\x00', r2, 0x4, 0x80, 0x8, 0xafc, 0x18, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0xe, 0x8, 0x781, 0x3}})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), r1)
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
munlock(&(0x7f0000ff6000/0xa000)=nil, 0xa000)
sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x44, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x3a}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:31:46 executing program 3:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:31:46 executing program 4:
ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0))
ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0)
ioctl$TCSETA(0xffffffffffffffff, 0x5406, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:31:46 executing program 6:
ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000200)={0x7ff, 0x6, 0x0, 0x0, 0x0, "16fc41fd0b316794"})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index=0x7, 0x3, 0x1, 0x94b, 0x14}, 0x2)
sched_yield()
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x200040, 0x0)
pipe(&(0x7f0000000400))
ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000880)={0x0, 0x1, 0x1, 0xa, 0x174, &(0x7f0000000480)="5edb89eaad007f1a706b88cb3a9480a5562c7e564ce1a22c8df8f726fe37b4d862d84daee9ed2138f78aa73236b0f8aa29f6887a95c11b5632235b1ca585ef6e2b7d79ce6c276e0c0189f2f6db5247a5ab874e166f440f821e03103a32a9272c814236d289278b79c32ebf6ba6c5233b1f7a4d2c44a2a71cdb392a600e64a4af7a10fa0a8bea9cc5b90e126f49978fef66f5ade48a06d597417f758954e92a0a4c12a021983aaf60aa29f6cab1b2823a791039220ac2a52293635f2edb83dc426f276233492c81c2ed499c54fbb8111cfc01333e31d1e6284939f8b46349b320a0f165c6b1c7112dc9f76df0ed194c098450de5466e14e767d16039e649dfed15123f0380ac5b45a6af5920aac7b058e5bfb4e3eadc9d8465048073c050bb96ee01990875b09cf164a282a1f3e8b3ccf3f76077eace47e8d2f1e0a2a5fc00477ef309fd57c0d845dd2d86350e999349ff41d6a82704dabf9081eea0a228feb9308a03b69844b13d48b7082865047eefa7a70bfea6488322c7739c6446fbe0afb052a520dc3bd0c78b19c73e16ce0ef6ea5b883876cf677537b667fbcb430fd5f773ad2b86f4db609c89166cfbb4a090a35769055a68c45bbc8c58c8e9ba527a211a12730b3295be141c2092f17b2d8df1b02c3b3e06955d667737d8888eceae78b0888e09713470bdf19ddcd4ad497d41b41e6b4df45662e6801b4216c1965e3df45e645f9253fe67bd0f65d37a052bab9769a2a32c0da67496cddd7752b34f4a10cface1f531869f24d11733334baf3fa8b8450261d61f41218716e36c4edb502ba59ce7f4ac2abc53ca940fc92dbadeff2ba66debdf785776147c5709f31927a7e081883ef681b6591e9259fa33541c087f7884b2778a0cc839781be052050d3c71ea8d886c129b61e6bfcf4686934f18da4e7cede143e9c0db819675b4e1aeb1f87efafdb0279dd6d5d5b0efcd6a8e7c55141fc7ecfd50dd8cb9879e3768b4d6c481a7c310609e987303254bee0461c5fcd6cd35b46361b6b221894bc6153ef150d4f9e7d2f0fe479e3c71f17dc51dc39ed12e66dab898a54a232b675dfe4e7bb637fef8ea611585fcb66d3ee54dff31967f0089e47d249daffd1e014e2c2e11ca9e357b483c8b0e6c1d890874830f5d54b2b9f057b62a3ea0175bce6545ae55f523618384a2beb7f095f8882ce7105e10fc0b0cdc040c1c8da0eddfa642cd0e02ac42c9218617a0a6cf440752d8c8ec9bcb6e25c35b8636dcdee315811155b500e52911b3dc3c9f7a2d50cfbd560c6db46ca8d5614f047c048cbbdf9df5865916321f5533ce617005da2b39bfa433856a2f73d5ad40b97c7787feaf990de49222fd58d0f535b458f5f1ce067ddf0fb0d56ada3ae5e7d43afcc9ff15eb9e5706f6c902adfd4f8d38f4d8ef8832a070c739d7a4515d0aa75643597f71d7753"})
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:31:46 executing program 5:
shmget(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, 0x0)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', 0x0, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:31:46 executing program 0:
shmget(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480))
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', 0x0, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:31:46 executing program 0:
shmget(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480))
r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', 0x0, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:31:46 executing program 5:
shmget(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, 0x0)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', 0x0, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:31:46 executing program 7:
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, 0x0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, 0x0, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', <r0=>0x0, 0x4, 0x3, 0x40, 0x7, 0x2, @loopback, @loopback, 0x8021, 0x8, 0x3f, 0x1f}})
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', <r2=>r0, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000c80)={'sit0\x00', &(0x7f0000000c00)={'sit0\x00', r2, 0x4, 0x80, 0x8, 0xafc, 0x18, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0xe, 0x8, 0x781, 0x3}})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), r1)
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
munlock(&(0x7f0000ff6000/0xa000)=nil, 0xa000)
sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x44, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x3a}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:31:46 executing program 2:
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, 0x0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, 0x0, 0x0)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', <r0=>0x0, 0x4, 0x3, 0x40, 0x7, 0x2, @loopback, @loopback, 0x8021, 0x8, 0x3f, 0x1f}})
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', <r2=>r0, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000c80)={'sit0\x00', &(0x7f0000000c00)={'sit0\x00', r2, 0x4, 0x80, 0x8, 0xafc, 0x18, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0xe, 0x8, 0x781, 0x3}})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), r1)
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
munlock(&(0x7f0000ff6000/0xa000)=nil, 0xa000)
sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x44, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x3a}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:31:46 executing program 6:
ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000200)={0x7ff, 0x6, 0x0, 0x0, 0x0, "16fc41fd0b316794"})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index=0x7, 0x3, 0x1, 0x94b, 0x14}, 0x2)
sched_yield()
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x200040, 0x0)
pipe(&(0x7f0000000400))
ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000880)={0x0, 0x1, 0x1, 0xa, 0x174, &(0x7f0000000480)="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"})
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:31:46 executing program 7:
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, 0x0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, 0x0, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', <r0=>0x0, 0x4, 0x3, 0x40, 0x7, 0x2, @loopback, @loopback, 0x8021, 0x8, 0x3f, 0x1f}})
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', <r2=>r0, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000c80)={'sit0\x00', &(0x7f0000000c00)={'sit0\x00', r2, 0x4, 0x80, 0x8, 0xafc, 0x18, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0xe, 0x8, 0x781, 0x3}})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), r1)
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
munlock(&(0x7f0000ff6000/0xa000)=nil, 0xa000)
sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x44, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x3a}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:31:46 executing program 0:
shmget(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480))
r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', 0x0, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:31:46 executing program 3:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:31:53 executing program 7:
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, 0x0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, 0x0, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', <r0=>0x0, 0x4, 0x3, 0x40, 0x7, 0x2, @loopback, @loopback, 0x8021, 0x8, 0x3f, 0x1f}})
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', <r2=>r0, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000c80)={'sit0\x00', &(0x7f0000000c00)={'sit0\x00', r2, 0x4, 0x80, 0x8, 0xafc, 0x18, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0xe, 0x8, 0x781, 0x3}})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), r1)
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
munlock(&(0x7f0000ff6000/0xa000)=nil, 0xa000)
sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x44, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x3a}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x80)

06:31:53 executing program 1:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480)=0x5)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', 0x0, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:31:53 executing program 5:
shmget(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, 0x0)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', 0x0, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:31:53 executing program 0:
shmget(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480))
r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', 0x0, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:31:53 executing program 4:
ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0))
ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0)
ioctl$TCSETA(0xffffffffffffffff, 0x5406, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:31:53 executing program 2:
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, 0x0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, 0x0, 0x0)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', <r0=>0x0, 0x4, 0x3, 0x40, 0x7, 0x2, @loopback, @loopback, 0x8021, 0x8, 0x3f, 0x1f}})
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', <r2=>r0, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000c80)={'sit0\x00', &(0x7f0000000c00)={'sit0\x00', r2, 0x4, 0x80, 0x8, 0xafc, 0x18, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0xe, 0x8, 0x781, 0x3}})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), r1)
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
munlock(&(0x7f0000ff6000/0xa000)=nil, 0xa000)
sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x44, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x3a}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:31:53 executing program 6:
ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000200)={0x7ff, 0x6, 0x0, 0x0, 0x15, "16fc41fd0b316794"})
syz_io_uring_submit(0x0, 0x0, 0x0, 0x2)
sched_yield()
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x200040, 0x0)
pipe(&(0x7f0000000400))
ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000880)={0x0, 0x1, 0x1, 0xa, 0x174, &(0x7f0000000480)="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"})
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:31:53 executing program 3:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:31:53 executing program 2:
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, 0x0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, 0x0, 0x0)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', <r0=>0x0, 0x4, 0x3, 0x40, 0x7, 0x2, @loopback, @loopback, 0x8021, 0x8, 0x3f, 0x1f}})
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', <r2=>r0, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000c80)={'sit0\x00', &(0x7f0000000c00)={'sit0\x00', r2, 0x4, 0x80, 0x8, 0xafc, 0x18, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0xe, 0x8, 0x781, 0x3}})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), r1)
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
munlock(&(0x7f0000ff6000/0xa000)=nil, 0xa000)
sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x44, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x3a}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:31:53 executing program 5:
shmget(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, 0x0)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', 0x0, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:31:53 executing program 4:
ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0))
ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0)
ioctl$TCSETA(0xffffffffffffffff, 0x5406, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x200040, 0x0)
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)

06:31:53 executing program 7:
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, 0x0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, 0x0, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', <r0=>0x0, 0x4, 0x3, 0x40, 0x7, 0x2, @loopback, @loopback, 0x8021, 0x8, 0x3f, 0x1f}})
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', <r2=>r0, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000c80)={'sit0\x00', &(0x7f0000000c00)={'sit0\x00', r2, 0x4, 0x80, 0x8, 0xafc, 0x18, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0xe, 0x8, 0x781, 0x3}})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), r1)
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
munlock(&(0x7f0000ff6000/0xa000)=nil, 0xa000)

06:31:53 executing program 2:
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, 0x0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, 0x0, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, 0x0, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', <r0=>0x0, 0x4, 0x3, 0x40, 0x7, 0x2, @loopback, @loopback, 0x8021, 0x8, 0x3f, 0x1f}})
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', <r2=>r0, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000c80)={'sit0\x00', &(0x7f0000000c00)={'sit0\x00', r2, 0x4, 0x80, 0x8, 0xafc, 0x18, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0xe, 0x8, 0x781, 0x3}})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), r1)
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
munlock(&(0x7f0000ff6000/0xa000)=nil, 0xa000)
sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x44, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x3a}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:32:01 executing program 0:
shmget(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480))
r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:32:01 executing program 5:
shmget(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, 0x0)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:32:01 executing program 1:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480)=0x5)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', 0x0, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:32:01 executing program 6:
ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000200)={0x7ff, 0x6, 0x0, 0x0, 0x15, "16fc41fd0b316794"})
syz_io_uring_submit(0x0, 0x0, 0x0, 0x2)
sched_yield()
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x200040, 0x0)
pipe(&(0x7f0000000400))
ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000880)={0x0, 0x1, 0x1, 0xa, 0x174, &(0x7f0000000480)="5edb89eaad007f1a706b88cb3a9480a5562c7e564ce1a22c8df8f726fe37b4d862d84daee9ed2138f78aa73236b0f8aa29f6887a95c11b5632235b1ca585ef6e2b7d79ce6c276e0c0189f2f6db5247a5ab874e166f440f821e03103a32a9272c814236d289278b79c32ebf6ba6c5233b1f7a4d2c44a2a71cdb392a600e64a4af7a10fa0a8bea9cc5b90e126f49978fef66f5ade48a06d597417f758954e92a0a4c12a021983aaf60aa29f6cab1b2823a791039220ac2a52293635f2edb83dc426f276233492c81c2ed499c54fbb8111cfc01333e31d1e6284939f8b46349b320a0f165c6b1c7112dc9f76df0ed194c098450de5466e14e767d16039e649dfed15123f0380ac5b45a6af5920aac7b058e5bfb4e3eadc9d8465048073c050bb96ee01990875b09cf164a282a1f3e8b3ccf3f76077eace47e8d2f1e0a2a5fc00477ef309fd57c0d845dd2d86350e999349ff41d6a82704dabf9081eea0a228feb9308a03b69844b13d48b7082865047eefa7a70bfea6488322c7739c6446fbe0afb052a520dc3bd0c78b19c73e16ce0ef6ea5b883876cf677537b667fbcb430fd5f773ad2b86f4db609c89166cfbb4a090a35769055a68c45bbc8c58c8e9ba527a211a12730b3295be141c2092f17b2d8df1b02c3b3e06955d667737d8888eceae78b0888e09713470bdf19ddcd4ad497d41b41e6b4df45662e6801b4216c1965e3df45e645f9253fe67bd0f65d37a052bab9769a2a32c0da67496cddd7752b34f4a10cface1f531869f24d11733334baf3fa8b8450261d61f41218716e36c4edb502ba59ce7f4ac2abc53ca940fc92dbadeff2ba66debdf785776147c5709f31927a7e081883ef681b6591e9259fa33541c087f7884b2778a0cc839781be052050d3c71ea8d886c129b61e6bfcf4686934f18da4e7cede143e9c0db819675b4e1aeb1f87efafdb0279dd6d5d5b0efcd6a8e7c55141fc7ecfd50dd8cb9879e3768b4d6c481a7c310609e987303254bee0461c5fcd6cd35b46361b6b221894bc6153ef150d4f9e7d2f0fe479e3c71f17dc51dc39ed12e66dab898a54a232b675dfe4e7bb637fef8ea611585fcb66d3ee54dff31967f0089e47d249daffd1e014e2c2e11ca9e357b483c8b0e6c1d890874830f5d54b2b9f057b62a3ea0175bce6545ae55f523618384a2beb7f095f8882ce7105e10fc0b0cdc040c1c8da0eddfa642cd0e02ac42c9218617a0a6cf440752d8c8ec9bcb6e25c35b8636dcdee315811155b500e52911b3dc3c9f7a2d50cfbd560c6db46ca8d5614f047c048cbbdf9df5865916321f5533ce617005da2b39bfa433856a2f73d5ad40b97c7787feaf990de49222fd58d0f535b458f5f1ce067ddf0fb0d56ada3ae5e7d43afcc9ff15eb9e5706f6c902adfd4f8d38f4d8ef8832a070c739d7a4515d0aa75643597f71d7753"})
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:32:01 executing program 4:
ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0))
ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0)
ioctl$TCSETA(0xffffffffffffffff, 0x5406, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x200040, 0x0)
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)

06:32:01 executing program 2:
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, 0x0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, 0x0, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, 0x0, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', <r0=>0x0, 0x4, 0x3, 0x40, 0x7, 0x2, @loopback, @loopback, 0x8021, 0x8, 0x3f, 0x1f}})
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', <r2=>r0, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000c80)={'sit0\x00', &(0x7f0000000c00)={'sit0\x00', r2, 0x4, 0x80, 0x8, 0xafc, 0x18, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0xe, 0x8, 0x781, 0x3}})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), r1)
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
munlock(&(0x7f0000ff6000/0xa000)=nil, 0xa000)
sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x44, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x3a}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:32:01 executing program 7:
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, 0x0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, 0x0, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', <r0=>0x0, 0x4, 0x3, 0x40, 0x7, 0x2, @loopback, @loopback, 0x8021, 0x8, 0x3f, 0x1f}})
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', <r2=>r0, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000c80)={'sit0\x00', &(0x7f0000000c00)={'sit0\x00', r2, 0x4, 0x80, 0x8, 0xafc, 0x18, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0xe, 0x8, 0x781, 0x3}})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), r1)
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
munlock(&(0x7f0000ff6000/0xa000)=nil, 0xa000)

06:32:01 executing program 3:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:32:01 executing program 5:
shmget(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, 0x0)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:32:01 executing program 1:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480)=0x5)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', 0x0, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:32:01 executing program 0:
shmget(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480))
r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:32:01 executing program 5:
shmget(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:32:01 executing program 2:
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, 0x0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, 0x0, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, 0x0, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', <r0=>0x0, 0x4, 0x3, 0x40, 0x7, 0x2, @loopback, @loopback, 0x8021, 0x8, 0x3f, 0x1f}})
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', <r2=>r0, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000c80)={'sit0\x00', &(0x7f0000000c00)={'sit0\x00', r2, 0x4, 0x80, 0x8, 0xafc, 0x18, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0xe, 0x8, 0x781, 0x3}})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), r1)
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
munlock(&(0x7f0000ff6000/0xa000)=nil, 0xa000)
sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x44, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x3a}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:32:01 executing program 4:
ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0))
ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0)
ioctl$TCSETA(0xffffffffffffffff, 0x5406, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x200040, 0x0)
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)

06:32:01 executing program 7:
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, 0x0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, 0x0, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', <r0=>0x0, 0x4, 0x3, 0x40, 0x7, 0x2, @loopback, @loopback, 0x8021, 0x8, 0x3f, 0x1f}})
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', <r2=>r0, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000c80)={'sit0\x00', &(0x7f0000000c00)={'sit0\x00', r2, 0x4, 0x80, 0x8, 0xafc, 0x18, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0xe, 0x8, 0x781, 0x3}})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), r1)
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
munlock(&(0x7f0000ff6000/0xa000)=nil, 0xa000)

06:32:01 executing program 3:
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:32:01 executing program 6:
ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000200)={0x7ff, 0x6, 0x0, 0x0, 0x15, "16fc41fd0b316794"})
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
sched_yield()
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x200040, 0x0)
pipe(&(0x7f0000000400))
ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000880)={0x0, 0x1, 0x1, 0xa, 0x174, &(0x7f0000000480)="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"})
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:32:01 executing program 0:
shmget(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480))
r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:32:10 executing program 3:
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:32:10 executing program 4:
shmget(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:32:10 executing program 2:
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, 0x0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, 0x0, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x50, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', <r0=>0x0, 0x4, 0x3, 0x40, 0x7, 0x2, @loopback, @loopback, 0x8021, 0x8, 0x3f, 0x1f}})
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', <r2=>r0, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000c80)={'sit0\x00', &(0x7f0000000c00)={'sit0\x00', r2, 0x4, 0x80, 0x8, 0xafc, 0x18, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0xe, 0x8, 0x781, 0x3}})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), r1)
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
munlock(&(0x7f0000ff6000/0xa000)=nil, 0xa000)
sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x44, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x3a}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:32:10 executing program 0:
shmget(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480))
r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x0, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:32:10 executing program 7:
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, 0x0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, 0x0, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', <r0=>0x0, 0x4, 0x3, 0x40, 0x7, 0x2, @loopback, @loopback, 0x8021, 0x8, 0x3f, 0x1f}})
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', <r2=>r0, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000c80)={'sit0\x00', &(0x7f0000000c00)={'sit0\x00', r2, 0x4, 0x80, 0x8, 0xafc, 0x18, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0xe, 0x8, 0x781, 0x3}})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), r1)
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)

06:32:10 executing program 5:
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:32:10 executing program 6:
ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000200)={0x7ff, 0x6, 0x0, 0x0, 0x15, "16fc41fd0b316794"})
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
sched_yield()
r0 = openat$full(0xffffffffffffff9c, 0x0, 0x200040, 0x0)
pipe(&(0x7f0000000400))
ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000880)={0x0, 0x1, 0x1, 0xa, 0x174, &(0x7f0000000480)="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"})
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:32:10 executing program 1:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480)=0x5)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', 0x0, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:32:10 executing program 4:
shmget(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:32:10 executing program 7:
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, 0x0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, 0x0, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', <r0=>0x0, 0x4, 0x3, 0x40, 0x7, 0x2, @loopback, @loopback, 0x8021, 0x8, 0x3f, 0x1f}})
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', <r2=>r0, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000c80)={'sit0\x00', &(0x7f0000000c00)={'sit0\x00', r2, 0x4, 0x80, 0x8, 0xafc, 0x18, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0xe, 0x8, 0x781, 0x3}})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), r1)

06:32:10 executing program 5:
syz_io_uring_setup(0x0, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:32:10 executing program 0:
shmget(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480))
r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x0, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:32:10 executing program 2:
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, 0x0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, 0x0, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x50, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', <r0=>0x0, 0x4, 0x3, 0x40, 0x7, 0x2, @loopback, @loopback, 0x8021, 0x8, 0x3f, 0x1f}})
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', <r2=>r0, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000c80)={'sit0\x00', &(0x7f0000000c00)={'sit0\x00', r2, 0x4, 0x80, 0x8, 0xafc, 0x18, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0xe, 0x8, 0x781, 0x3}})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), r1)
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
munlock(&(0x7f0000ff6000/0xa000)=nil, 0xa000)
sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x44, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x3a}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:32:10 executing program 1:
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480)=0x5)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', 0x0, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:32:10 executing program 3:
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:32:10 executing program 7:
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, 0x0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, 0x0, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', <r0=>0x0, 0x4, 0x3, 0x40, 0x7, 0x2, @loopback, @loopback, 0x8021, 0x8, 0x3f, 0x1f}})
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', <r2=>r0, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000c80)={'sit0\x00', &(0x7f0000000c00)={'sit0\x00', r2, 0x4, 0x80, 0x8, 0xafc, 0x18, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0xe, 0x8, 0x781, 0x3}})

06:32:10 executing program 6:
ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000200)={0x7ff, 0x6, 0x0, 0x0, 0x15, "16fc41fd0b316794"})
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
sched_yield()
r0 = openat$full(0xffffffffffffff9c, 0x0, 0x200040, 0x0)
pipe(&(0x7f0000000400))
ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000880)={0x0, 0x1, 0x1, 0xa, 0x174, &(0x7f0000000480)="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"})
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:32:18 executing program 6:
ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000200)={0x7ff, 0x6, 0x0, 0x0, 0x15, "16fc41fd0b316794"})
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
sched_yield()
r0 = openat$full(0xffffffffffffff9c, 0x0, 0x200040, 0x0)
pipe(&(0x7f0000000400))
ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000880)={0x0, 0x1, 0x1, 0xa, 0x174, &(0x7f0000000480)="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"})
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:32:18 executing program 1:
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480)=0x5)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', 0x0, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:32:18 executing program 4:
shmget(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:32:18 executing program 2:
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, 0x0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, 0x0, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x50, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', <r0=>0x0, 0x4, 0x3, 0x40, 0x7, 0x2, @loopback, @loopback, 0x8021, 0x8, 0x3f, 0x1f}})
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', <r2=>r0, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000c80)={'sit0\x00', &(0x7f0000000c00)={'sit0\x00', r2, 0x4, 0x80, 0x8, 0xafc, 0x18, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0xe, 0x8, 0x781, 0x3}})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), r1)
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
munlock(&(0x7f0000ff6000/0xa000)=nil, 0xa000)
sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x44, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x3a}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:32:18 executing program 0:
shmget(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480))
r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x0, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:32:18 executing program 3:
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
syz_io_uring_setup(0x0, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:32:18 executing program 7:
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, 0x0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, 0x0, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', <r0=>0x0, 0x4, 0x3, 0x40, 0x7, 0x2, @loopback, @loopback, 0x8021, 0x8, 0x3f, 0x1f}})
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', r0, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})

06:32:18 executing program 5:
syz_io_uring_setup(0x0, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:32:18 executing program 0:
shmget(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480))
r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, 0x0, 0x0)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:32:18 executing program 2:
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, 0x0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, 0x0, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340), 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', <r0=>0x0, 0x4, 0x3, 0x40, 0x7, 0x2, @loopback, @loopback, 0x8021, 0x8, 0x3f, 0x1f}})
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', <r2=>r0, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000c80)={'sit0\x00', &(0x7f0000000c00)={'sit0\x00', r2, 0x4, 0x80, 0x8, 0xafc, 0x18, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0xe, 0x8, 0x781, 0x3}})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), r1)
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
munlock(&(0x7f0000ff6000/0xa000)=nil, 0xa000)
sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x44, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x3a}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:32:18 executing program 4:
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:32:18 executing program 0:
shmget(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480))
r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, 0x0, 0x0)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:32:18 executing program 7:
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, 0x0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, 0x0, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x2, @loopback, @loopback, 0x8021, 0x8, 0x3f, 0x1f}})
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)

06:32:18 executing program 5:
syz_io_uring_setup(0x0, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:32:18 executing program 3:
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
syz_io_uring_setup(0x0, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:32:18 executing program 6:
ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000200)={0x7ff, 0x6, 0x0, 0x0, 0x15, "16fc41fd0b316794"})
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
sched_yield()
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
pipe(&(0x7f0000000400))
ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000880)={0x0, 0x1, 0x1, 0xa, 0x174, &(0x7f0000000480)="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"})
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:32:18 executing program 0:
shmget(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480))
r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, 0x0, 0x0)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:32:27 executing program 0:
shmget(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480))
r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x0, @remote, 'lo\x00'}}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:32:27 executing program 5:
syz_io_uring_setup(0xb88, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:32:27 executing program 6:
ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000200)={0x7ff, 0x6, 0x0, 0x0, 0x15, "16fc41fd0b316794"})
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
sched_yield()
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
pipe(&(0x7f0000000400))
ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000880)={0x0, 0x1, 0x1, 0xa, 0x174, &(0x7f0000000480)="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"})
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:32:27 executing program 3:
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
syz_io_uring_setup(0x0, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:32:27 executing program 4:
syz_io_uring_setup(0x0, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:32:27 executing program 2:
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, 0x0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, 0x0, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340), 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', <r0=>0x0, 0x4, 0x3, 0x40, 0x7, 0x2, @loopback, @loopback, 0x8021, 0x8, 0x3f, 0x1f}})
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', <r2=>r0, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000c80)={'sit0\x00', &(0x7f0000000c00)={'sit0\x00', r2, 0x4, 0x80, 0x8, 0xafc, 0x18, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0xe, 0x8, 0x781, 0x3}})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), r1)
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
munlock(&(0x7f0000ff6000/0xa000)=nil, 0xa000)
sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x44, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x3a}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:32:27 executing program 1:
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480)=0x5)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', 0x0, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:32:27 executing program 7:
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, 0x0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, 0x0, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x2, @loopback, @loopback, 0x8021, 0x8, 0x3f, 0x1f}})

06:32:27 executing program 5:
syz_io_uring_setup(0xb88, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:32:27 executing program 7:
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, 0x0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, 0x0, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)

06:32:27 executing program 6:
ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000200)={0x7ff, 0x6, 0x0, 0x0, 0x15, "16fc41fd0b316794"})
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
sched_yield()
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
pipe(&(0x7f0000000400))
ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000880)={0x0, 0x1, 0x1, 0xa, 0x174, &(0x7f0000000480)="5edb89eaad007f1a706b88cb3a9480a5562c7e564ce1a22c8df8f726fe37b4d862d84daee9ed2138f78aa73236b0f8aa29f6887a95c11b5632235b1ca585ef6e2b7d79ce6c276e0c0189f2f6db5247a5ab874e166f440f821e03103a32a9272c814236d289278b79c32ebf6ba6c5233b1f7a4d2c44a2a71cdb392a600e64a4af7a10fa0a8bea9cc5b90e126f49978fef66f5ade48a06d597417f758954e92a0a4c12a021983aaf60aa29f6cab1b2823a791039220ac2a52293635f2edb83dc426f276233492c81c2ed499c54fbb8111cfc01333e31d1e6284939f8b46349b320a0f165c6b1c7112dc9f76df0ed194c098450de5466e14e767d16039e649dfed15123f0380ac5b45a6af5920aac7b058e5bfb4e3eadc9d8465048073c050bb96ee01990875b09cf164a282a1f3e8b3ccf3f76077eace47e8d2f1e0a2a5fc00477ef309fd57c0d845dd2d86350e999349ff41d6a82704dabf9081eea0a228feb9308a03b69844b13d48b7082865047eefa7a70bfea6488322c7739c6446fbe0afb052a520dc3bd0c78b19c73e16ce0ef6ea5b883876cf677537b667fbcb430fd5f773ad2b86f4db609c89166cfbb4a090a35769055a68c45bbc8c58c8e9ba527a211a12730b3295be141c2092f17b2d8df1b02c3b3e06955d667737d8888eceae78b0888e09713470bdf19ddcd4ad497d41b41e6b4df45662e6801b4216c1965e3df45e645f9253fe67bd0f65d37a052bab9769a2a32c0da67496cddd7752b34f4a10cface1f531869f24d11733334baf3fa8b8450261d61f41218716e36c4edb502ba59ce7f4ac2abc53ca940fc92dbadeff2ba66debdf785776147c5709f31927a7e081883ef681b6591e9259fa33541c087f7884b2778a0cc839781be052050d3c71ea8d886c129b61e6bfcf4686934f18da4e7cede143e9c0db819675b4e1aeb1f87efafdb0279dd6d5d5b0efcd6a8e7c55141fc7ecfd50dd8cb9879e3768b4d6c481a7c310609e987303254bee0461c5fcd6cd35b46361b6b221894bc6153ef150d4f9e7d2f0fe479e3c71f17dc51dc39ed12e66dab898a54a232b675dfe4e7bb637fef8ea611585fcb66d3ee54dff31967f0089e47d249daffd1e014e2c2e11ca9e357b483c8b0e6c1d890874830f5d54b2b9f057b62a3ea0175bce6545ae55f523618384a2beb7f095f8882ce7105e10fc0b0cdc040c1c8da0eddfa642cd0e02ac42c9218617a0a6cf440752d8c8ec9bcb6e25c35b8636dcdee315811155b500e52911b3dc3c9f7a2d50cfbd560c6db46ca8d5614f047c048cbbdf9df5865916321f5533ce617005da2b39bfa433856a2f73d5ad40b97c7787feaf990de49222fd58d0f535b458f5f1ce067ddf0fb0d56ada3ae5e7d43afcc9ff15eb9e5706f6c902adfd4f8d38f4d8ef8832a070c739d7a4515d0aa75643597f71d7753"})
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:32:27 executing program 0:
shmget(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480))
r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x0, @remote, 'lo\x00'}}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:32:27 executing program 4:
syz_io_uring_setup(0x0, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:32:27 executing program 3:
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
syz_io_uring_setup(0xb88, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:32:27 executing program 7:
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, 0x0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, 0x0, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)

06:32:27 executing program 2:
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, 0x0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, 0x0, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', <r0=>0x0, 0x4, 0x3, 0x40, 0x7, 0x2, @loopback, @loopback, 0x8021, 0x8, 0x3f, 0x1f}})
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', <r2=>r0, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000c80)={'sit0\x00', &(0x7f0000000c00)={'sit0\x00', r2, 0x4, 0x80, 0x8, 0xafc, 0x18, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0xe, 0x8, 0x781, 0x3}})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), r1)
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
munlock(&(0x7f0000ff6000/0xa000)=nil, 0xa000)
sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x44, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x3a}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:32:27 executing program 1:
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480)=0x5)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', 0x0, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:32:27 executing program 4:
syz_io_uring_setup(0x0, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:32:27 executing program 3:
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
syz_io_uring_setup(0xb88, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:32:27 executing program 7:
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, 0x0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, 0x0, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)

06:32:27 executing program 0:
shmget(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480))
r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x0, @remote, 'lo\x00'}}, 0x80)
syz_io_uring_setup(0x0, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:32:35 executing program 5:
syz_io_uring_setup(0xb88, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:32:35 executing program 0:
shmget(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480))
r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x0, @remote, 'lo\x00'}}, 0x80)
syz_io_uring_setup(0x0, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:32:35 executing program 6:
ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000200)={0x7ff, 0x6, 0x0, 0x0, 0x15, "16fc41fd0b316794"})
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
sched_yield()
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x200040, 0x0)
pipe(0x0)
ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000880)={0x0, 0x1, 0x1, 0xa, 0x174, &(0x7f0000000480)="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"})
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:32:35 executing program 2:
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, 0x0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, 0x0, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', <r0=>0x0, 0x4, 0x3, 0x40, 0x7, 0x2, @loopback, @loopback, 0x8021, 0x8, 0x3f, 0x1f}})
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', <r2=>r0, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000c80)={'sit0\x00', &(0x7f0000000c00)={'sit0\x00', r2, 0x4, 0x80, 0x8, 0xafc, 0x18, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0xe, 0x8, 0x781, 0x3}})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), r1)
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
munlock(&(0x7f0000ff6000/0xa000)=nil, 0xa000)
sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x44, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x3a}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:32:35 executing program 7:
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, 0x0)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)

06:32:35 executing program 3:
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
syz_io_uring_setup(0xb88, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:32:35 executing program 4:
syz_io_uring_setup(0xb88, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:32:35 executing program 1:
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480)=0x5)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', 0x0, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:32:35 executing program 0:
shmget(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480))
r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x0, @remote, 'lo\x00'}}, 0x80)
syz_io_uring_setup(0x0, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:32:35 executing program 4:
syz_io_uring_setup(0xb88, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:32:35 executing program 5:
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x0, 0x8, 0x3, 0x247}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:32:35 executing program 3:
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x0, 0x8, 0x3, 0x247}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:32:35 executing program 2:
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, 0x0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, 0x0, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', <r0=>0x0, 0x4, 0x3, 0x40, 0x7, 0x2, @loopback, @loopback, 0x8021, 0x8, 0x3f, 0x1f}})
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', <r2=>r0, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000c80)={'sit0\x00', &(0x7f0000000c00)={'sit0\x00', r2, 0x4, 0x80, 0x8, 0xafc, 0x18, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0xe, 0x8, 0x781, 0x3}})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), r1)
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
munlock(&(0x7f0000ff6000/0xa000)=nil, 0xa000)
sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x44, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x3a}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:32:35 executing program 7:
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)

06:32:35 executing program 1:
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480)=0x5)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', 0x0, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:32:35 executing program 4:
syz_io_uring_setup(0xb88, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:32:35 executing program 0:
shmget(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480))
openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x0, @remote, 'lo\x00'}}, 0x80)
syz_io_uring_setup(0xb88, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:32:44 executing program 5:
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x0, 0x8, 0x3, 0x247}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:32:44 executing program 7:
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480)=0x5)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', 0x0, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:32:44 executing program 1:
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480)=0x5)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', 0x0, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:32:44 executing program 0:
shmget(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480))
openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x0, @remote, 'lo\x00'}}, 0x80)
syz_io_uring_setup(0xb88, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:32:44 executing program 3:
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x0, 0x8, 0x3, 0x247}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:32:44 executing program 2:
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, 0x0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, 0x0, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340), 0xc, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', <r0=>0x0, 0x4, 0x3, 0x40, 0x7, 0x2, @loopback, @loopback, 0x8021, 0x8, 0x3f, 0x1f}})
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', <r2=>r0, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000c80)={'sit0\x00', &(0x7f0000000c00)={'sit0\x00', r2, 0x4, 0x80, 0x8, 0xafc, 0x18, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0xe, 0x8, 0x781, 0x3}})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), r1)
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
munlock(&(0x7f0000ff6000/0xa000)=nil, 0xa000)
sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x44, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x3a}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:32:44 executing program 4:
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x0, 0x8, 0x3, 0x247}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:32:44 executing program 6:
ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000200)={0x7ff, 0x6, 0x0, 0x0, 0x15, "16fc41fd0b316794"})
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
sched_yield()
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x200040, 0x0)
pipe(0x0)
ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000880)={0x0, 0x1, 0x1, 0xa, 0x174, &(0x7f0000000480)="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"})
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:32:44 executing program 4:
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x0, 0x8, 0x3, 0x247}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:32:44 executing program 2:
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, 0x0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, 0x0, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340), 0xc, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', <r0=>0x0, 0x4, 0x3, 0x40, 0x7, 0x2, @loopback, @loopback, 0x8021, 0x8, 0x3f, 0x1f}})
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', <r2=>r0, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000c80)={'sit0\x00', &(0x7f0000000c00)={'sit0\x00', r2, 0x4, 0x80, 0x8, 0xafc, 0x18, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0xe, 0x8, 0x781, 0x3}})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), r1)
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
munlock(&(0x7f0000ff6000/0xa000)=nil, 0xa000)
sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x44, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x3a}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:32:51 executing program 0:
shmget(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480))
openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x0, @remote, 'lo\x00'}}, 0x80)
syz_io_uring_setup(0xb88, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:32:51 executing program 4:
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x0, 0x8, 0x3, 0x247}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:32:51 executing program 5:
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x0, 0x8, 0x3, 0x247}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:32:51 executing program 1:
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480)=0x5)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', 0x0, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:32:51 executing program 2:
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, 0x0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, 0x0, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340), 0xc, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', <r0=>0x0, 0x4, 0x3, 0x40, 0x7, 0x2, @loopback, @loopback, 0x8021, 0x8, 0x3f, 0x1f}})
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', <r2=>r0, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000c80)={'sit0\x00', &(0x7f0000000c00)={'sit0\x00', r2, 0x4, 0x80, 0x8, 0xafc, 0x18, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0xe, 0x8, 0x781, 0x3}})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), r1)
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
munlock(&(0x7f0000ff6000/0xa000)=nil, 0xa000)
sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x44, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x3a}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:32:51 executing program 6:
ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000200)={0x7ff, 0x6, 0x0, 0x0, 0x15, "16fc41fd0b316794"})
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
sched_yield()
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x200040, 0x0)
pipe(0x0)
ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000880)={0x0, 0x1, 0x1, 0xa, 0x174, &(0x7f0000000480)="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"})
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:32:51 executing program 7:
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480)=0x5)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', 0x0, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:32:51 executing program 3:
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x0, 0x8, 0x3, 0x247}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:32:51 executing program 4:
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x0, 0x3, 0x247}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:32:51 executing program 2:
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, 0x0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, 0x0, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340), 0xc, &(0x7f0000000400)={0x0}}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', <r0=>0x0, 0x4, 0x3, 0x40, 0x7, 0x2, @loopback, @loopback, 0x8021, 0x8, 0x3f, 0x1f}})
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', <r2=>r0, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000c80)={'sit0\x00', &(0x7f0000000c00)={'sit0\x00', r2, 0x4, 0x80, 0x8, 0xafc, 0x18, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0xe, 0x8, 0x781, 0x3}})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), r1)
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
munlock(&(0x7f0000ff6000/0xa000)=nil, 0xa000)
sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x44, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x3a}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:32:51 executing program 6:
ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000200)={0x7ff, 0x6, 0x0, 0x0, 0x15, "16fc41fd0b316794"})
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
sched_yield()
openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x200040, 0x0)
pipe(&(0x7f0000000400))
ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000880)={0x0, 0x1, 0x1, 0xa, 0x174, &(0x7f0000000480)="5edb89eaad007f1a706b88cb3a9480a5562c7e564ce1a22c8df8f726fe37b4d862d84daee9ed2138f78aa73236b0f8aa29f6887a95c11b5632235b1ca585ef6e2b7d79ce6c276e0c0189f2f6db5247a5ab874e166f440f821e03103a32a9272c814236d289278b79c32ebf6ba6c5233b1f7a4d2c44a2a71cdb392a600e64a4af7a10fa0a8bea9cc5b90e126f49978fef66f5ade48a06d597417f758954e92a0a4c12a021983aaf60aa29f6cab1b2823a791039220ac2a52293635f2edb83dc426f276233492c81c2ed499c54fbb8111cfc01333e31d1e6284939f8b46349b320a0f165c6b1c7112dc9f76df0ed194c098450de5466e14e767d16039e649dfed15123f0380ac5b45a6af5920aac7b058e5bfb4e3eadc9d8465048073c050bb96ee01990875b09cf164a282a1f3e8b3ccf3f76077eace47e8d2f1e0a2a5fc00477ef309fd57c0d845dd2d86350e999349ff41d6a82704dabf9081eea0a228feb9308a03b69844b13d48b7082865047eefa7a70bfea6488322c7739c6446fbe0afb052a520dc3bd0c78b19c73e16ce0ef6ea5b883876cf677537b667fbcb430fd5f773ad2b86f4db609c89166cfbb4a090a35769055a68c45bbc8c58c8e9ba527a211a12730b3295be141c2092f17b2d8df1b02c3b3e06955d667737d8888eceae78b0888e09713470bdf19ddcd4ad497d41b41e6b4df45662e6801b4216c1965e3df45e645f9253fe67bd0f65d37a052bab9769a2a32c0da67496cddd7752b34f4a10cface1f531869f24d11733334baf3fa8b8450261d61f41218716e36c4edb502ba59ce7f4ac2abc53ca940fc92dbadeff2ba66debdf785776147c5709f31927a7e081883ef681b6591e9259fa33541c087f7884b2778a0cc839781be052050d3c71ea8d886c129b61e6bfcf4686934f18da4e7cede143e9c0db819675b4e1aeb1f87efafdb0279dd6d5d5b0efcd6a8e7c55141fc7ecfd50dd8cb9879e3768b4d6c481a7c310609e987303254bee0461c5fcd6cd35b46361b6b221894bc6153ef150d4f9e7d2f0fe479e3c71f17dc51dc39ed12e66dab898a54a232b675dfe4e7bb637fef8ea611585fcb66d3ee54dff31967f0089e47d249daffd1e014e2c2e11ca9e357b483c8b0e6c1d890874830f5d54b2b9f057b62a3ea0175bce6545ae55f523618384a2beb7f095f8882ce7105e10fc0b0cdc040c1c8da0eddfa642cd0e02ac42c9218617a0a6cf440752d8c8ec9bcb6e25c35b8636dcdee315811155b500e52911b3dc3c9f7a2d50cfbd560c6db46ca8d5614f047c048cbbdf9df5865916321f5533ce617005da2b39bfa433856a2f73d5ad40b97c7787feaf990de49222fd58d0f535b458f5f1ce067ddf0fb0d56ada3ae5e7d43afcc9ff15eb9e5706f6c902adfd4f8d38f4d8ef8832a070c739d7a4515d0aa75643597f71d7753"})
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:32:51 executing program 0:
shmget(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480))
r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x0, @remote, 'lo\x00'}}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x0, 0x8, 0x3, 0x247, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:32:51 executing program 3:
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x0, 0x3, 0x247}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:32:52 executing program 2:
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, 0x0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, 0x0, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340), 0xc, &(0x7f0000000400)={0x0}}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', <r0=>0x0, 0x4, 0x3, 0x40, 0x7, 0x2, @loopback, @loopback, 0x8021, 0x8, 0x3f, 0x1f}})
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', <r2=>r0, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000c80)={'sit0\x00', &(0x7f0000000c00)={'sit0\x00', r2, 0x4, 0x80, 0x8, 0xafc, 0x18, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0xe, 0x8, 0x781, 0x3}})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), r1)
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
munlock(&(0x7f0000ff6000/0xa000)=nil, 0xa000)
sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x44, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x3a}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:32:52 executing program 5:
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x0, 0x3, 0x247}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:32:52 executing program 1:
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x29, 0x7, 0x5, 0xff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3a8b, 0x5}})
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480)=0x5)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', 0x0, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:32:52 executing program 0:
shmget(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480))
r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x0, @remote, 'lo\x00'}}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x0, 0x8, 0x3, 0x247, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:33:00 executing program 0:
shmget(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480))
r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x0, @remote, 'lo\x00'}}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x0, 0x8, 0x3, 0x247, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:33:00 executing program 1:
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, 0x0)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480)=0x5)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', 0x0, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:33:00 executing program 7:
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480)=0x5)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', 0x0, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:33:00 executing program 6:
ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000200)={0x7ff, 0x6, 0x0, 0x0, 0x15, "16fc41fd0b316794"})
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
sched_yield()
openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x200040, 0x0)
pipe(&(0x7f0000000400))
ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000880)={0x0, 0x1, 0x1, 0xa, 0x174, &(0x7f0000000480)="5edb89eaad007f1a706b88cb3a9480a5562c7e564ce1a22c8df8f726fe37b4d862d84daee9ed2138f78aa73236b0f8aa29f6887a95c11b5632235b1ca585ef6e2b7d79ce6c276e0c0189f2f6db5247a5ab874e166f440f821e03103a32a9272c814236d289278b79c32ebf6ba6c5233b1f7a4d2c44a2a71cdb392a600e64a4af7a10fa0a8bea9cc5b90e126f49978fef66f5ade48a06d597417f758954e92a0a4c12a021983aaf60aa29f6cab1b2823a791039220ac2a52293635f2edb83dc426f276233492c81c2ed499c54fbb8111cfc01333e31d1e6284939f8b46349b320a0f165c6b1c7112dc9f76df0ed194c098450de5466e14e767d16039e649dfed15123f0380ac5b45a6af5920aac7b058e5bfb4e3eadc9d8465048073c050bb96ee01990875b09cf164a282a1f3e8b3ccf3f76077eace47e8d2f1e0a2a5fc00477ef309fd57c0d845dd2d86350e999349ff41d6a82704dabf9081eea0a228feb9308a03b69844b13d48b7082865047eefa7a70bfea6488322c7739c6446fbe0afb052a520dc3bd0c78b19c73e16ce0ef6ea5b883876cf677537b667fbcb430fd5f773ad2b86f4db609c89166cfbb4a090a35769055a68c45bbc8c58c8e9ba527a211a12730b3295be141c2092f17b2d8df1b02c3b3e06955d667737d8888eceae78b0888e09713470bdf19ddcd4ad497d41b41e6b4df45662e6801b4216c1965e3df45e645f9253fe67bd0f65d37a052bab9769a2a32c0da67496cddd7752b34f4a10cface1f531869f24d11733334baf3fa8b8450261d61f41218716e36c4edb502ba59ce7f4ac2abc53ca940fc92dbadeff2ba66debdf785776147c5709f31927a7e081883ef681b6591e9259fa33541c087f7884b2778a0cc839781be052050d3c71ea8d886c129b61e6bfcf4686934f18da4e7cede143e9c0db819675b4e1aeb1f87efafdb0279dd6d5d5b0efcd6a8e7c55141fc7ecfd50dd8cb9879e3768b4d6c481a7c310609e987303254bee0461c5fcd6cd35b46361b6b221894bc6153ef150d4f9e7d2f0fe479e3c71f17dc51dc39ed12e66dab898a54a232b675dfe4e7bb637fef8ea611585fcb66d3ee54dff31967f0089e47d249daffd1e014e2c2e11ca9e357b483c8b0e6c1d890874830f5d54b2b9f057b62a3ea0175bce6545ae55f523618384a2beb7f095f8882ce7105e10fc0b0cdc040c1c8da0eddfa642cd0e02ac42c9218617a0a6cf440752d8c8ec9bcb6e25c35b8636dcdee315811155b500e52911b3dc3c9f7a2d50cfbd560c6db46ca8d5614f047c048cbbdf9df5865916321f5533ce617005da2b39bfa433856a2f73d5ad40b97c7787feaf990de49222fd58d0f535b458f5f1ce067ddf0fb0d56ada3ae5e7d43afcc9ff15eb9e5706f6c902adfd4f8d38f4d8ef8832a070c739d7a4515d0aa75643597f71d7753"})
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:33:00 executing program 3:
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x0, 0x3, 0x247}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:33:00 executing program 5:
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x0, 0x0, 0x247}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:33:00 executing program 2:
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, 0x0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, 0x0, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340), 0xc, &(0x7f0000000400)={0x0}}, 0x200000c0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', <r0=>0x0, 0x4, 0x3, 0x40, 0x7, 0x2, @loopback, @loopback, 0x8021, 0x8, 0x3f, 0x1f}})
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', <r2=>r0, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000c80)={'sit0\x00', &(0x7f0000000c00)={'sit0\x00', r2, 0x4, 0x80, 0x8, 0xafc, 0x18, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0xe, 0x8, 0x781, 0x3}})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), r1)
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
munlock(&(0x7f0000ff6000/0xa000)=nil, 0xa000)
sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x44, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x3a}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:33:00 executing program 4:
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x0, 0x0, 0x247}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:33:00 executing program 0:
shmget(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480))
r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x0, @remote, 'lo\x00'}}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x0, 0x3, 0x247, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:33:00 executing program 3:
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x0, 0x3, 0x247}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:33:00 executing program 2:
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, 0x0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, 0x0, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340), 0xc, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', <r0=>0x0, 0x4, 0x3, 0x40, 0x7, 0x2, @loopback, @loopback, 0x8021, 0x8, 0x3f, 0x1f}})
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', <r2=>r0, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000c80)={'sit0\x00', &(0x7f0000000c00)={'sit0\x00', r2, 0x4, 0x80, 0x8, 0xafc, 0x18, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0xe, 0x8, 0x781, 0x3}})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), r1)
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
munlock(&(0x7f0000ff6000/0xa000)=nil, 0xa000)
sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x44, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x3a}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:33:00 executing program 5:
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

[  470.436745] 
[  470.437095] =====================================
[  470.437783] WARNING: bad unlock balance detected!
[  470.438470] 6.19.0-rc5-next-20260114 #1 Not tainted
[  470.439175] -------------------------------------
[  470.439864] syz-executor.0/6362 is trying to release lock (rcu_read_lock) at:
[  470.440887] [<ffffffff81c1cd75>] __wait_on_freeing_inode+0x105/0x350
[  470.441818] but there are no more locks to release!
[  470.442515] 
[  470.442515] other info that might help us debug this:
[  470.443425] 4 locks held by syz-executor.0/6362:
[  470.444117]  #0: ffff88800f6183f8 (sb_writers#3){.+.+}-{0:0}, at: filename_create+0xf7/0x400
[  470.445383]  #1: ffff88803009bd10 (&type->i_mutex_dir_key#3/1){+.+.}-{4:4}, at: filename_create+0x1b1/0x400
[  470.446828]  #2: ffff88800f61c950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xe32/0x12d0
[  470.448149]  #3: ffffffff85c16898 (inode_hash_lock){+.+.}-{3:3}, at: insert_inode_locked+0xf9/0x890
[  470.449484] 
[  470.449484] stack backtrace:
[  470.450124] CPU: 1 UID: 0 PID: 6362 Comm: syz-executor.0 Not tainted 6.19.0-rc5-next-20260114 #1 PREEMPT(lazy) 
[  470.450150] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  470.450162] Call Trace:
[  470.450169]  <TASK>
[  470.450177]  dump_stack_lvl+0xca/0x120
[  470.450222]  ? __wait_on_freeing_inode+0x105/0x350
[  470.450248]  print_unlock_imbalance_bug+0x118/0x130
[  470.450275]  ? __wait_on_freeing_inode+0x105/0x350
[  470.450301]  lock_release+0x1ee/0x270
[  470.450328]  __wait_on_freeing_inode+0x10a/0x350
[  470.450355]  ? __pfx___wait_on_freeing_inode+0x10/0x10
[  470.450383]  ? __pfx_var_wake_function+0x10/0x10
[  470.450415]  ? lock_is_held_type+0x9e/0x120
[  470.450449]  insert_inode_locked+0x25f/0x890
[  470.450480]  __ext4_new_inode+0x223d/0x4cd0
[  470.450511]  ? __pfx___ext4_new_inode+0x10/0x10
[  470.450537]  ? __pfx___dquot_initialize+0x10/0x10
[  470.450569]  ? __pfx_avc_has_perm+0x10/0x10
[  470.450597]  ext4_symlink+0x623/0xb40
[  470.450630]  ? __pfx_ext4_symlink+0x10/0x10
[  470.450659]  ? security_inode_permission+0x72/0xe0
[  470.450683]  vfs_symlink+0x44b/0x840
[  470.450713]  do_symlinkat+0x153/0x440
[  470.450737]  ? __pfx_do_symlinkat+0x10/0x10
[  470.450761]  ? strncpy_from_user+0x21b/0x2f0
[  470.450791]  __x64_sys_symlink+0x79/0xa0
[  470.450816]  do_syscall_64+0xbf/0x420
[  470.450838]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  470.450860] RIP: 0033:0x7eff869d7427
[  470.450876] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  470.450895] RSP: 002b:00007ffd49f40588 EFLAGS: 00000202 ORIG_RAX: 0000000000000058
[  470.450915] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007eff869d7427
[  470.450929] RDX: ffffffffffffffbc RSI: 00007eff86a3200e RDI: 00007eff86a311dd
[  470.450942] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffd49f40000
[  470.450955] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001
[  470.450968] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffd49f40650
[  470.450987]  </TASK>
[  470.485033] ------------[ cut here ]------------
[  470.487966] WARNING: kernel/rcu/tree_plugin.h:443 at __rcu_read_unlock+0x25f/0x5c0, CPU#1: syz-executor.0/6362
[  470.489615] Modules linked in:
[  470.490155] CPU: 1 UID: 0 PID: 6362 Comm: syz-executor.0 Not tainted 6.19.0-rc5-next-20260114 #1 PREEMPT(lazy) 
[  470.491678] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  470.493010] RIP: 0010:__rcu_read_unlock+0x25f/0x5c0
[  470.493945] Code: f2 02 00 00 c7 43 58 01 00 00 00 bf 09 00 00 00 e8 16 c0 de ff 4d 85 f6 0f 84 73 fe ff ff e8 38 8a 20 00 fb e9 68 fe ff ff 90 <0f> 0b 90 5b 5d 41 5c 41 5d 41 5e e9 81 24 74 03 e8 bc 5c 56 00 e9
[  470.496637] RSP: 0018:ffff8880448cf9a0 EFLAGS: 00010286
[  470.497482] RAX: 00000000ffffffff RBX: ffff8880484c9b80 RCX: ffffffff81565a27
[  470.498592] RDX: 0000000000000000 RSI: ffffffff81565a30 RDI: ffff8880484c9f7c
[  470.499703] RBP: ffff8880484c9b80 R08: 0000000000000000 R09: fffffbfff0ba6ffc
[  470.500807] R10: 0000000000000000 R11: 0000000000000001 R12: ffff8880484c9b80
[  470.501902] R13: 0000000000000001 R14: ffffffff85c0d330 R15: ffff88801bbf9fb0
[  470.503012] FS:  000055557b432400(0000) GS:ffff8880e5443000(0000) knlGS:0000000000000000
[  470.504316] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  470.505146] CR2: 00007f7ef7567000 CR3: 0000000013795000 CR4: 0000000000350ef0
[  470.506330] Call Trace:
[  470.506772]  <TASK>
[  470.508047]  __wait_on_freeing_inode+0x10f/0x350
[  470.509402]  ? __pfx___wait_on_freeing_inode+0x10/0x10
[  470.511456]  ? __pfx_var_wake_function+0x10/0x10
[  470.513752]  ? lock_is_held_type+0x9e/0x120
[  470.515833]  insert_inode_locked+0x25f/0x890
[  470.518866]  __ext4_new_inode+0x223d/0x4cd0
[  470.523544]  ? __pfx___ext4_new_inode+0x10/0x10
[  470.525823]  ? __pfx___dquot_initialize+0x10/0x10
[  470.527299]  ? __pfx_avc_has_perm+0x10/0x10
[  470.530597]  ext4_symlink+0x623/0xb40
[  470.534784]  ? __pfx_ext4_symlink+0x10/0x10
[  470.536684]  ? security_inode_permission+0x72/0xe0
[  470.544953]  vfs_symlink+0x44b/0x840
[  470.547623]  do_symlinkat+0x153/0x440
[  470.549671]  ? __pfx_do_symlinkat+0x10/0x10
[  470.550992]  ? strncpy_from_user+0x21b/0x2f0
[  470.554554]  __x64_sys_symlink+0x79/0xa0
[  470.555995]  do_syscall_64+0xbf/0x420
[  470.557541]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  470.558517] RIP: 0033:0x7eff869d7427
[  470.559165] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  470.561785] RSP: 002b:00007ffd49f40588 EFLAGS: 00000202 ORIG_RAX: 0000000000000058
[  470.562925] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007eff869d7427
[  470.564010] RDX: ffffffffffffffbc RSI: 00007eff86a3200e RDI: 00007eff86a311dd
[  470.565114] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffd49f40000
[  470.566200] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001
[  470.567349] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffd49f40650
[  470.572108]  </TASK>
[  470.572532] irq event stamp: 693
[  470.573009] hardirqs last  enabled at (693): [<ffffffff84d16a9c>] _raw_spin_unlock_irqrestore+0x2c/0x50
[  470.574524] hardirqs last disabled at (692): [<ffffffff84d167f3>] _raw_spin_lock_irqsave+0x53/0x60
[  470.575985] softirqs last  enabled at (688): [<ffffffff812cdbb9>] kernel_fpu_end+0x59/0x70
[  470.577329] softirqs last disabled at (686): [<ffffffff812cea8b>] kernel_fpu_begin_mask+0x1bb/0x300
[  470.578782] ---[ end trace 0000000000000000 ]---
06:33:08 executing program 0:
shmget(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480))
r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x0, @remote, 'lo\x00'}}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x0, 0x3, 0x247, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:33:08 executing program 2:
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, 0x0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, 0x0, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340), 0xc, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', <r0=>0x0, 0x4, 0x3, 0x40, 0x7, 0x2, @loopback, @loopback, 0x8021, 0x8, 0x3f, 0x1f}})
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', <r2=>r0, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000c80)={'sit0\x00', &(0x7f0000000c00)={'sit0\x00', r2, 0x4, 0x80, 0x8, 0xafc, 0x18, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0xe, 0x8, 0x781, 0x3}})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), r1)
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
munlock(&(0x7f0000ff6000/0xa000)=nil, 0xa000)
sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x44, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x3a}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:33:08 executing program 7:
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480)=0x5)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', 0x0, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:33:08 executing program 6:
ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000200)={0x7ff, 0x6, 0x0, 0x0, 0x15, "16fc41fd0b316794"})
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
sched_yield()
openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x200040, 0x0)
pipe(&(0x7f0000000400))
ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:33:08 executing program 1:
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, 0x0)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480)=0x5)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', 0x0, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:33:08 executing program 3:
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x0, 0x247}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:33:08 executing program 5:
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, 0x0, &(0x7f00000010c0))

06:33:08 executing program 4:
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:33:08 executing program 5:
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, 0x0, &(0x7f00000010c0))

06:33:08 executing program 3:
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x0, 0x247}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:33:08 executing program 0:
shmget(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480))
r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x0, @remote, 'lo\x00'}}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x0, 0x3, 0x247, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:33:08 executing program 2:
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, 0x0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, 0x0, 0x40)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340), 0xc, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x0)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', <r0=>0x0, 0x4, 0x3, 0x40, 0x7, 0x2, @loopback, @loopback, 0x8021, 0x8, 0x3f, 0x1f}})
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', <r2=>r0, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000c80)={'sit0\x00', &(0x7f0000000c00)={'sit0\x00', r2, 0x4, 0x80, 0x8, 0xafc, 0x18, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0xe, 0x8, 0x781, 0x3}})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), r1)
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
munlock(&(0x7f0000ff6000/0xa000)=nil, 0xa000)
sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x44, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x3a}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:33:08 executing program 6:
ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000200)={0x7ff, 0x6, 0x0, 0x0, 0x15, "16fc41fd0b316794"})
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
sched_yield()
openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x200040, 0x0)
pipe(&(0x7f0000000400))
ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff)

06:33:08 executing program 4:
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:33:08 executing program 7:
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480)=0x5)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', 0x0, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:33:08 executing program 1:
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, 0x0)
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480)=0x5)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b00)={'tunl0\x00', 0x0, 0x20, 0x8, 0x1, 0xef5, {{0x1d, 0x4, 0x1, 0x1, 0x74, 0x65, 0x0, 0x20, 0x4, 0x0, @private=0xa010100, @local, {[@end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe2, [@broadcast]}, @ra={0x94, 0x4, 0x3}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x4, [{@broadcast, 0x8}, {@private=0xa010102, 0x8}, {@local, 0x6}, {@private=0xa010102, 0x1}, {@local, 0x9a28}]}, @lsrr={0x83, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010101]}]}}}}})
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x3, 0x247, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:33:08 executing program 3:
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x0, 0x247}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:33:08 executing program 4:
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))

06:33:08 executing program 5:
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, 0x0, &(0x7f00000010c0))

06:33:08 executing program 0:
shmget(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000480))
r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
recvfrom(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x40010100, &(0x7f0000000e00)=@pppoe={0x18, 0x0, {0x0, @remote, 'lo\x00'}}, 0x80)
syz_io_uring_setup(0xb88, &(0x7f0000001000)={0x0, 0x422f, 0x8, 0x0, 0x247, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001080), &(0x7f00000010c0))


VM DIAGNOSIS:
06:33:00  Registers:
info registers vcpu 0
RAX=0000000000000001 RBX=0000000000000001 RCX=ffffffff84d172ee RDX=fffffbfff0b82d11
RSI=0000000000000004 RDI=ffffffff85c16880 RBP=ffffffff85c16880 RSP=ffff88801a8c7b18
R8 =0000000000000000 R9 =fffffbfff0b82d10 R10=ffffffff85c16883 R11=0000000000000000
R12=1ffff11003518f64 R13=0000000000000003 R14=fffffbfff0b82d10 R15=ffff88801a8c7b50
RIP=ffffffff84d17480 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 000055555f830400 00000000 00000000
GS =0000 ffff8880e5343000 00000000 00000000
LDT=0000 fffffe7c00000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055555f839c58 CR3=000000001e289000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ff00000000ff000000000000000000ff XMM01=25252525252525252525252525252525
XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000
XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000061 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff82973905 RDI=ffffffff889c0960 RBP=ffffffff889c0920 RSP=ffff88806cf08938
R8 =0000000000000000 R9 =ffffed10016b5046 R10=0000000000000061 R11=6572617764726148
R12=0000000000000061 R13=0000000000000010 R14=ffffffff889c0920 R15=ffffffff829738f0
RIP=ffffffff8297395d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 000055557b432400 00000000 00000000
GS =0000 ffff8880e5443000 00000000 00000000
LDT=0000 fffffe4400000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f7ef7567000 CR3=0000000013795000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000a60ce07b00000000cec3662e XMM01=000000000000000003515b82db34ca11
XMM02=0000000000000000333bebdfd0a6a21d XMM03=00000000000000000000000000000000
XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000