Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:59316' (ECDSA) to the list of known hosts. 2026/01/15 13:19:24 fuzzer started 2026/01/15 13:19:25 dialing manager at localhost:35245 syzkaller login: [ 44.220457] cgroup: Unknown subsys name 'net' [ 44.296916] cgroup: Unknown subsys name 'cpuset' [ 44.312066] cgroup: Unknown subsys name 'rlimit' 2026/01/15 13:19:35 syscalls: 202 2026/01/15 13:19:35 code coverage: enabled 2026/01/15 13:19:35 comparison tracing: enabled 2026/01/15 13:19:35 extra coverage: enabled 2026/01/15 13:19:35 setuid sandbox: enabled 2026/01/15 13:19:35 namespace sandbox: enabled 2026/01/15 13:19:35 Android sandbox: enabled 2026/01/15 13:19:35 fault injection: enabled 2026/01/15 13:19:35 leak checking: enabled 2026/01/15 13:19:35 net packet injection: enabled 2026/01/15 13:19:35 net device setup: enabled 2026/01/15 13:19:35 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2026/01/15 13:19:35 devlink PCI setup: PCI device 0000:00:10.0 is not available 2026/01/15 13:19:35 USB emulation: enabled 2026/01/15 13:19:35 hci packet injection: enabled 2026/01/15 13:19:35 wifi device emulation: enabled 2026/01/15 13:19:35 802.15.4 emulation: enabled 2026/01/15 13:19:35 fetching corpus: 0, signal 0/0 (executing program) 2026/01/15 13:19:36 starting 8 fuzzer processes 13:19:36 executing program 0: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20, 0x7800, 0x99, 0x7fff}}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_TID={0xc}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x4) r3 = accept$packet(r1, 0x0, &(0x7f00000003c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000440)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x7f, r4}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', r2, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) r6 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r6, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) capset(&(0x7f00000005c0), &(0x7f0000000600)={0x53f1, 0x8, 0xc230, 0xfffffeff, 0x9, 0x2}) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000640)) setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000680)={{0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x6}, {0xa, 0x4e20, 0x200, @rand_addr=' \x01\x00'}, 0x9f0, [0x3ff, 0x315a, 0x80000000, 0xffff, 0x3ff, 0x9, 0x6, 0x4]}, 0x5c) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000007c0)={'sit0\x00', &(0x7f0000000740)={'sit0\x00', r5, 0x4, 0xff, 0x1, 0x2, 0x0, @mcast1, @mcast2, 0x8000, 0x8000, 0x1, 0xffff8001}}) remap_file_pages(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x8fe, 0x2000) getsockname$packet(r1, &(0x7f0000000800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000840)=0x14) r7 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r7) 13:19:36 executing program 1: ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(0xffffffffffffffff, 0xc0a85322, &(0x7f0000000000)) r0 = syz_open_dev$vcsa(&(0x7f0000000180), 0x1, 0x82) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x98, 0x7, 0x1c, 0x6, 0x0, 0x81, 0x101, 0x4, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x10120, 0x8, 0x1000, 0x2, 0x800, 0x258, 0x9, 0x0, 0xfffffffb, 0x0, 0x3}, 0x0, 0x3, r0, 0x9) syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), 0xffffffffffffffff) r2 = getpid() r3 = fork() openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) wait4(r2, &(0x7f0000000240), 0x80000000, &(0x7f0000000280)) r4 = openat$cgroup_freezer_state(r0, &(0x7f0000000340), 0x2, 0x0) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r4, &(0x7f0000000380)={r0, r1, 0x6}) io_uring_setup(0xca2, &(0x7f00000003c0)={0x0, 0x6132, 0x20, 0x3, 0x289, 0x0, r0}) r5 = accept4$inet6(r0, &(0x7f0000000440)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000480)=0x1c, 0x80800) setsockopt$inet6_group_source_req(r5, 0x29, 0x2b, &(0x7f00000004c0)={0x7f, {{0xa, 0x4e20, 0xfffffff9, @mcast2}}, {{0xa, 0x4e24, 0x111a564c, @local, 0x4}}}, 0x108) r6 = syz_open_dev$vcsa(&(0x7f0000000600), 0x193, 0x80) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000640)={{{@in=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@local}}, &(0x7f0000000740)=0xe8) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000800)={'ip6_vti0\x00', &(0x7f0000000780)={'ip6tnl0\x00', r7, 0x4, 0x5, 0x5, 0x7, 0x20, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8000, 0x40, 0x3ab0, 0xcee0}}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040000}, 0x20000000) r8 = syz_io_uring_complete(0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r8, &(0x7f0000000a40)={&(0x7f0000000940), 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x68, 0x0, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x810}, 0x4044000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001ac0)=@IORING_OP_SEND={0x1a, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000ac0)="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", 0x1000, 0x800, 0x1}, 0x1) 13:19:36 executing program 2: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x40}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0xc0094) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r1, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7ff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7f}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x2000c051) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x4c, r2, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1eedc1aa}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x96b0}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x626}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004801) r3 = syz_open_dev$vcsa(&(0x7f0000000400), 0x800, 0x80080) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x8080) r4 = syz_open_dev$vcsa(&(0x7f0000000540), 0x800, 0x200000) write$cgroup_freezer_state(r4, &(0x7f0000000580)='FREEZING\x00', 0x9) socketpair(0x1, 0x3, 0x4, &(0x7f00000005c0)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000640)={'batadv0\x00', 0x0}) sendmsg$GTP_CMD_GETPDP(r5, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x54, 0x0, 0x401, 0x70bd27, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8, 0x1, r6}, @GTPA_FLOW={0x6}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_TID={0xc, 0x3, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x8000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, &(0x7f0000000780)={0x1000001c}) r7 = syz_open_dev$vcsa(&(0x7f00000007c0), 0x3, 0xb0ed8b12dabfe13b) sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x44, r0, 0x0, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1d}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x8040}, 0x800) r8 = syz_io_uring_complete(0x0) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x24, 0x0, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r8}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x24}, 0x1, 0x0, 0x0, 0x8801}, 0x24000010) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f0000000a40)={0xfffffffa, 0x1f, 0x1, 'queue1\x00', 0x749}) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x58, r0, 0x600, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x40000) 13:19:36 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0xdcc0, 0x50000) ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f0000000040)) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x1, 0x4) r1 = syz_io_uring_complete(0x0) r2 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x8000, 0x2000) read$ptp(r2, &(0x7f0000000100)=""/135, 0x87) ioctl$PTP_SYS_OFFSET_EXTENDED(r0, 0xc4c03d09, &(0x7f00000001c0)={0xc}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x20, 0x0, 0x423, 0x70bd27, 0x3a3ed3f, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa0}]}, 0x20}, 0x1, 0x0, 0x0, 0x2404c051}, 0x4855) epoll_pwait2(r0, &(0x7f0000000780)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, &(0x7f0000000800), &(0x7f0000000840)={[0x20a]}, 0x8) ioctl$PTP_CLOCK_GETCAPS(r1, 0x80503d01, &(0x7f0000000880)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000900)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000940), 0x23bf, 0x111000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000a00)={'ip6_vti0\x00', &(0x7f0000000980)={'syztnl0\x00', 0x0, 0x2f, 0xd, 0x7f, 0xffffffff, 0x2d, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x1, 0x80000000, 0x9}}) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000a40)=0x5, 0x4) recvfrom$packet(r3, &(0x7f0000000a80)=""/7, 0x7, 0x10040, &(0x7f0000000ac0)={0x11, 0xf8, r4, 0x1, 0x20, 0x6, @local}, 0x14) r5 = fsmount(0xffffffffffffffff, 0x0, 0x4) ioctl$PTP_PIN_SETFUNC2(r2, 0x40603d10, &(0x7f0000000b00)={'\x00', 0xfffffff8, 0x3, 0x2b}) getsockname$packet(r5, &(0x7f0000000b80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000bc0)=0x14) getsockname$packet(r2, &(0x7f0000000c00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000c40)=0x14) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000d00)={'syztnl0\x00', &(0x7f0000000c80)={'syztnl0\x00', r6, 0x2f, 0x2, 0x6, 0x0, 0x18, @loopback, @local, 0x8000, 0x7800, 0x0, 0x7d6}}) [ 54.609404] audit: type=1400 audit(1768483176.960:7): avc: denied { execmem } for pid=272 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 13:19:37 executing program 4: ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f0000000000)={'\x00', 0x4d31343c, 0x3, 0x1000000}) r0 = syz_open_dev$vcsu(&(0x7f0000000080), 0xfff, 0x20001) ioctl$PTP_SYS_OFFSET_EXTENDED(r0, 0xc4c03d09, &(0x7f00000000c0)={0x6}) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f0000000580)={0x7, 0x5}) r1 = fsmount(r0, 0x0, 0x70) r2 = accept$inet6(r1, &(0x7f00000005c0)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000600)=0x1c) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000640)={0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r3, &(0x7f0000000680), 0x0, 0x0, 0x80000}, 0x400) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000008c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/231, 0xe7, 0x0, &(0x7f0000000800)=""/133, 0x85}, &(0x7f0000000900)=0x40) r4 = accept4$inet6(r2, &(0x7f0000000940)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000980)=0x1c, 0x800) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f00000009c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x11}}, 0x76}) ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f0000000a00)={0x3, 0x6, 0x1}) sigaltstack(&(0x7f0000fff000/0x1000)=nil, &(0x7f0000000a40)) remap_file_pages(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x2000000, 0xffff, 0x80000) read$ptp(0xffffffffffffffff, &(0x7f0000000a80)=""/254, 0xfe) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000b80)={0xf65e, {{0xa, 0x4e21, 0x6, @remote, 0x80000000}}, 0x0, 0x3, [{{0xa, 0x4e24, 0xff, @remote, 0x7}}, {{0xa, 0x4e21, 0x10001, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x3}}, {{0xa, 0x4e23, 0x981, @dev={0xfe, 0x80, '\x00', 0x40}}}]}, 0x210) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) msync(&(0x7f0000ffb000/0x5000)=nil, 0x5000, 0x4) read$ptp(r0, &(0x7f0000000dc0)=""/71, 0x47) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000f40)={&(0x7f0000000ec0)={0x54, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x400}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1ff}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x40810}, 0x4000404) 13:19:37 executing program 5: setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e20, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xea8}, {0xa, 0x4e23, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0xf021}, 0x7, [0x5, 0xc8f, 0x2, 0xc86, 0x40, 0x80000000, 0xfffffff8, 0x3]}, 0x5c) r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x1c) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0xff}, {0xa, 0x4e22, 0x4, @empty, 0x2}, 0x0, [0x9, 0x57, 0x4, 0xfffffff9, 0x401, 0x7, 0xc4e9, 0x4]}, 0x5c) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000180)=@fragment={0x8, 0x0, 0x8, 0x1, 0x0, 0x6, 0x64}, 0x8) r1 = socket$inet6(0xa, 0x5, 0xfffffffd) r2 = accept$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000200)=0x1c) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') socket$inet6(0xa, 0xa, 0x1ff) pkey_alloc(0x0, 0x0) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000280)=0x1, 0x4) socket$inet6(0xa, 0x4, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x3, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}, 0x8000) setsockopt$inet6_group_source_req(r2, 0x29, 0x2c, &(0x7f0000000300)={0x6, {{0xa, 0x4e24, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8001}}, {{0xa, 0x4e20, 0x5, @mcast1, 0x4}}}, 0x108) r3 = syz_open_dev$vcsa(&(0x7f0000000440), 0x8, 0xd0000) accept$inet6(r3, &(0x7f0000000480)={0xa, 0x0, 0x0, @remote}, &(0x7f00000004c0)=0x1c) pkey_alloc(0x0, 0x2) r4 = syz_io_uring_complete(0x0) ioctl$BLKFLSBUF(r4, 0x1261, &(0x7f0000000500)=0x3) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs2/custom1\x00', 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000700)={'ip6tnl0\x00', &(0x7f0000000680)={'sit0\x00', 0x0, 0x4, 0x81, 0x80, 0x8, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x80, 0x8, 0x1a45, 0x9}}) 13:19:37 executing program 6: r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000005, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r0, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000000)=@phonet={0x23, 0x81, 0x9, 0x1}, 0x0, 0x0, 0x1}, 0x7a) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8000, &(0x7f00000000c0)=0x9, 0x7f, 0x2) ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, &(0x7f0000000100)={0x18}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000440)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0xb5) r2 = io_uring_setup(0x5934, &(0x7f0000000480)={0x0, 0xb5ef, 0x0, 0x3, 0x2c5}) r3 = syz_io_uring_setup(0x2f29, &(0x7f0000000500)={0x0, 0xa6ea, 0x2, 0x2, 0x22c, 0x0, r2}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000580), &(0x7f00000005c0)) io_uring_setup(0x424, &(0x7f0000000600)={0x0, 0x13bb, 0x0, 0x3, 0xa2, 0x0, r3}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000680)={0x2eb0, 0x53ba, 0x0, 'queue0\x00', 0xfffffff8}) r4 = io_uring_setup(0x7beb, &(0x7f0000000740)={0x0, 0x2eba, 0x8, 0x1, 0x3c9}) syz_io_uring_setup(0x31d4, &(0x7f00000007c0)={0x0, 0x6994, 0x4, 0x1, 0x21f, 0x0, r4}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000000840), &(0x7f0000000880)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f00000008c0)={0x0, 0x80000000, 0xff, {0x4e3, 0xb6e}, 0x200, 0x7f}) ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, &(0x7f0000000940)={0x10}) syz_io_uring_setup(0x6150, &(0x7f0000000c80)={0x0, 0xf5d8, 0x10, 0x0, 0x351, 0x0, r2}, &(0x7f0000ff4000/0x1000)=nil, &(0x7f0000ff4000/0x2000)=nil, &(0x7f0000000d00)=0x0, &(0x7f0000000d40)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000d80)={0x18dd, 0xffff, 0x1, 'queue1\x00', 0x9}) r6 = syz_io_uring_complete(r5) r7 = accept4$inet6(r6, &(0x7f0000000e40)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000e80)=0x1c, 0x80800) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r7, 0x29, 0x37, &(0x7f0000000ec0)={0x89, 0x3, '\x00', [@enc_lim, @hao={0xc9, 0x10, @rand_addr=' \x01\x00'}, @ra={0x5, 0x2, 0x20}]}, 0x28) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, &(0x7f0000000f40)) 13:19:37 executing program 7: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000000)={{{@in=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}}}, &(0x7f0000000100)=0xe8) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000140)={0x11, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0x5}, @pad1, @enc_lim={0x4, 0x1, 0x5d}, @jumbo, @jumbo={0xc2, 0x4, 0xc49}]}, 0x20) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x4e23, 0x8cb3, @remote, 0x57}, {0xa, 0x4e24, 0x19c, @ipv4={'\x00', '\xff\xff', @loopback}, 0xffff}, 0x9, [0x1ff, 0x7, 0x2, 0x6, 0x3ff, 0x10001, 0x7f, 0x1ff]}, 0x5c) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000200), &(0x7f0000000240)=0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000280)={0xff, {{0xa, 0x4e20, 0x40, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8000}}, {{0xa, 0x4e22, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x6}}}, 0x108) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, 0x0, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x1e}}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8044000) socketpair(0x25, 0xa, 0xbeb, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000540)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000004c0)="9ad9bbc0a641ca92cdb7e63a363442f585852b2028680300d9a35a8b3dea7a9d6897f66df61e0139312c9d9dddc3e416c69cb6ec1c1980", 0x37, r3}, 0x68) accept4$inet6(r1, 0x0, &(0x7f00000005c0), 0x80800) r4 = socket$inet6(0xa, 0x3, 0x80000001) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000000680)={'ip6_vti0\x00', &(0x7f0000000600)={'ip6_vti0\x00', r0, 0x2f, 0x28, 0x2, 0x468, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast1, 0x10, 0x7800, 0x0, 0xfffffff9}}) socketpair(0x6, 0x80000, 0x400, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_MCAST_LEAVE_GROUP(r5, 0x29, 0x2d, &(0x7f0000000700)={0xff, {{0xa, 0x4e21, 0x4, @loopback, 0x9}}}, 0x88) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f00000007c0)=0x9, 0x4) r6 = syz_io_uring_complete(0x0) epoll_ctl$EPOLL_CTL_DEL(r6, 0x2, r4) getsockopt$IP6T_SO_GET_INFO(r4, 0x29, 0x40, &(0x7f0000000800)={'mangle\x00', 0x0, [0x7fffffff, 0x7, 0xfffffe6e, 0xfffffffd, 0x8080]}, &(0x7f0000000880)=0x54) accept4$inet6(r2, &(0x7f00000008c0)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000900)=0x1c, 0x80000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000009c0)={'syztnl1\x00', &(0x7f0000000940)={'ip6_vti0\x00', r0, 0x4, 0xff, 0x2, 0x5, 0x18, @private0, @mcast2, 0x7, 0x17, 0x0, 0x4}}) [ 55.788987] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 55.792602] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 55.794474] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 55.800930] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 55.804825] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 55.852094] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 55.860392] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 55.861615] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 55.863741] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 55.864802] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 55.866955] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 55.871397] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 55.873173] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 55.879846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 55.882357] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 56.058626] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 56.059063] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 56.060701] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 56.061361] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 56.072596] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 56.084434] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 56.088359] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 56.095573] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 56.097261] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 56.099066] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 56.102630] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 56.112230] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 56.115403] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 56.116448] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 56.122163] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 56.124654] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 56.126401] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 56.134960] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 56.145323] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 56.148359] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 56.151350] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 56.159511] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 56.207847] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 56.228305] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 56.240079] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 57.882621] Bluetooth: hci0: command tx timeout [ 57.945857] Bluetooth: hci2: command tx timeout [ 57.946369] Bluetooth: hci1: command tx timeout [ 58.201238] Bluetooth: hci3: command tx timeout [ 58.201925] Bluetooth: hci4: command tx timeout [ 58.267174] Bluetooth: hci6: command tx timeout [ 58.268289] Bluetooth: hci5: command tx timeout [ 58.329574] Bluetooth: hci7: command tx timeout [ 59.929246] Bluetooth: hci0: command tx timeout [ 59.994149] Bluetooth: hci2: command tx timeout [ 59.994739] Bluetooth: hci1: command tx timeout [ 60.250140] Bluetooth: hci4: command tx timeout [ 60.250674] Bluetooth: hci3: command tx timeout [ 60.313227] Bluetooth: hci6: command tx timeout [ 60.313715] Bluetooth: hci5: command tx timeout [ 60.378399] Bluetooth: hci7: command tx timeout [ 61.977266] Bluetooth: hci0: command tx timeout [ 62.041876] Bluetooth: hci1: command tx timeout [ 62.042308] Bluetooth: hci2: command tx timeout [ 62.297950] Bluetooth: hci3: command tx timeout [ 62.298449] Bluetooth: hci4: command tx timeout [ 62.363353] Bluetooth: hci5: command tx timeout [ 62.363782] Bluetooth: hci6: command tx timeout [ 62.426690] Bluetooth: hci7: command tx timeout [ 64.025671] Bluetooth: hci0: command tx timeout [ 64.090283] Bluetooth: hci1: command tx timeout [ 64.090717] Bluetooth: hci2: command tx timeout [ 64.345252] Bluetooth: hci3: command tx timeout [ 64.345712] Bluetooth: hci4: command tx timeout [ 64.409621] Bluetooth: hci6: command tx timeout [ 64.410076] Bluetooth: hci5: command tx timeout [ 64.474177] Bluetooth: hci7: command tx timeout [ 91.473918] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.490426] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.643091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.643479] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.644621] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.654134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.883356] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.883947] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.979589] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.980573] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.069469] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.070069] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.198477] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.199076] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.349474] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.350025] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.381064] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.381663] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 13:20:15 executing program 5: setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e20, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xea8}, {0xa, 0x4e23, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0xf021}, 0x7, [0x5, 0xc8f, 0x2, 0xc86, 0x40, 0x80000000, 0xfffffff8, 0x3]}, 0x5c) r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x1c) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0xff}, {0xa, 0x4e22, 0x4, @empty, 0x2}, 0x0, [0x9, 0x57, 0x4, 0xfffffff9, 0x401, 0x7, 0xc4e9, 0x4]}, 0x5c) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000180)=@fragment={0x8, 0x0, 0x8, 0x1, 0x0, 0x6, 0x64}, 0x8) r1 = socket$inet6(0xa, 0x5, 0xfffffffd) r2 = accept$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000200)=0x1c) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') socket$inet6(0xa, 0xa, 0x1ff) pkey_alloc(0x0, 0x0) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000280)=0x1, 0x4) socket$inet6(0xa, 0x4, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x3, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}, 0x8000) setsockopt$inet6_group_source_req(r2, 0x29, 0x2c, &(0x7f0000000300)={0x6, {{0xa, 0x4e24, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8001}}, {{0xa, 0x4e20, 0x5, @mcast1, 0x4}}}, 0x108) r3 = syz_open_dev$vcsa(&(0x7f0000000440), 0x8, 0xd0000) accept$inet6(r3, &(0x7f0000000480)={0xa, 0x0, 0x0, @remote}, &(0x7f00000004c0)=0x1c) pkey_alloc(0x0, 0x2) r4 = syz_io_uring_complete(0x0) ioctl$BLKFLSBUF(r4, 0x1261, &(0x7f0000000500)=0x3) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs2/custom1\x00', 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000700)={'ip6tnl0\x00', &(0x7f0000000680)={'sit0\x00', 0x0, 0x4, 0x81, 0x80, 0x8, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x80, 0x8, 0x1a45, 0x9}}) [ 93.439416] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.440051] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 13:20:15 executing program 6: r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000005, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r0, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000000)=@phonet={0x23, 0x81, 0x9, 0x1}, 0x0, 0x0, 0x1}, 0x7a) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8000, &(0x7f00000000c0)=0x9, 0x7f, 0x2) ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, &(0x7f0000000100)={0x18}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000440)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0xb5) r2 = io_uring_setup(0x5934, &(0x7f0000000480)={0x0, 0xb5ef, 0x0, 0x3, 0x2c5}) r3 = syz_io_uring_setup(0x2f29, &(0x7f0000000500)={0x0, 0xa6ea, 0x2, 0x2, 0x22c, 0x0, r2}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000580), &(0x7f00000005c0)) io_uring_setup(0x424, &(0x7f0000000600)={0x0, 0x13bb, 0x0, 0x3, 0xa2, 0x0, r3}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000680)={0x2eb0, 0x53ba, 0x0, 'queue0\x00', 0xfffffff8}) r4 = io_uring_setup(0x7beb, &(0x7f0000000740)={0x0, 0x2eba, 0x8, 0x1, 0x3c9}) syz_io_uring_setup(0x31d4, &(0x7f00000007c0)={0x0, 0x6994, 0x4, 0x1, 0x21f, 0x0, r4}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000000840), &(0x7f0000000880)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f00000008c0)={0x0, 0x80000000, 0xff, {0x4e3, 0xb6e}, 0x200, 0x7f}) ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, &(0x7f0000000940)={0x10}) syz_io_uring_setup(0x6150, &(0x7f0000000c80)={0x0, 0xf5d8, 0x10, 0x0, 0x351, 0x0, r2}, &(0x7f0000ff4000/0x1000)=nil, &(0x7f0000ff4000/0x2000)=nil, &(0x7f0000000d00)=0x0, &(0x7f0000000d40)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000d80)={0x18dd, 0xffff, 0x1, 'queue1\x00', 0x9}) r6 = syz_io_uring_complete(r5) r7 = accept4$inet6(r6, &(0x7f0000000e40)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000e80)=0x1c, 0x80800) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r7, 0x29, 0x37, &(0x7f0000000ec0)={0x89, 0x3, '\x00', [@enc_lim, @hao={0xc9, 0x10, @rand_addr=' \x01\x00'}, @ra={0x5, 0x2, 0x20}]}, 0x28) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, &(0x7f0000000f40)) [ 93.504905] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.505515] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 13:20:15 executing program 6: r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000005, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r0, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000000)=@phonet={0x23, 0x81, 0x9, 0x1}, 0x0, 0x0, 0x1}, 0x7a) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8000, &(0x7f00000000c0)=0x9, 0x7f, 0x2) ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, &(0x7f0000000100)={0x18}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000440)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0xb5) r2 = io_uring_setup(0x5934, &(0x7f0000000480)={0x0, 0xb5ef, 0x0, 0x3, 0x2c5}) r3 = syz_io_uring_setup(0x2f29, &(0x7f0000000500)={0x0, 0xa6ea, 0x2, 0x2, 0x22c, 0x0, r2}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000580), &(0x7f00000005c0)) io_uring_setup(0x424, &(0x7f0000000600)={0x0, 0x13bb, 0x0, 0x3, 0xa2, 0x0, r3}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000680)={0x2eb0, 0x53ba, 0x0, 'queue0\x00', 0xfffffff8}) r4 = io_uring_setup(0x7beb, &(0x7f0000000740)={0x0, 0x2eba, 0x8, 0x1, 0x3c9}) syz_io_uring_setup(0x31d4, &(0x7f00000007c0)={0x0, 0x6994, 0x4, 0x1, 0x21f, 0x0, r4}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000000840), &(0x7f0000000880)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f00000008c0)={0x0, 0x80000000, 0xff, {0x4e3, 0xb6e}, 0x200, 0x7f}) ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, &(0x7f0000000940)={0x10}) syz_io_uring_setup(0x6150, &(0x7f0000000c80)={0x0, 0xf5d8, 0x10, 0x0, 0x351, 0x0, r2}, &(0x7f0000ff4000/0x1000)=nil, &(0x7f0000ff4000/0x2000)=nil, &(0x7f0000000d00)=0x0, &(0x7f0000000d40)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000d80)={0x18dd, 0xffff, 0x1, 'queue1\x00', 0x9}) r6 = syz_io_uring_complete(r5) r7 = accept4$inet6(r6, &(0x7f0000000e40)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000e80)=0x1c, 0x80800) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r7, 0x29, 0x37, &(0x7f0000000ec0)={0x89, 0x3, '\x00', [@enc_lim, @hao={0xc9, 0x10, @rand_addr=' \x01\x00'}, @ra={0x5, 0x2, 0x20}]}, 0x28) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, &(0x7f0000000f40)) 13:20:15 executing program 5: setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e20, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xea8}, {0xa, 0x4e23, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0xf021}, 0x7, [0x5, 0xc8f, 0x2, 0xc86, 0x40, 0x80000000, 0xfffffff8, 0x3]}, 0x5c) r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x1c) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0xff}, {0xa, 0x4e22, 0x4, @empty, 0x2}, 0x0, [0x9, 0x57, 0x4, 0xfffffff9, 0x401, 0x7, 0xc4e9, 0x4]}, 0x5c) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000180)=@fragment={0x8, 0x0, 0x8, 0x1, 0x0, 0x6, 0x64}, 0x8) r1 = socket$inet6(0xa, 0x5, 0xfffffffd) r2 = accept$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000200)=0x1c) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') socket$inet6(0xa, 0xa, 0x1ff) pkey_alloc(0x0, 0x0) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000280)=0x1, 0x4) socket$inet6(0xa, 0x4, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x3, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}, 0x8000) setsockopt$inet6_group_source_req(r2, 0x29, 0x2c, &(0x7f0000000300)={0x6, {{0xa, 0x4e24, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8001}}, {{0xa, 0x4e20, 0x5, @mcast1, 0x4}}}, 0x108) r3 = syz_open_dev$vcsa(&(0x7f0000000440), 0x8, 0xd0000) accept$inet6(r3, &(0x7f0000000480)={0xa, 0x0, 0x0, @remote}, &(0x7f00000004c0)=0x1c) pkey_alloc(0x0, 0x2) r4 = syz_io_uring_complete(0x0) ioctl$BLKFLSBUF(r4, 0x1261, &(0x7f0000000500)=0x3) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs2/custom1\x00', 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000700)={'ip6tnl0\x00', &(0x7f0000000680)={'sit0\x00', 0x0, 0x4, 0x81, 0x80, 0x8, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x80, 0x8, 0x1a45, 0x9}}) 13:20:15 executing program 6: r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000005, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r0, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000000)=@phonet={0x23, 0x81, 0x9, 0x1}, 0x0, 0x0, 0x1}, 0x7a) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8000, &(0x7f00000000c0)=0x9, 0x7f, 0x2) ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, &(0x7f0000000100)={0x18}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000440)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0xb5) r2 = io_uring_setup(0x5934, &(0x7f0000000480)={0x0, 0xb5ef, 0x0, 0x3, 0x2c5}) r3 = syz_io_uring_setup(0x2f29, &(0x7f0000000500)={0x0, 0xa6ea, 0x2, 0x2, 0x22c, 0x0, r2}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000580), &(0x7f00000005c0)) io_uring_setup(0x424, &(0x7f0000000600)={0x0, 0x13bb, 0x0, 0x3, 0xa2, 0x0, r3}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000680)={0x2eb0, 0x53ba, 0x0, 'queue0\x00', 0xfffffff8}) r4 = io_uring_setup(0x7beb, &(0x7f0000000740)={0x0, 0x2eba, 0x8, 0x1, 0x3c9}) syz_io_uring_setup(0x31d4, &(0x7f00000007c0)={0x0, 0x6994, 0x4, 0x1, 0x21f, 0x0, r4}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000000840), &(0x7f0000000880)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f00000008c0)={0x0, 0x80000000, 0xff, {0x4e3, 0xb6e}, 0x200, 0x7f}) ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, &(0x7f0000000940)={0x10}) syz_io_uring_setup(0x6150, &(0x7f0000000c80)={0x0, 0xf5d8, 0x10, 0x0, 0x351, 0x0, r2}, &(0x7f0000ff4000/0x1000)=nil, &(0x7f0000ff4000/0x2000)=nil, &(0x7f0000000d00)=0x0, &(0x7f0000000d40)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000d80)={0x18dd, 0xffff, 0x1, 'queue1\x00', 0x9}) r6 = syz_io_uring_complete(r5) r7 = accept4$inet6(r6, &(0x7f0000000e40)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000e80)=0x1c, 0x80800) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r7, 0x29, 0x37, &(0x7f0000000ec0)={0x89, 0x3, '\x00', [@enc_lim, @hao={0xc9, 0x10, @rand_addr=' \x01\x00'}, @ra={0x5, 0x2, 0x20}]}, 0x28) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, &(0x7f0000000f40)) 13:20:16 executing program 5: setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e20, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xea8}, {0xa, 0x4e23, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0xf021}, 0x7, [0x5, 0xc8f, 0x2, 0xc86, 0x40, 0x80000000, 0xfffffff8, 0x3]}, 0x5c) r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x1c) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0xff}, {0xa, 0x4e22, 0x4, @empty, 0x2}, 0x0, [0x9, 0x57, 0x4, 0xfffffff9, 0x401, 0x7, 0xc4e9, 0x4]}, 0x5c) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000180)=@fragment={0x8, 0x0, 0x8, 0x1, 0x0, 0x6, 0x64}, 0x8) r1 = socket$inet6(0xa, 0x5, 0xfffffffd) r2 = accept$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000200)=0x1c) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') socket$inet6(0xa, 0xa, 0x1ff) pkey_alloc(0x0, 0x0) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000280)=0x1, 0x4) socket$inet6(0xa, 0x4, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x3, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}, 0x8000) setsockopt$inet6_group_source_req(r2, 0x29, 0x2c, &(0x7f0000000300)={0x6, {{0xa, 0x4e24, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8001}}, {{0xa, 0x4e20, 0x5, @mcast1, 0x4}}}, 0x108) r3 = syz_open_dev$vcsa(&(0x7f0000000440), 0x8, 0xd0000) accept$inet6(r3, &(0x7f0000000480)={0xa, 0x0, 0x0, @remote}, &(0x7f00000004c0)=0x1c) pkey_alloc(0x0, 0x2) r4 = syz_io_uring_complete(0x0) ioctl$BLKFLSBUF(r4, 0x1261, &(0x7f0000000500)=0x3) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs2/custom1\x00', 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000700)={'ip6tnl0\x00', &(0x7f0000000680)={'sit0\x00', 0x0, 0x4, 0x81, 0x80, 0x8, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x80, 0x8, 0x1a45, 0x9}}) 13:20:16 executing program 6: r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000005, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r0, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000000)=@phonet={0x23, 0x81, 0x9, 0x1}, 0x0, 0x0, 0x1}, 0x7a) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8000, &(0x7f00000000c0)=0x9, 0x7f, 0x2) ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, &(0x7f0000000100)={0x18}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000440)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0xb5) r2 = io_uring_setup(0x5934, &(0x7f0000000480)={0x0, 0xb5ef, 0x0, 0x3, 0x2c5}) r3 = syz_io_uring_setup(0x2f29, &(0x7f0000000500)={0x0, 0xa6ea, 0x2, 0x2, 0x22c, 0x0, r2}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000580), &(0x7f00000005c0)) io_uring_setup(0x424, &(0x7f0000000600)={0x0, 0x13bb, 0x0, 0x3, 0xa2, 0x0, r3}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000680)={0x2eb0, 0x53ba, 0x0, 'queue0\x00', 0xfffffff8}) r4 = io_uring_setup(0x7beb, &(0x7f0000000740)={0x0, 0x2eba, 0x8, 0x1, 0x3c9}) syz_io_uring_setup(0x31d4, &(0x7f00000007c0)={0x0, 0x6994, 0x4, 0x1, 0x21f, 0x0, r4}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000000840), &(0x7f0000000880)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f00000008c0)={0x0, 0x80000000, 0xff, {0x4e3, 0xb6e}, 0x200, 0x7f}) ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, &(0x7f0000000940)={0x10}) syz_io_uring_setup(0x6150, &(0x7f0000000c80)={0x0, 0xf5d8, 0x10, 0x0, 0x351, 0x0, r2}, &(0x7f0000ff4000/0x1000)=nil, &(0x7f0000ff4000/0x2000)=nil, &(0x7f0000000d00)=0x0, &(0x7f0000000d40)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000d80)={0x18dd, 0xffff, 0x1, 'queue1\x00', 0x9}) r6 = syz_io_uring_complete(r5) r7 = accept4$inet6(r6, &(0x7f0000000e40)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000e80)=0x1c, 0x80800) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r7, 0x29, 0x37, &(0x7f0000000ec0)={0x89, 0x3, '\x00', [@enc_lim, @hao={0xc9, 0x10, @rand_addr=' \x01\x00'}, @ra={0x5, 0x2, 0x20}]}, 0x28) [ 93.694537] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.695165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 13:20:16 executing program 6: r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000005, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r0, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000000)=@phonet={0x23, 0x81, 0x9, 0x1}, 0x0, 0x0, 0x1}, 0x7a) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8000, &(0x7f00000000c0)=0x9, 0x7f, 0x2) ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, &(0x7f0000000100)={0x18}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000440)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0xb5) r2 = io_uring_setup(0x5934, &(0x7f0000000480)={0x0, 0xb5ef, 0x0, 0x3, 0x2c5}) r3 = syz_io_uring_setup(0x2f29, &(0x7f0000000500)={0x0, 0xa6ea, 0x2, 0x2, 0x22c, 0x0, r2}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000580), &(0x7f00000005c0)) io_uring_setup(0x424, &(0x7f0000000600)={0x0, 0x13bb, 0x0, 0x3, 0xa2, 0x0, r3}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000680)={0x2eb0, 0x53ba, 0x0, 'queue0\x00', 0xfffffff8}) r4 = io_uring_setup(0x7beb, &(0x7f0000000740)={0x0, 0x2eba, 0x8, 0x1, 0x3c9}) syz_io_uring_setup(0x31d4, &(0x7f00000007c0)={0x0, 0x6994, 0x4, 0x1, 0x21f, 0x0, r4}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000000840), &(0x7f0000000880)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f00000008c0)={0x0, 0x80000000, 0xff, {0x4e3, 0xb6e}, 0x200, 0x7f}) ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, &(0x7f0000000940)={0x10}) syz_io_uring_setup(0x6150, &(0x7f0000000c80)={0x0, 0xf5d8, 0x10, 0x0, 0x351, 0x0, r2}, &(0x7f0000ff4000/0x1000)=nil, &(0x7f0000ff4000/0x2000)=nil, &(0x7f0000000d00)=0x0, &(0x7f0000000d40)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000d80)={0x18dd, 0xffff, 0x1, 'queue1\x00', 0x9}) r6 = syz_io_uring_complete(r5) accept4$inet6(r6, &(0x7f0000000e40)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000e80)=0x1c, 0x80800) [ 93.736746] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.742335] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.777898] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.778501] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.809230] audit: type=1400 audit(1768483216.160:8): avc: denied { open } for pid=3931 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 93.871321] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.871922] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.911755] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.912330] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.018638] mmap: syz-executor.0 (3948) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. 13:20:26 executing program 6: r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000005, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r0, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000000)=@phonet={0x23, 0x81, 0x9, 0x1}, 0x0, 0x0, 0x1}, 0x7a) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8000, &(0x7f00000000c0)=0x9, 0x7f, 0x2) ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, &(0x7f0000000100)={0x18}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000440)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0xb5) r2 = io_uring_setup(0x5934, &(0x7f0000000480)={0x0, 0xb5ef, 0x0, 0x3, 0x2c5}) r3 = syz_io_uring_setup(0x2f29, &(0x7f0000000500)={0x0, 0xa6ea, 0x2, 0x2, 0x22c, 0x0, r2}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000580), &(0x7f00000005c0)) io_uring_setup(0x424, &(0x7f0000000600)={0x0, 0x13bb, 0x0, 0x3, 0xa2, 0x0, r3}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000680)={0x2eb0, 0x53ba, 0x0, 'queue0\x00', 0xfffffff8}) r4 = io_uring_setup(0x7beb, &(0x7f0000000740)={0x0, 0x2eba, 0x8, 0x1, 0x3c9}) syz_io_uring_setup(0x31d4, &(0x7f00000007c0)={0x0, 0x6994, 0x4, 0x1, 0x21f, 0x0, r4}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000000840), &(0x7f0000000880)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f00000008c0)={0x0, 0x80000000, 0xff, {0x4e3, 0xb6e}, 0x200, 0x7f}) ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, &(0x7f0000000940)={0x10}) syz_io_uring_setup(0x6150, &(0x7f0000000c80)={0x0, 0xf5d8, 0x10, 0x0, 0x351, 0x0, r2}, &(0x7f0000ff4000/0x1000)=nil, &(0x7f0000ff4000/0x2000)=nil, &(0x7f0000000d00), &(0x7f0000000d40)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000d80)={0x18dd, 0xffff, 0x1, 'queue1\x00', 0x9}) accept4$inet6(0xffffffffffffffff, &(0x7f0000000e40)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000e80)=0x1c, 0x80800) 13:20:26 executing program 2: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x40}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0xc0094) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r1, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7ff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7f}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x2000c051) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x4c, r2, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1eedc1aa}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x96b0}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x626}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004801) r3 = syz_open_dev$vcsa(&(0x7f0000000400), 0x800, 0x80080) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x8080) r4 = syz_open_dev$vcsa(&(0x7f0000000540), 0x800, 0x200000) write$cgroup_freezer_state(r4, &(0x7f0000000580)='FREEZING\x00', 0x9) socketpair(0x1, 0x3, 0x4, &(0x7f00000005c0)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000640)={'batadv0\x00', 0x0}) sendmsg$GTP_CMD_GETPDP(r5, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x54, 0x0, 0x401, 0x70bd27, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8, 0x1, r6}, @GTPA_FLOW={0x6}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_TID={0xc, 0x3, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x8000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, &(0x7f0000000780)={0x1000001c}) r7 = syz_open_dev$vcsa(&(0x7f00000007c0), 0x3, 0xb0ed8b12dabfe13b) sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x44, r0, 0x0, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1d}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x8040}, 0x800) r8 = syz_io_uring_complete(0x0) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x24, 0x0, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r8}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x24}, 0x1, 0x0, 0x0, 0x8801}, 0x24000010) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f0000000a40)={0xfffffffa, 0x1f, 0x1, 'queue1\x00', 0x749}) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x58, r0, 0x600, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x40000) 13:20:26 executing program 5: setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e20, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xea8}, {0xa, 0x4e23, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0xf021}, 0x7, [0x5, 0xc8f, 0x2, 0xc86, 0x40, 0x80000000, 0xfffffff8, 0x3]}, 0x5c) r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x1c) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0xff}, {0xa, 0x4e22, 0x4, @empty, 0x2}, 0x0, [0x9, 0x57, 0x4, 0xfffffff9, 0x401, 0x7, 0xc4e9, 0x4]}, 0x5c) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000180)=@fragment={0x8, 0x0, 0x8, 0x1, 0x0, 0x6, 0x64}, 0x8) r1 = socket$inet6(0xa, 0x5, 0xfffffffd) r2 = accept$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000200)=0x1c) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') socket$inet6(0xa, 0xa, 0x1ff) pkey_alloc(0x0, 0x0) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000280)=0x1, 0x4) socket$inet6(0xa, 0x4, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x3, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}, 0x8000) setsockopt$inet6_group_source_req(r2, 0x29, 0x2c, &(0x7f0000000300)={0x6, {{0xa, 0x4e24, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8001}}, {{0xa, 0x4e20, 0x5, @mcast1, 0x4}}}, 0x108) r3 = syz_open_dev$vcsa(&(0x7f0000000440), 0x8, 0xd0000) accept$inet6(r3, &(0x7f0000000480)={0xa, 0x0, 0x0, @remote}, &(0x7f00000004c0)=0x1c) pkey_alloc(0x0, 0x2) r4 = syz_io_uring_complete(0x0) ioctl$BLKFLSBUF(r4, 0x1261, &(0x7f0000000500)=0x3) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs2/custom1\x00', 0x6, 0x0) 13:20:26 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0xdcc0, 0x50000) ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f0000000040)) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x1, 0x4) r1 = syz_io_uring_complete(0x0) r2 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x8000, 0x2000) read$ptp(r2, &(0x7f0000000100)=""/135, 0x87) ioctl$PTP_SYS_OFFSET_EXTENDED(r0, 0xc4c03d09, &(0x7f00000001c0)={0xc}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x20, 0x0, 0x423, 0x70bd27, 0x3a3ed3f, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa0}]}, 0x20}, 0x1, 0x0, 0x0, 0x2404c051}, 0x4855) epoll_pwait2(r0, &(0x7f0000000780)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, &(0x7f0000000800), &(0x7f0000000840)={[0x20a]}, 0x8) ioctl$PTP_CLOCK_GETCAPS(r1, 0x80503d01, &(0x7f0000000880)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000900)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000940), 0x23bf, 0x111000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000a00)={'ip6_vti0\x00', &(0x7f0000000980)={'syztnl0\x00', 0x0, 0x2f, 0xd, 0x7f, 0xffffffff, 0x2d, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x1, 0x80000000, 0x9}}) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000a40)=0x5, 0x4) recvfrom$packet(r3, &(0x7f0000000a80)=""/7, 0x7, 0x10040, &(0x7f0000000ac0)={0x11, 0xf8, r4, 0x1, 0x20, 0x6, @local}, 0x14) r5 = fsmount(0xffffffffffffffff, 0x0, 0x4) ioctl$PTP_PIN_SETFUNC2(r2, 0x40603d10, &(0x7f0000000b00)={'\x00', 0xfffffff8, 0x3, 0x2b}) getsockname$packet(r5, &(0x7f0000000b80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000bc0)=0x14) getsockname$packet(r2, &(0x7f0000000c00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000c40)=0x14) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000d00)={'syztnl0\x00', &(0x7f0000000c80)={'syztnl0\x00', r6, 0x2f, 0x2, 0x6, 0x0, 0x18, @loopback, @local, 0x8000, 0x7800, 0x0, 0x7d6}}) 13:20:26 executing program 1: ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(0xffffffffffffffff, 0xc0a85322, &(0x7f0000000000)) r0 = syz_open_dev$vcsa(&(0x7f0000000180), 0x1, 0x82) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x98, 0x7, 0x1c, 0x6, 0x0, 0x81, 0x101, 0x4, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x10120, 0x8, 0x1000, 0x2, 0x800, 0x258, 0x9, 0x0, 0xfffffffb, 0x0, 0x3}, 0x0, 0x3, r0, 0x9) syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), 0xffffffffffffffff) r2 = getpid() r3 = fork() openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) wait4(r2, &(0x7f0000000240), 0x80000000, &(0x7f0000000280)) r4 = openat$cgroup_freezer_state(r0, &(0x7f0000000340), 0x2, 0x0) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r4, &(0x7f0000000380)={r0, r1, 0x6}) io_uring_setup(0xca2, &(0x7f00000003c0)={0x0, 0x6132, 0x20, 0x3, 0x289, 0x0, r0}) r5 = accept4$inet6(r0, &(0x7f0000000440)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000480)=0x1c, 0x80800) setsockopt$inet6_group_source_req(r5, 0x29, 0x2b, &(0x7f00000004c0)={0x7f, {{0xa, 0x4e20, 0xfffffff9, @mcast2}}, {{0xa, 0x4e24, 0x111a564c, @local, 0x4}}}, 0x108) r6 = syz_open_dev$vcsa(&(0x7f0000000600), 0x193, 0x80) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000640)={{{@in=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@local}}, &(0x7f0000000740)=0xe8) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000800)={'ip6_vti0\x00', &(0x7f0000000780)={'ip6tnl0\x00', r7, 0x4, 0x5, 0x5, 0x7, 0x20, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8000, 0x40, 0x3ab0, 0xcee0}}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040000}, 0x20000000) r8 = syz_io_uring_complete(0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r8, &(0x7f0000000a40)={&(0x7f0000000940), 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x68, 0x0, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x810}, 0x4044000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001ac0)=@IORING_OP_SEND={0x1a, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000ac0)="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", 0x1000, 0x800, 0x1}, 0x1) 13:20:26 executing program 7: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000000)={{{@in=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}}}, &(0x7f0000000100)=0xe8) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000140)={0x11, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0x5}, @pad1, @enc_lim={0x4, 0x1, 0x5d}, @jumbo, @jumbo={0xc2, 0x4, 0xc49}]}, 0x20) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x4e23, 0x8cb3, @remote, 0x57}, {0xa, 0x4e24, 0x19c, @ipv4={'\x00', '\xff\xff', @loopback}, 0xffff}, 0x9, [0x1ff, 0x7, 0x2, 0x6, 0x3ff, 0x10001, 0x7f, 0x1ff]}, 0x5c) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000200), &(0x7f0000000240)=0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000280)={0xff, {{0xa, 0x4e20, 0x40, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8000}}, {{0xa, 0x4e22, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x6}}}, 0x108) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, 0x0, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x1e}}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8044000) socketpair(0x25, 0xa, 0xbeb, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000540)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000004c0)="9ad9bbc0a641ca92cdb7e63a363442f585852b2028680300d9a35a8b3dea7a9d6897f66df61e0139312c9d9dddc3e416c69cb6ec1c1980", 0x37, r3}, 0x68) accept4$inet6(r1, 0x0, &(0x7f00000005c0), 0x80800) r4 = socket$inet6(0xa, 0x3, 0x80000001) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000000680)={'ip6_vti0\x00', &(0x7f0000000600)={'ip6_vti0\x00', r0, 0x2f, 0x28, 0x2, 0x468, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast1, 0x10, 0x7800, 0x0, 0xfffffff9}}) socketpair(0x6, 0x80000, 0x400, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_MCAST_LEAVE_GROUP(r5, 0x29, 0x2d, &(0x7f0000000700)={0xff, {{0xa, 0x4e21, 0x4, @loopback, 0x9}}}, 0x88) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f00000007c0)=0x9, 0x4) r6 = syz_io_uring_complete(0x0) epoll_ctl$EPOLL_CTL_DEL(r6, 0x2, r4) getsockopt$IP6T_SO_GET_INFO(r4, 0x29, 0x40, &(0x7f0000000800)={'mangle\x00', 0x0, [0x7fffffff, 0x7, 0xfffffe6e, 0xfffffffd, 0x8080]}, &(0x7f0000000880)=0x54) accept4$inet6(r2, &(0x7f00000008c0)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000900)=0x1c, 0x80000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000009c0)={'syztnl1\x00', &(0x7f0000000940)={'ip6_vti0\x00', r0, 0x4, 0xff, 0x2, 0x5, 0x18, @private0, @mcast2, 0x7, 0x17, 0x0, 0x4}}) 13:20:26 executing program 4: ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f0000000000)={'\x00', 0x4d31343c, 0x3, 0x1000000}) r0 = syz_open_dev$vcsu(&(0x7f0000000080), 0xfff, 0x20001) ioctl$PTP_SYS_OFFSET_EXTENDED(r0, 0xc4c03d09, &(0x7f00000000c0)={0x6}) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f0000000580)={0x7, 0x5}) r1 = fsmount(r0, 0x0, 0x70) r2 = accept$inet6(r1, &(0x7f00000005c0)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000600)=0x1c) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000640)={0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r3, &(0x7f0000000680), 0x0, 0x0, 0x80000}, 0x400) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000008c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/231, 0xe7, 0x0, &(0x7f0000000800)=""/133, 0x85}, &(0x7f0000000900)=0x40) r4 = accept4$inet6(r2, &(0x7f0000000940)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000980)=0x1c, 0x800) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f00000009c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x11}}, 0x76}) ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f0000000a00)={0x3, 0x6, 0x1}) sigaltstack(&(0x7f0000fff000/0x1000)=nil, &(0x7f0000000a40)) remap_file_pages(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x2000000, 0xffff, 0x80000) read$ptp(0xffffffffffffffff, &(0x7f0000000a80)=""/254, 0xfe) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000b80)={0xf65e, {{0xa, 0x4e21, 0x6, @remote, 0x80000000}}, 0x0, 0x3, [{{0xa, 0x4e24, 0xff, @remote, 0x7}}, {{0xa, 0x4e21, 0x10001, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x3}}, {{0xa, 0x4e23, 0x981, @dev={0xfe, 0x80, '\x00', 0x40}}}]}, 0x210) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) msync(&(0x7f0000ffb000/0x5000)=nil, 0x5000, 0x4) read$ptp(r0, &(0x7f0000000dc0)=""/71, 0x47) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000f40)={&(0x7f0000000ec0)={0x54, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x400}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1ff}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x40810}, 0x4000404) 13:20:26 executing program 0: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20, 0x7800, 0x99, 0x7fff}}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_TID={0xc}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x4) r3 = accept$packet(r1, 0x0, &(0x7f00000003c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000440)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x7f, r4}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', r2, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) r6 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r6, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) capset(&(0x7f00000005c0), &(0x7f0000000600)={0x53f1, 0x8, 0xc230, 0xfffffeff, 0x9, 0x2}) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000640)) setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000680)={{0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x6}, {0xa, 0x4e20, 0x200, @rand_addr=' \x01\x00'}, 0x9f0, [0x3ff, 0x315a, 0x80000000, 0xffff, 0x3ff, 0x9, 0x6, 0x4]}, 0x5c) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000007c0)={'sit0\x00', &(0x7f0000000740)={'sit0\x00', r5, 0x4, 0xff, 0x1, 0x2, 0x0, @mcast1, @mcast2, 0x8000, 0x8000, 0x1, 0xffff8001}}) remap_file_pages(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x8fe, 0x2000) getsockname$packet(r1, &(0x7f0000000800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000840)=0x14) r7 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r7) 13:20:26 executing program 4: ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f0000000000)={'\x00', 0x4d31343c, 0x3, 0x1000000}) r0 = syz_open_dev$vcsu(&(0x7f0000000080), 0xfff, 0x20001) ioctl$PTP_SYS_OFFSET_EXTENDED(r0, 0xc4c03d09, &(0x7f00000000c0)={0x6}) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f0000000580)={0x7, 0x5}) r1 = fsmount(r0, 0x0, 0x70) r2 = accept$inet6(r1, &(0x7f00000005c0)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000600)=0x1c) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000640)={0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r3, &(0x7f0000000680), 0x0, 0x0, 0x80000}, 0x400) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000008c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/231, 0xe7, 0x0, &(0x7f0000000800)=""/133, 0x85}, &(0x7f0000000900)=0x40) r4 = accept4$inet6(r2, &(0x7f0000000940)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000980)=0x1c, 0x800) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f00000009c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x11}}, 0x76}) ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f0000000a00)={0x3, 0x6, 0x1}) sigaltstack(&(0x7f0000fff000/0x1000)=nil, &(0x7f0000000a40)) remap_file_pages(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x2000000, 0xffff, 0x80000) read$ptp(0xffffffffffffffff, &(0x7f0000000a80)=""/254, 0xfe) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000b80)={0xf65e, {{0xa, 0x4e21, 0x6, @remote, 0x80000000}}, 0x0, 0x3, [{{0xa, 0x4e24, 0xff, @remote, 0x7}}, {{0xa, 0x4e21, 0x10001, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x3}}, {{0xa, 0x4e23, 0x981, @dev={0xfe, 0x80, '\x00', 0x40}}}]}, 0x210) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) msync(&(0x7f0000ffb000/0x5000)=nil, 0x5000, 0x4) read$ptp(r0, &(0x7f0000000dc0)=""/71, 0x47) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000f40)={&(0x7f0000000ec0)={0x54, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x400}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1ff}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x40810}, 0x4000404) 13:20:26 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0xdcc0, 0x50000) ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f0000000040)) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x1, 0x4) r1 = syz_io_uring_complete(0x0) r2 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x8000, 0x2000) read$ptp(r2, &(0x7f0000000100)=""/135, 0x87) ioctl$PTP_SYS_OFFSET_EXTENDED(r0, 0xc4c03d09, &(0x7f00000001c0)={0xc}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x20, 0x0, 0x423, 0x70bd27, 0x3a3ed3f, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa0}]}, 0x20}, 0x1, 0x0, 0x0, 0x2404c051}, 0x4855) epoll_pwait2(r0, &(0x7f0000000780)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, &(0x7f0000000800), &(0x7f0000000840)={[0x20a]}, 0x8) ioctl$PTP_CLOCK_GETCAPS(r1, 0x80503d01, &(0x7f0000000880)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000900)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000940), 0x23bf, 0x111000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000a00)={'ip6_vti0\x00', &(0x7f0000000980)={'syztnl0\x00', 0x0, 0x2f, 0xd, 0x7f, 0xffffffff, 0x2d, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x1, 0x80000000, 0x9}}) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000a40)=0x5, 0x4) recvfrom$packet(r3, &(0x7f0000000a80)=""/7, 0x7, 0x10040, &(0x7f0000000ac0)={0x11, 0xf8, r4, 0x1, 0x20, 0x6, @local}, 0x14) r5 = fsmount(0xffffffffffffffff, 0x0, 0x4) ioctl$PTP_PIN_SETFUNC2(r2, 0x40603d10, &(0x7f0000000b00)={'\x00', 0xfffffff8, 0x3, 0x2b}) getsockname$packet(r5, &(0x7f0000000b80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000bc0)=0x14) getsockname$packet(r2, &(0x7f0000000c00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000c40)=0x14) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000d00)={'syztnl0\x00', &(0x7f0000000c80)={'syztnl0\x00', r6, 0x2f, 0x2, 0x6, 0x0, 0x18, @loopback, @local, 0x8000, 0x7800, 0x0, 0x7d6}}) 13:20:34 executing program 7: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000000)={{{@in=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}}}, &(0x7f0000000100)=0xe8) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000140)={0x11, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0x5}, @pad1, @enc_lim={0x4, 0x1, 0x5d}, @jumbo, @jumbo={0xc2, 0x4, 0xc49}]}, 0x20) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x4e23, 0x8cb3, @remote, 0x57}, {0xa, 0x4e24, 0x19c, @ipv4={'\x00', '\xff\xff', @loopback}, 0xffff}, 0x9, [0x1ff, 0x7, 0x2, 0x6, 0x3ff, 0x10001, 0x7f, 0x1ff]}, 0x5c) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000200), &(0x7f0000000240)=0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000280)={0xff, {{0xa, 0x4e20, 0x40, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8000}}, {{0xa, 0x4e22, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x6}}}, 0x108) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, 0x0, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x1e}}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8044000) socketpair(0x25, 0xa, 0xbeb, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000540)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000004c0)="9ad9bbc0a641ca92cdb7e63a363442f585852b2028680300d9a35a8b3dea7a9d6897f66df61e0139312c9d9dddc3e416c69cb6ec1c1980", 0x37, r3}, 0x68) accept4$inet6(r1, 0x0, &(0x7f00000005c0), 0x80800) r4 = socket$inet6(0xa, 0x3, 0x80000001) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000000680)={'ip6_vti0\x00', &(0x7f0000000600)={'ip6_vti0\x00', r0, 0x2f, 0x28, 0x2, 0x468, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast1, 0x10, 0x7800, 0x0, 0xfffffff9}}) socketpair(0x6, 0x80000, 0x400, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_MCAST_LEAVE_GROUP(r5, 0x29, 0x2d, &(0x7f0000000700)={0xff, {{0xa, 0x4e21, 0x4, @loopback, 0x9}}}, 0x88) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f00000007c0)=0x9, 0x4) r6 = syz_io_uring_complete(0x0) epoll_ctl$EPOLL_CTL_DEL(r6, 0x2, r4) getsockopt$IP6T_SO_GET_INFO(r4, 0x29, 0x40, &(0x7f0000000800)={'mangle\x00', 0x0, [0x7fffffff, 0x7, 0xfffffe6e, 0xfffffffd, 0x8080]}, &(0x7f0000000880)=0x54) accept4$inet6(r2, &(0x7f00000008c0)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000900)=0x1c, 0x80000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000009c0)={'syztnl1\x00', &(0x7f0000000940)={'ip6_vti0\x00', r0, 0x4, 0xff, 0x2, 0x5, 0x18, @private0, @mcast2, 0x7, 0x17, 0x0, 0x4}}) 13:20:34 executing program 2: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x40}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0xc0094) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r1, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7ff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7f}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x2000c051) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x4c, r2, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1eedc1aa}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x96b0}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x626}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004801) r3 = syz_open_dev$vcsa(&(0x7f0000000400), 0x800, 0x80080) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x8080) r4 = syz_open_dev$vcsa(&(0x7f0000000540), 0x800, 0x200000) write$cgroup_freezer_state(r4, &(0x7f0000000580)='FREEZING\x00', 0x9) socketpair(0x1, 0x3, 0x4, &(0x7f00000005c0)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000640)={'batadv0\x00', 0x0}) sendmsg$GTP_CMD_GETPDP(r5, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x54, 0x0, 0x401, 0x70bd27, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8, 0x1, r6}, @GTPA_FLOW={0x6}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_TID={0xc, 0x3, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x8000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, &(0x7f0000000780)={0x1000001c}) r7 = syz_open_dev$vcsa(&(0x7f00000007c0), 0x3, 0xb0ed8b12dabfe13b) sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x44, r0, 0x0, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1d}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x8040}, 0x800) r8 = syz_io_uring_complete(0x0) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x24, 0x0, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r8}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x24}, 0x1, 0x0, 0x0, 0x8801}, 0x24000010) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f0000000a40)={0xfffffffa, 0x1f, 0x1, 'queue1\x00', 0x749}) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x58, r0, 0x600, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x40000) 13:20:34 executing program 5: setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e20, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xea8}, {0xa, 0x4e23, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0xf021}, 0x7, [0x5, 0xc8f, 0x2, 0xc86, 0x40, 0x80000000, 0xfffffff8, 0x3]}, 0x5c) r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x1c) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0xff}, {0xa, 0x4e22, 0x4, @empty, 0x2}, 0x0, [0x9, 0x57, 0x4, 0xfffffff9, 0x401, 0x7, 0xc4e9, 0x4]}, 0x5c) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000180)=@fragment={0x8, 0x0, 0x8, 0x1, 0x0, 0x6, 0x64}, 0x8) r1 = socket$inet6(0xa, 0x5, 0xfffffffd) r2 = accept$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000200)=0x1c) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') socket$inet6(0xa, 0xa, 0x1ff) pkey_alloc(0x0, 0x0) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000280)=0x1, 0x4) socket$inet6(0xa, 0x4, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x3, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}, 0x8000) setsockopt$inet6_group_source_req(r2, 0x29, 0x2c, &(0x7f0000000300)={0x6, {{0xa, 0x4e24, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8001}}, {{0xa, 0x4e20, 0x5, @mcast1, 0x4}}}, 0x108) r3 = syz_open_dev$vcsa(&(0x7f0000000440), 0x8, 0xd0000) accept$inet6(r3, &(0x7f0000000480)={0xa, 0x0, 0x0, @remote}, &(0x7f00000004c0)=0x1c) pkey_alloc(0x0, 0x2) syz_io_uring_complete(0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs2/custom1\x00', 0x6, 0x0) 13:20:34 executing program 6: r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000005, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r0, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000000)=@phonet={0x23, 0x81, 0x9, 0x1}, 0x0, 0x0, 0x1}, 0x7a) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8000, &(0x7f00000000c0)=0x9, 0x7f, 0x2) ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, &(0x7f0000000100)={0x18}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000440)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0xb5) r2 = io_uring_setup(0x5934, &(0x7f0000000480)={0x0, 0xb5ef, 0x0, 0x3, 0x2c5}) r3 = syz_io_uring_setup(0x2f29, &(0x7f0000000500)={0x0, 0xa6ea, 0x2, 0x2, 0x22c, 0x0, r2}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000580), &(0x7f00000005c0)) io_uring_setup(0x424, &(0x7f0000000600)={0x0, 0x13bb, 0x0, 0x3, 0xa2, 0x0, r3}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000680)={0x2eb0, 0x53ba, 0x0, 'queue0\x00', 0xfffffff8}) r4 = io_uring_setup(0x7beb, &(0x7f0000000740)={0x0, 0x2eba, 0x8, 0x1, 0x3c9}) syz_io_uring_setup(0x31d4, &(0x7f00000007c0)={0x0, 0x6994, 0x4, 0x1, 0x21f, 0x0, r4}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000000840), &(0x7f0000000880)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f00000008c0)={0x0, 0x80000000, 0xff, {0x4e3, 0xb6e}, 0x200, 0x7f}) ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, &(0x7f0000000940)={0x10}) syz_io_uring_setup(0x6150, &(0x7f0000000c80)={0x0, 0xf5d8, 0x10, 0x0, 0x351, 0x0, r2}, &(0x7f0000ff4000/0x1000)=nil, &(0x7f0000ff4000/0x2000)=nil, &(0x7f0000000d00), &(0x7f0000000d40)) accept4$inet6(0xffffffffffffffff, &(0x7f0000000e40)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000e80)=0x1c, 0x80800) 13:20:34 executing program 0: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20, 0x7800, 0x99, 0x7fff}}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_TID={0xc}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x4) r3 = accept$packet(r1, 0x0, &(0x7f00000003c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000440)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x7f, r4}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', r2, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) r6 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r6, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) capset(&(0x7f00000005c0), &(0x7f0000000600)={0x53f1, 0x8, 0xc230, 0xfffffeff, 0x9, 0x2}) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000640)) setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000680)={{0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x6}, {0xa, 0x4e20, 0x200, @rand_addr=' \x01\x00'}, 0x9f0, [0x3ff, 0x315a, 0x80000000, 0xffff, 0x3ff, 0x9, 0x6, 0x4]}, 0x5c) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000007c0)={'sit0\x00', &(0x7f0000000740)={'sit0\x00', r5, 0x4, 0xff, 0x1, 0x2, 0x0, @mcast1, @mcast2, 0x8000, 0x8000, 0x1, 0xffff8001}}) remap_file_pages(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x8fe, 0x2000) getsockname$packet(r1, &(0x7f0000000800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000840)=0x14) r7 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r7) 13:20:34 executing program 4: ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f0000000000)={'\x00', 0x4d31343c, 0x3, 0x1000000}) r0 = syz_open_dev$vcsu(&(0x7f0000000080), 0xfff, 0x20001) ioctl$PTP_SYS_OFFSET_EXTENDED(r0, 0xc4c03d09, &(0x7f00000000c0)={0x6}) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f0000000580)={0x7, 0x5}) r1 = fsmount(r0, 0x0, 0x70) r2 = accept$inet6(r1, &(0x7f00000005c0)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000600)=0x1c) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000640)={0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r3, &(0x7f0000000680), 0x0, 0x0, 0x80000}, 0x400) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000008c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/231, 0xe7, 0x0, &(0x7f0000000800)=""/133, 0x85}, &(0x7f0000000900)=0x40) r4 = accept4$inet6(r2, &(0x7f0000000940)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000980)=0x1c, 0x800) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f00000009c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x11}}, 0x76}) ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f0000000a00)={0x3, 0x6, 0x1}) sigaltstack(&(0x7f0000fff000/0x1000)=nil, &(0x7f0000000a40)) remap_file_pages(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x2000000, 0xffff, 0x80000) read$ptp(0xffffffffffffffff, &(0x7f0000000a80)=""/254, 0xfe) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000b80)={0xf65e, {{0xa, 0x4e21, 0x6, @remote, 0x80000000}}, 0x0, 0x3, [{{0xa, 0x4e24, 0xff, @remote, 0x7}}, {{0xa, 0x4e21, 0x10001, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x3}}, {{0xa, 0x4e23, 0x981, @dev={0xfe, 0x80, '\x00', 0x40}}}]}, 0x210) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) msync(&(0x7f0000ffb000/0x5000)=nil, 0x5000, 0x4) read$ptp(r0, &(0x7f0000000dc0)=""/71, 0x47) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000f40)={&(0x7f0000000ec0)={0x54, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x400}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1ff}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x40810}, 0x4000404) 13:20:34 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0xdcc0, 0x50000) ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f0000000040)) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x1, 0x4) r1 = syz_io_uring_complete(0x0) r2 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x8000, 0x2000) read$ptp(r2, &(0x7f0000000100)=""/135, 0x87) ioctl$PTP_SYS_OFFSET_EXTENDED(r0, 0xc4c03d09, &(0x7f00000001c0)={0xc}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x20, 0x0, 0x423, 0x70bd27, 0x3a3ed3f, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa0}]}, 0x20}, 0x1, 0x0, 0x0, 0x2404c051}, 0x4855) epoll_pwait2(r0, &(0x7f0000000780)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, &(0x7f0000000800), &(0x7f0000000840)={[0x20a]}, 0x8) ioctl$PTP_CLOCK_GETCAPS(r1, 0x80503d01, &(0x7f0000000880)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000900)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000940), 0x23bf, 0x111000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000a00)={'ip6_vti0\x00', &(0x7f0000000980)={'syztnl0\x00', 0x0, 0x2f, 0xd, 0x7f, 0xffffffff, 0x2d, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x1, 0x80000000, 0x9}}) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000a40)=0x5, 0x4) recvfrom$packet(r3, &(0x7f0000000a80)=""/7, 0x7, 0x10040, &(0x7f0000000ac0)={0x11, 0xf8, r4, 0x1, 0x20, 0x6, @local}, 0x14) r5 = fsmount(0xffffffffffffffff, 0x0, 0x4) ioctl$PTP_PIN_SETFUNC2(r2, 0x40603d10, &(0x7f0000000b00)={'\x00', 0xfffffff8, 0x3, 0x2b}) getsockname$packet(r5, &(0x7f0000000b80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000bc0)=0x14) getsockname$packet(r2, &(0x7f0000000c00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000c40)=0x14) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000d00)={'syztnl0\x00', &(0x7f0000000c80)={'syztnl0\x00', r6, 0x2f, 0x2, 0x6, 0x0, 0x18, @loopback, @local, 0x8000, 0x7800, 0x0, 0x7d6}}) 13:20:34 executing program 1: ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(0xffffffffffffffff, 0xc0a85322, &(0x7f0000000000)) r0 = syz_open_dev$vcsa(&(0x7f0000000180), 0x1, 0x82) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x98, 0x7, 0x1c, 0x6, 0x0, 0x81, 0x101, 0x4, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x10120, 0x8, 0x1000, 0x2, 0x800, 0x258, 0x9, 0x0, 0xfffffffb, 0x0, 0x3}, 0x0, 0x3, r0, 0x9) syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), 0xffffffffffffffff) r2 = getpid() r3 = fork() openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) wait4(r2, &(0x7f0000000240), 0x80000000, &(0x7f0000000280)) r4 = openat$cgroup_freezer_state(r0, &(0x7f0000000340), 0x2, 0x0) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r4, &(0x7f0000000380)={r0, r1, 0x6}) io_uring_setup(0xca2, &(0x7f00000003c0)={0x0, 0x6132, 0x20, 0x3, 0x289, 0x0, r0}) r5 = accept4$inet6(r0, &(0x7f0000000440)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000480)=0x1c, 0x80800) setsockopt$inet6_group_source_req(r5, 0x29, 0x2b, &(0x7f00000004c0)={0x7f, {{0xa, 0x4e20, 0xfffffff9, @mcast2}}, {{0xa, 0x4e24, 0x111a564c, @local, 0x4}}}, 0x108) r6 = syz_open_dev$vcsa(&(0x7f0000000600), 0x193, 0x80) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000640)={{{@in=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@local}}, &(0x7f0000000740)=0xe8) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000800)={'ip6_vti0\x00', &(0x7f0000000780)={'ip6tnl0\x00', r7, 0x4, 0x5, 0x5, 0x7, 0x20, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8000, 0x40, 0x3ab0, 0xcee0}}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040000}, 0x20000000) r8 = syz_io_uring_complete(0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r8, &(0x7f0000000a40)={&(0x7f0000000940), 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x68, 0x0, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x810}, 0x4044000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001ac0)=@IORING_OP_SEND={0x1a, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000ac0)="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", 0x1000, 0x800, 0x1}, 0x1) 13:20:34 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0xdcc0, 0x50000) ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f0000000040)) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x1, 0x4) r1 = syz_io_uring_complete(0x0) r2 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x8000, 0x2000) read$ptp(r2, &(0x7f0000000100)=""/135, 0x87) ioctl$PTP_SYS_OFFSET_EXTENDED(r0, 0xc4c03d09, &(0x7f00000001c0)={0xc}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x20, 0x0, 0x423, 0x70bd27, 0x3a3ed3f, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa0}]}, 0x20}, 0x1, 0x0, 0x0, 0x2404c051}, 0x4855) epoll_pwait2(r0, &(0x7f0000000780)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, &(0x7f0000000800), &(0x7f0000000840)={[0x20a]}, 0x8) ioctl$PTP_CLOCK_GETCAPS(r1, 0x80503d01, &(0x7f0000000880)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000900)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000940), 0x23bf, 0x111000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000a00)={'ip6_vti0\x00', &(0x7f0000000980)={'syztnl0\x00', 0x0, 0x2f, 0xd, 0x7f, 0xffffffff, 0x2d, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x1, 0x80000000, 0x9}}) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000a40)=0x5, 0x4) recvfrom$packet(r3, &(0x7f0000000a80)=""/7, 0x7, 0x10040, &(0x7f0000000ac0)={0x11, 0xf8, r4, 0x1, 0x20, 0x6, @local}, 0x14) r5 = fsmount(0xffffffffffffffff, 0x0, 0x4) ioctl$PTP_PIN_SETFUNC2(r2, 0x40603d10, &(0x7f0000000b00)={'\x00', 0xfffffff8, 0x3, 0x2b}) getsockname$packet(r5, &(0x7f0000000b80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000bc0)=0x14) getsockname$packet(r2, &(0x7f0000000c00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000c40)=0x14) 13:20:34 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0xdcc0, 0x50000) ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f0000000040)) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x1, 0x4) r1 = syz_io_uring_complete(0x0) r2 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x8000, 0x2000) read$ptp(r2, &(0x7f0000000100)=""/135, 0x87) ioctl$PTP_SYS_OFFSET_EXTENDED(r0, 0xc4c03d09, &(0x7f00000001c0)={0xc}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x20, 0x0, 0x423, 0x70bd27, 0x3a3ed3f, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa0}]}, 0x20}, 0x1, 0x0, 0x0, 0x2404c051}, 0x4855) epoll_pwait2(r0, &(0x7f0000000780)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, &(0x7f0000000800), &(0x7f0000000840)={[0x20a]}, 0x8) ioctl$PTP_CLOCK_GETCAPS(r1, 0x80503d01, &(0x7f0000000880)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000900)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000940), 0x23bf, 0x111000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000a00)={'ip6_vti0\x00', &(0x7f0000000980)={'syztnl0\x00', 0x0, 0x2f, 0xd, 0x7f, 0xffffffff, 0x2d, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x1, 0x80000000, 0x9}}) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000a40)=0x5, 0x4) recvfrom$packet(r3, &(0x7f0000000a80)=""/7, 0x7, 0x10040, &(0x7f0000000ac0)={0x11, 0xf8, r4, 0x1, 0x20, 0x6, @local}, 0x14) r5 = fsmount(0xffffffffffffffff, 0x0, 0x4) ioctl$PTP_PIN_SETFUNC2(r2, 0x40603d10, &(0x7f0000000b00)={'\x00', 0xfffffff8, 0x3, 0x2b}) getsockname$packet(r5, &(0x7f0000000b80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000bc0)=0x14) 13:20:34 executing program 4: ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f0000000000)={'\x00', 0x4d31343c, 0x3, 0x1000000}) r0 = syz_open_dev$vcsu(&(0x7f0000000080), 0xfff, 0x20001) ioctl$PTP_SYS_OFFSET_EXTENDED(r0, 0xc4c03d09, &(0x7f00000000c0)={0x6}) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f0000000580)={0x7, 0x5}) r1 = fsmount(r0, 0x0, 0x70) r2 = accept$inet6(r1, &(0x7f00000005c0)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000600)=0x1c) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000640)={0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r3, &(0x7f0000000680), 0x0, 0x0, 0x80000}, 0x400) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000008c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/231, 0xe7, 0x0, &(0x7f0000000800)=""/133, 0x85}, &(0x7f0000000900)=0x40) r4 = accept4$inet6(r2, &(0x7f0000000940)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000980)=0x1c, 0x800) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f00000009c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x11}}, 0x76}) ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f0000000a00)={0x3, 0x6, 0x1}) sigaltstack(&(0x7f0000fff000/0x1000)=nil, &(0x7f0000000a40)) remap_file_pages(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x2000000, 0xffff, 0x80000) read$ptp(0xffffffffffffffff, &(0x7f0000000a80)=""/254, 0xfe) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000b80)={0xf65e, {{0xa, 0x4e21, 0x6, @remote, 0x80000000}}, 0x0, 0x3, [{{0xa, 0x4e24, 0xff, @remote, 0x7}}, {{0xa, 0x4e21, 0x10001, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x3}}, {{0xa, 0x4e23, 0x981, @dev={0xfe, 0x80, '\x00', 0x40}}}]}, 0x210) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) msync(&(0x7f0000ffb000/0x5000)=nil, 0x5000, 0x4) read$ptp(r0, &(0x7f0000000dc0)=""/71, 0x47) 13:20:34 executing program 6: r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000005, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r0, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000000)=@phonet={0x23, 0x81, 0x9, 0x1}, 0x0, 0x0, 0x1}, 0x7a) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8000, &(0x7f00000000c0)=0x9, 0x7f, 0x2) ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, &(0x7f0000000100)={0x18}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000440)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0xb5) r2 = io_uring_setup(0x5934, &(0x7f0000000480)={0x0, 0xb5ef, 0x0, 0x3, 0x2c5}) r3 = syz_io_uring_setup(0x2f29, &(0x7f0000000500)={0x0, 0xa6ea, 0x2, 0x2, 0x22c, 0x0, r2}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000580), &(0x7f00000005c0)) io_uring_setup(0x424, &(0x7f0000000600)={0x0, 0x13bb, 0x0, 0x3, 0xa2, 0x0, r3}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000680)={0x2eb0, 0x53ba, 0x0, 'queue0\x00', 0xfffffff8}) r4 = io_uring_setup(0x7beb, &(0x7f0000000740)={0x0, 0x2eba, 0x8, 0x1, 0x3c9}) syz_io_uring_setup(0x31d4, &(0x7f00000007c0)={0x0, 0x6994, 0x4, 0x1, 0x21f, 0x0, r4}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000000840), &(0x7f0000000880)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f00000008c0)={0x0, 0x80000000, 0xff, {0x4e3, 0xb6e}, 0x200, 0x7f}) ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, &(0x7f0000000940)={0x10}) accept4$inet6(0xffffffffffffffff, &(0x7f0000000e40)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000e80)=0x1c, 0x80800) 13:20:34 executing program 0: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20, 0x7800, 0x99, 0x7fff}}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_TID={0xc}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x4) r3 = accept$packet(r1, 0x0, &(0x7f00000003c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000440)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x7f, r4}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', r2, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) r6 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r6, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) capset(&(0x7f00000005c0), &(0x7f0000000600)={0x53f1, 0x8, 0xc230, 0xfffffeff, 0x9, 0x2}) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000640)) setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000680)={{0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x6}, {0xa, 0x4e20, 0x200, @rand_addr=' \x01\x00'}, 0x9f0, [0x3ff, 0x315a, 0x80000000, 0xffff, 0x3ff, 0x9, 0x6, 0x4]}, 0x5c) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000007c0)={'sit0\x00', &(0x7f0000000740)={'sit0\x00', r5, 0x4, 0xff, 0x1, 0x2, 0x0, @mcast1, @mcast2, 0x8000, 0x8000, 0x1, 0xffff8001}}) remap_file_pages(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x8fe, 0x2000) getsockname$packet(r1, &(0x7f0000000800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000840)=0x14) r7 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r7) 13:20:34 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0xdcc0, 0x50000) ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f0000000040)) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x1, 0x4) r1 = syz_io_uring_complete(0x0) r2 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x8000, 0x2000) read$ptp(r2, &(0x7f0000000100)=""/135, 0x87) ioctl$PTP_SYS_OFFSET_EXTENDED(r0, 0xc4c03d09, &(0x7f00000001c0)={0xc}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x20, 0x0, 0x423, 0x70bd27, 0x3a3ed3f, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa0}]}, 0x20}, 0x1, 0x0, 0x0, 0x2404c051}, 0x4855) epoll_pwait2(r0, &(0x7f0000000780)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, &(0x7f0000000800), &(0x7f0000000840)={[0x20a]}, 0x8) ioctl$PTP_CLOCK_GETCAPS(r1, 0x80503d01, &(0x7f0000000880)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000900)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000940), 0x23bf, 0x111000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000a00)={'ip6_vti0\x00', &(0x7f0000000980)={'syztnl0\x00', 0x0, 0x2f, 0xd, 0x7f, 0xffffffff, 0x2d, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x1, 0x80000000, 0x9}}) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000a40)=0x5, 0x4) recvfrom$packet(r3, &(0x7f0000000a80)=""/7, 0x7, 0x10040, &(0x7f0000000ac0)={0x11, 0xf8, r4, 0x1, 0x20, 0x6, @local}, 0x14) r5 = fsmount(0xffffffffffffffff, 0x0, 0x4) getsockname$packet(r5, &(0x7f0000000b80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000bc0)=0x14) 13:20:34 executing program 2: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x40}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0xc0094) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r1, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7ff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7f}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x2000c051) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x4c, r2, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1eedc1aa}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x96b0}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x626}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004801) r3 = syz_open_dev$vcsa(&(0x7f0000000400), 0x800, 0x80080) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x8080) r4 = syz_open_dev$vcsa(&(0x7f0000000540), 0x800, 0x200000) write$cgroup_freezer_state(r4, &(0x7f0000000580)='FREEZING\x00', 0x9) socketpair(0x1, 0x3, 0x4, &(0x7f00000005c0)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000640)={'batadv0\x00', 0x0}) sendmsg$GTP_CMD_GETPDP(r5, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x54, 0x0, 0x401, 0x70bd27, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8, 0x1, r6}, @GTPA_FLOW={0x6}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_TID={0xc, 0x3, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x8000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, &(0x7f0000000780)={0x1000001c}) r7 = syz_open_dev$vcsa(&(0x7f00000007c0), 0x3, 0xb0ed8b12dabfe13b) sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x44, r0, 0x0, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1d}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x8040}, 0x800) r8 = syz_io_uring_complete(0x0) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x24, 0x0, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r8}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x24}, 0x1, 0x0, 0x0, 0x8801}, 0x24000010) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f0000000a40)={0xfffffffa, 0x1f, 0x1, 'queue1\x00', 0x749}) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x58, r0, 0x600, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x40000) 13:20:34 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0xdcc0, 0x50000) ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f0000000040)) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x1, 0x4) r1 = syz_io_uring_complete(0x0) r2 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x8000, 0x2000) read$ptp(r2, &(0x7f0000000100)=""/135, 0x87) ioctl$PTP_SYS_OFFSET_EXTENDED(r0, 0xc4c03d09, &(0x7f00000001c0)={0xc}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x20, 0x0, 0x423, 0x70bd27, 0x3a3ed3f, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa0}]}, 0x20}, 0x1, 0x0, 0x0, 0x2404c051}, 0x4855) epoll_pwait2(r0, &(0x7f0000000780)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, &(0x7f0000000800), &(0x7f0000000840)={[0x20a]}, 0x8) ioctl$PTP_CLOCK_GETCAPS(r1, 0x80503d01, &(0x7f0000000880)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000900)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000940), 0x23bf, 0x111000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000a00)={'ip6_vti0\x00', &(0x7f0000000980)={'syztnl0\x00', 0x0, 0x2f, 0xd, 0x7f, 0xffffffff, 0x2d, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x1, 0x80000000, 0x9}}) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000a40)=0x5, 0x4) recvfrom$packet(r3, &(0x7f0000000a80)=""/7, 0x7, 0x10040, &(0x7f0000000ac0)={0x11, 0xf8, r4, 0x1, 0x20, 0x6, @local}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000b80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000bc0)=0x14) 13:20:34 executing program 7: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000000)={{{@in=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}}}, &(0x7f0000000100)=0xe8) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000140)={0x11, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0x5}, @pad1, @enc_lim={0x4, 0x1, 0x5d}, @jumbo, @jumbo={0xc2, 0x4, 0xc49}]}, 0x20) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x4e23, 0x8cb3, @remote, 0x57}, {0xa, 0x4e24, 0x19c, @ipv4={'\x00', '\xff\xff', @loopback}, 0xffff}, 0x9, [0x1ff, 0x7, 0x2, 0x6, 0x3ff, 0x10001, 0x7f, 0x1ff]}, 0x5c) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000200), &(0x7f0000000240)=0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000280)={0xff, {{0xa, 0x4e20, 0x40, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8000}}, {{0xa, 0x4e22, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x6}}}, 0x108) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, 0x0, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x1e}}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8044000) socketpair(0x25, 0xa, 0xbeb, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000540)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000004c0)="9ad9bbc0a641ca92cdb7e63a363442f585852b2028680300d9a35a8b3dea7a9d6897f66df61e0139312c9d9dddc3e416c69cb6ec1c1980", 0x37, r3}, 0x68) accept4$inet6(r1, 0x0, &(0x7f00000005c0), 0x80800) r4 = socket$inet6(0xa, 0x3, 0x80000001) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000000680)={'ip6_vti0\x00', &(0x7f0000000600)={'ip6_vti0\x00', r0, 0x2f, 0x28, 0x2, 0x468, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast1, 0x10, 0x7800, 0x0, 0xfffffff9}}) socketpair(0x6, 0x80000, 0x400, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_MCAST_LEAVE_GROUP(r5, 0x29, 0x2d, &(0x7f0000000700)={0xff, {{0xa, 0x4e21, 0x4, @loopback, 0x9}}}, 0x88) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f00000007c0)=0x9, 0x4) r6 = syz_io_uring_complete(0x0) epoll_ctl$EPOLL_CTL_DEL(r6, 0x2, r4) getsockopt$IP6T_SO_GET_INFO(r4, 0x29, 0x40, &(0x7f0000000800)={'mangle\x00', 0x0, [0x7fffffff, 0x7, 0xfffffe6e, 0xfffffffd, 0x8080]}, &(0x7f0000000880)=0x54) accept4$inet6(r2, &(0x7f00000008c0)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000900)=0x1c, 0x80000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000009c0)={'syztnl1\x00', &(0x7f0000000940)={'ip6_vti0\x00', r0, 0x4, 0xff, 0x2, 0x5, 0x18, @private0, @mcast2, 0x7, 0x17, 0x0, 0x4}}) 13:20:34 executing program 4: ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f0000000000)={'\x00', 0x4d31343c, 0x3, 0x1000000}) r0 = syz_open_dev$vcsu(&(0x7f0000000080), 0xfff, 0x20001) ioctl$PTP_SYS_OFFSET_EXTENDED(r0, 0xc4c03d09, &(0x7f00000000c0)={0x6}) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f0000000580)={0x7, 0x5}) r1 = fsmount(r0, 0x0, 0x70) r2 = accept$inet6(r1, &(0x7f00000005c0)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000600)=0x1c) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000640)={0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r3, &(0x7f0000000680), 0x0, 0x0, 0x80000}, 0x400) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000008c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/231, 0xe7, 0x0, &(0x7f0000000800)=""/133, 0x85}, &(0x7f0000000900)=0x40) r4 = accept4$inet6(r2, &(0x7f0000000940)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000980)=0x1c, 0x800) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f00000009c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x11}}, 0x76}) ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f0000000a00)={0x3, 0x6, 0x1}) sigaltstack(&(0x7f0000fff000/0x1000)=nil, &(0x7f0000000a40)) remap_file_pages(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x2000000, 0xffff, 0x80000) read$ptp(0xffffffffffffffff, &(0x7f0000000a80)=""/254, 0xfe) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000b80)={0xf65e, {{0xa, 0x4e21, 0x6, @remote, 0x80000000}}, 0x0, 0x3, [{{0xa, 0x4e24, 0xff, @remote, 0x7}}, {{0xa, 0x4e21, 0x10001, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x3}}, {{0xa, 0x4e23, 0x981, @dev={0xfe, 0x80, '\x00', 0x40}}}]}, 0x210) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) read$ptp(r0, &(0x7f0000000dc0)=""/71, 0x47) 13:20:34 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0xdcc0, 0x50000) ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f0000000040)) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x1, 0x4) r1 = syz_io_uring_complete(0x0) r2 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x8000, 0x2000) read$ptp(r2, &(0x7f0000000100)=""/135, 0x87) ioctl$PTP_SYS_OFFSET_EXTENDED(r0, 0xc4c03d09, &(0x7f00000001c0)={0xc}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x20, 0x0, 0x423, 0x70bd27, 0x3a3ed3f, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa0}]}, 0x20}, 0x1, 0x0, 0x0, 0x2404c051}, 0x4855) epoll_pwait2(r0, &(0x7f0000000780)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, &(0x7f0000000800), &(0x7f0000000840)={[0x20a]}, 0x8) ioctl$PTP_CLOCK_GETCAPS(r1, 0x80503d01, &(0x7f0000000880)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000900)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000940), 0x23bf, 0x111000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000a00)={'ip6_vti0\x00', &(0x7f0000000980)={'syztnl0\x00', 0x0, 0x2f, 0xd, 0x7f, 0xffffffff, 0x2d, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x1, 0x80000000, 0x9}}) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000a40)=0x5, 0x4) getsockname$packet(0xffffffffffffffff, &(0x7f0000000b80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000bc0)=0x14) 13:20:34 executing program 5: setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e20, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xea8}, {0xa, 0x4e23, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0xf021}, 0x7, [0x5, 0xc8f, 0x2, 0xc86, 0x40, 0x80000000, 0xfffffff8, 0x3]}, 0x5c) r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x1c) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0xff}, {0xa, 0x4e22, 0x4, @empty, 0x2}, 0x0, [0x9, 0x57, 0x4, 0xfffffff9, 0x401, 0x7, 0xc4e9, 0x4]}, 0x5c) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000180)=@fragment={0x8, 0x0, 0x8, 0x1, 0x0, 0x6, 0x64}, 0x8) r1 = socket$inet6(0xa, 0x5, 0xfffffffd) r2 = accept$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000200)=0x1c) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') socket$inet6(0xa, 0xa, 0x1ff) pkey_alloc(0x0, 0x0) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000280)=0x1, 0x4) socket$inet6(0xa, 0x4, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x3, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}, 0x8000) setsockopt$inet6_group_source_req(r2, 0x29, 0x2c, &(0x7f0000000300)={0x6, {{0xa, 0x4e24, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8001}}, {{0xa, 0x4e20, 0x5, @mcast1, 0x4}}}, 0x108) r3 = syz_open_dev$vcsa(&(0x7f0000000440), 0x8, 0xd0000) accept$inet6(r3, &(0x7f0000000480)={0xa, 0x0, 0x0, @remote}, &(0x7f00000004c0)=0x1c) pkey_alloc(0x0, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs2/custom1\x00', 0x6, 0x0) 13:20:34 executing program 6: r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000005, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r0, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000000)=@phonet={0x23, 0x81, 0x9, 0x1}, 0x0, 0x0, 0x1}, 0x7a) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8000, &(0x7f00000000c0)=0x9, 0x7f, 0x2) ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, &(0x7f0000000100)={0x18}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000440)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0xb5) r2 = io_uring_setup(0x5934, &(0x7f0000000480)={0x0, 0xb5ef, 0x0, 0x3, 0x2c5}) r3 = syz_io_uring_setup(0x2f29, &(0x7f0000000500)={0x0, 0xa6ea, 0x2, 0x2, 0x22c, 0x0, r2}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000580), &(0x7f00000005c0)) io_uring_setup(0x424, &(0x7f0000000600)={0x0, 0x13bb, 0x0, 0x3, 0xa2, 0x0, r3}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000680)={0x2eb0, 0x53ba, 0x0, 'queue0\x00', 0xfffffff8}) r4 = io_uring_setup(0x7beb, &(0x7f0000000740)={0x0, 0x2eba, 0x8, 0x1, 0x3c9}) syz_io_uring_setup(0x31d4, &(0x7f00000007c0)={0x0, 0x6994, 0x4, 0x1, 0x21f, 0x0, r4}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000000840), &(0x7f0000000880)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f00000008c0)={0x0, 0x80000000, 0xff, {0x4e3, 0xb6e}, 0x200, 0x7f}) accept4$inet6(0xffffffffffffffff, &(0x7f0000000e40)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000e80)=0x1c, 0x80800) 13:20:42 executing program 7: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000000)={{{@in=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}}}, &(0x7f0000000100)=0xe8) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000140)={0x11, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0x5}, @pad1, @enc_lim={0x4, 0x1, 0x5d}, @jumbo, @jumbo={0xc2, 0x4, 0xc49}]}, 0x20) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x4e23, 0x8cb3, @remote, 0x57}, {0xa, 0x4e24, 0x19c, @ipv4={'\x00', '\xff\xff', @loopback}, 0xffff}, 0x9, [0x1ff, 0x7, 0x2, 0x6, 0x3ff, 0x10001, 0x7f, 0x1ff]}, 0x5c) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000200), &(0x7f0000000240)=0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000280)={0xff, {{0xa, 0x4e20, 0x40, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8000}}, {{0xa, 0x4e22, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x6}}}, 0x108) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, 0x0, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x1e}}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8044000) socketpair(0x25, 0xa, 0xbeb, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000540)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000004c0)="9ad9bbc0a641ca92cdb7e63a363442f585852b2028680300d9a35a8b3dea7a9d6897f66df61e0139312c9d9dddc3e416c69cb6ec1c1980", 0x37, r3}, 0x68) accept4$inet6(r1, 0x0, &(0x7f00000005c0), 0x80800) r4 = socket$inet6(0xa, 0x3, 0x80000001) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000000680)={'ip6_vti0\x00', &(0x7f0000000600)={'ip6_vti0\x00', r0, 0x2f, 0x28, 0x2, 0x468, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast1, 0x10, 0x7800, 0x0, 0xfffffff9}}) socketpair(0x6, 0x80000, 0x400, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_MCAST_LEAVE_GROUP(r5, 0x29, 0x2d, &(0x7f0000000700)={0xff, {{0xa, 0x4e21, 0x4, @loopback, 0x9}}}, 0x88) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f00000007c0)=0x9, 0x4) r6 = syz_io_uring_complete(0x0) epoll_ctl$EPOLL_CTL_DEL(r6, 0x2, r4) getsockopt$IP6T_SO_GET_INFO(r4, 0x29, 0x40, &(0x7f0000000800)={'mangle\x00', 0x0, [0x7fffffff, 0x7, 0xfffffe6e, 0xfffffffd, 0x8080]}, &(0x7f0000000880)=0x54) accept4$inet6(r2, &(0x7f00000008c0)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000900)=0x1c, 0x80000) 13:20:42 executing program 1: ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(0xffffffffffffffff, 0xc0a85322, &(0x7f0000000000)) r0 = syz_open_dev$vcsa(&(0x7f0000000180), 0x1, 0x82) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x98, 0x7, 0x1c, 0x6, 0x0, 0x81, 0x101, 0x4, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x10120, 0x8, 0x1000, 0x2, 0x800, 0x258, 0x9, 0x0, 0xfffffffb, 0x0, 0x3}, 0x0, 0x3, r0, 0x9) syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), 0xffffffffffffffff) r2 = getpid() r3 = fork() openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) wait4(r2, &(0x7f0000000240), 0x80000000, &(0x7f0000000280)) r4 = openat$cgroup_freezer_state(r0, &(0x7f0000000340), 0x2, 0x0) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r4, &(0x7f0000000380)={r0, r1, 0x6}) io_uring_setup(0xca2, &(0x7f00000003c0)={0x0, 0x6132, 0x20, 0x3, 0x289, 0x0, r0}) r5 = accept4$inet6(r0, &(0x7f0000000440)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000480)=0x1c, 0x80800) setsockopt$inet6_group_source_req(r5, 0x29, 0x2b, &(0x7f00000004c0)={0x7f, {{0xa, 0x4e20, 0xfffffff9, @mcast2}}, {{0xa, 0x4e24, 0x111a564c, @local, 0x4}}}, 0x108) r6 = syz_open_dev$vcsa(&(0x7f0000000600), 0x193, 0x80) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000640)={{{@in=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@local}}, &(0x7f0000000740)=0xe8) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000800)={'ip6_vti0\x00', &(0x7f0000000780)={'ip6tnl0\x00', r7, 0x4, 0x5, 0x5, 0x7, 0x20, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8000, 0x40, 0x3ab0, 0xcee0}}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040000}, 0x20000000) r8 = syz_io_uring_complete(0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r8, &(0x7f0000000a40)={&(0x7f0000000940), 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x68, 0x0, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x810}, 0x4044000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001ac0)=@IORING_OP_SEND={0x1a, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000ac0)="0bf511e4abbb387e8353e648abe98f12f18647cdb1745ab8ca3b80c8c936d32ec45d3caceb8125201c0978f00e96e0ce89dbdaf3e74276774a70a3fc43fca7a6d8aaf0f1e66f224a4f956b716a97f1f719a55e26e874e70126f27c1253c3fd2f5201095732c134fd70d4aa1f50fcc41133f92881237f70d48c0a2caa86cc6916b6e899a48b7b1a79e5c3464b16b63a59b1cc6bd6153a20f7129adab97e8946356fab33375698ea2c38745405cf57332fbcc48a2dbc9ba51c474c658443dad58d0ac2f922fe11e6e9a50bcb9a814e150ed42c680b9b8d1fe8d70ac3ee6504446459029648caced0b59ee1098ed59f2d953539d4260fc3053f2ed03f78ed95499ff3f8c32922d62b9fce1513d2169812834e26422632d3c08122ce185ab213963dce72eb3581f7345a6dddcaff042728b05d49385a559a86f64d493bfe66c649e3d6a491c66d13a6bdfb89891bbe75b37c55d9fb17890b8b37669b482a543d0f682d03d70c6ca5a4cd82b9dcfe1ac008a5dc26e1d657a70a9fa9907c2ab16ea4ff38cdf09d6bbf112e83d9999e8f357dfb6b46c35bd192511fbcdb2435fc904a723bcd7047ef84300f487e44245282f4b7260ac593e9b36550b2dd3dc3e598960e830e76581543d7fd3435fbcfcc339e989236c79314ef56a7dab96e7d1e21a9cd38d3eeb7cc189ca4701054918ef2e08fa2d45ffc3dd1deda86a3765946f33bdf2cc4d0509e73c1c976d15a9f36be1ecada9e01c596e33a4f9bf137e8b9cca3cbf4d20d9f2e9667ed6deeba47c9f059e5cf0218d2a583681b13ac93418ca93f31e7f3fab1a23609cd5f8a12d6b0f8caa4e12a0eef8af73bc9d4f830d9724bfdbf7266bda6d2c18a0e8a4ce3f414e34f00ee75d18880c65e6f090382a535eeefcc0319d3cd577dc726a822818bc1913d2eda12c0d7dfe1375b9e26d6dc9a37db55a55c38a9caf4dda0b5274c8ecded8763179af358bcd7865702c49197e750b247b83061f8551db1d6255dfc8ec0aaaaca07ab9099d88517630761df829c354a54812bdb520f2e683c6b20058433597a5b99a4a903f1ed10af3f4acad21ad428503bd50cb59527fe174edaa945b17a22f8a4b7f18cec438f0916db559d7a0b4b288dd4c1ffd67dcce05b678cb836cedb78f85ddea92d4e7e3ff831dc204b0e55b2e8664ae2a0763907fc1c3a68e1ba3f756abc190a75a875379d9e02ff6bf997be9ca45431c6b5970adee8cb467284ce4ce6b48cef799242acdda2a79607aa211e72daab537fb521cb4dd40287cc5d9f4d153c742867de74146fe420e7510a7513d26cd92eeb859e32e5284194514eb3302fa073c1b5562b433cfd52a0ccdc55b567eea75ffe61a40910dec3ac58eff58f6d9a06b9a05fbc5b67a187aefc64a9e297f848fb58e9b39a3da1006fb71a30b59b4587ace5614e24178f5601147dcbb62809ec988821fc592e836e1d550f8b4f5b0169f568fb78b1f48b9e8ede4888a5061a1007d0c441c43e12ab21d118a4de5f5467d5ee2d25a79ac9e4aadae09c134ce614abc2c9f2ee504cc36a122c9ef887476288b47f50bfaa7276815b1c996b3a3b0cb87e3672ec08f73d39be89c3725d9e6aeb14000533fc15d085131650c31ef354bb86e17fb09a98e97087608ff0208bac50d6e8d03478e0158e300c8f864010ed165e70abd39e82bbd1df1cae573ee15c6326274f722b1502b4e04f0e2597ec4745833f65b59020f266841cdc442a387628265cd1ae0c9284f89a48bcf9a940685e376785657de82c49403a9284f458d027dc904452c1147d9ba69270d611d4ee52a1c302034c631e24ef9ce1e3511c62a8700e78fe1ebf1b566d08564480bdfabe121ad19d0ef11a5f398812905096b3e88ce72749261e9448561b6d250a3aa67703576991c79f4d1704553b35b8f5e90598d27932391a1fde3f3b7dd9ce93fcf8b0b2969e9a53b827fb7e153e232cc7f9fc0e4088c75e95b7440ab251461e9d4168e0e1609a88ce0754ee8e4820fd9c8209042178e277b8357fdc1377576b6d4dc60fefcc51b348f6486f82fa435a1b63bfd4a84971a18227ca77da4bfb92122219bd312d5bf75c7439ae9bf4da24dcc1d7c6eb435837b6fa10a53a4f1ed58bf6dd48281e820f1951563a96d2361e68cf3cab7cf5499ed07e53b54e65f1ce86bcac7bc22a7b03a8cee95ac39f768595a4a8cc063e019e04ea00445248d1f87c600a141889dde16c73466397c3df87769a1dcf75383f96a016c3e36aaa8998920cd1408265ea268d4b6287d1096b91e78cd8527c81201ea16295cf0c643fa58e7127952ca8b5a73775edcb8bd8da378865f328638a2a39e2966f84231c58333397bd3dd27e9a738067d0e9e812a5aef38c6e8e877b297e33a9e7f002da2e34a85e4cfcf371c5a5e2cb621dd59abeb9f321cc16cf9a3fc734a313e2dbbc355012999931c0b140aedb40b18eea37e9667d26231ef02d432b7c6f8a8971bae72fe062a2577686db42a83d5ba0965adaca2662dead7ca0fe979d4a5de5c1d6e32335c740e77e1b77046faf9a020d8c474d32ace3fceeee3f7db7891ef7805b8bbeca19e30e81975ef3058806dd887c814820a2bddbc3241c61d906bc025c410447e5ad02a334f2216cdfe05156685f0259c06f9c1693437967c133ded25de3dd59e3884fda55c9e53e4290ff76b35d81a14dfe80a0944a67d1fea47d430f0b95d5f59a7fc5c6717c44981c1e811574b30b1bc07fe586f99c2fbbd6823d0ef24d4c25f7e4d81f4f1b779637fe2326bbd0173a4131c52e2d8be4832107dff7a32dbbb2a3d462b569eef7ee30222820fee8fd490ea8d9ba8810d6661f4a63df305587a7e607047f8bb61233d15e19d191b784b1ea67c3d059fe9377271a6e18edc54818ec72ce7acd53468ee6b9dfdf0431fe87f49be830efbdf92c3a27754d081f59704b6a152949e59cf1f037b9eb5a80687fa2dfcf51dace15ee162e402da6520d3ffdeae5f9463336b22f4052d5925f6d1721597e987e91f1ea32969fbb592d89156dea5f400e472236ab8ea271d46872fe8c5455185768e92843d551bf8455fd0258139829712bd34544081507ef930c6f136af4fe05071c5b5cff892c9e0d4517ed01014a70202a7b1d5e54477a8334d8fd49615a406ebdda2b070b8865605e8961d65e6de4d4c35a70ec92b8d1dab620a6cc37eddfa3d18e5eb4454579311c95064c7a5855fb903d3608337584df481416748f80a809e9bb1ac260f400c660e3fde65b3595fee05fda45ef09d7a7b96ae4024168b99588eaa1c9959c1554439820255c9a719e983addc811ac376f9c80936a5b436d75620c7b7aa973d38a60cb21fa56552d1c775349b6c49b077178701dab6786f7ddd18010150129b8b694345708d79a0f8201a18535a32c02a76036f969d94d808bfeab54a30efefd92338ce19ad6ed774b6d722f215dce41cd75a0bf33d6bd45d204da014664560b3678ba71b69ee71f71e6fcacb267e82ef7ceb4b4039445c4d8e25e59efbb3724d366bd27d79e2a3f7eb14dd9a1ba680907ae5d09016aa8d5b6d368d8b4fc9e4ea6d051a06b92a969243bedade0c9baf8844ddc14ebd274f584b767c0741725c3d0043ff9ef94de9b209f21ba3ee81bc41800a214c31588c17a820166b93c933692595d3e47b8ab57b183b80ccaea9384129d5240fadfe4aa4804b78440a74202be17838898e9e6f97fa8346b954b3a2b583c4a32e5caaf53c0939f6db7ceb261508965e2ec2535da3e6cb83aeff4065ab63e88d04039c75709af3bc8fa82ac4b5c17aca10f9322331d7cefe20e8f697e6511d56bb0ecb0bc8c3983a06f4e04214f0c738ba52d1cf17b85341b531bf7b6784e9a13f04e1c79105c19934c6ec116b80d3b9f1344a28ce60e8decfc618fa097d2f3117df0f59229a7f4222b613fbe06090670a22bdcd3a9fb1770edbbeb315a16e3bb956998b0857f98ed360c67c83d9c3ade163642941fffd5c515bb91a9f7a902885a49d44d58fbcb28c5c64e7c23a162797331fa5d84d4f3eef8710e6eedb3002a7535974e283fe16d520f63c5a1a8a49ebb5335e03a863bc0b8b62c214ad32df7171892f0e23bc3f6cb894b018c3b39318e1a60ad341f6de45dc0a5591aba6e682355dfca62290d82cf8b0a5a9d4f5eae2cdaab65ef438c03daa7b91be8ddab16fc5200989529f8698b8263f3de3033d0c10619cc33df823a650a567599bf2a1ef22b25fac3fc95491d7cd4ae4bada5a3eb8a5e9f7ab1e14e3679716877ef07a57861c42e8b916331fafa5e22d323b38de86a6841009bd61580faa20d34a6c939475f70afd884fc5ed544c622a915879a597d880997822c4a551f3b5f96f2513e725cfa1a767d59c5804cdf6510b4d0da27858953fea6d46ce32ecf552a80ab64e31b07b030edaca7ea96bfb53e3e536bbd1e9ebb8a15ecc1370d07e8137dbc90702f49b998a146afd8dd79fd258acc1d8cf6b4b29003f501dee74d63022f50fd4716dcda3035852720f0f738b378f8b620cfac914e1b35d76d63101cf8f090598e1184f36aa7c8ccab1ca978336b6543ffe34b8040c9948db5c6aebb302963189a705ada60d24d3a09176ba6fffea11744280663667b36853e23d68becd47ee5dcb2e1674eb67adcd1e3c5cd80239016389b94e2ab7b7471c06378c333a98e647a9926f47a843b4664841bf11aa7326f666450ec340da0507acdfa3f70432978e876f69965b11578b81636f36dd291648215e8e0290469562610ed773703c64dca1d17b2faf2c900ce22edd65f30f14d8fc0efb0ab475d9a62d5c71acb22fae8d555cf243b220222ce9ed545844d5cd3c6b3c469b96d675b6b6a8771a62813276761430dad5b2cbbc82d64700564a8c32e417460af23237e992f5ee5ebb3a26debb71dd4d0308988e6d028b1c49c8e4badc3f1bf79a5688083d73df44c61637c5c91d32ebb04c0601701c83af66a5af133fa1e8ffaceb6aafbaf7186606e66c56c24f3698d74fd0511487e74da4b82aac08717d1aadab954838bffadaa2b398d6839332a0ca4e400f3235757f467794f6b94665ad4fdbea150bafab4b145c6249b8b5f13e8ca57bdcd4e7c45ed15e614024715714b47004cf2297fade375770ac6474473728c3564508433c19aeb91aeb8325e184dd10849fa7130217d296a38ac006fc835a8a633de29f7712f53bc54655e5f67a7676c584209fe6b37d58cce2fc1ce3be61232e8a84acf982577023aacf0b441b382c80fe997828ef1b0c88cdf35f2a44e5ccb0e1458e49d243f1f5f8c8a73a8e9bcf2c095eeb83c2f812dff7bf67c8961bf55405efdd4637e197ef07210446332b0059f486465ca6a4667a1080fd54ec480f6d79bf3e724fe5925879418b54184c24b6a68216576646aa510bb457a827973a765702d043219106f3870b4ba74f4a1329ac7a1de8880577f14c0c66ec62c2237c8b8bc61fab3525c0b4da1efc58f1f4f95e1a3d969196bfbc3c6e4af6327c524d230b7f700d0738bb0a55a29efeee7fdf6c8c948676a29500b48df27d89c89176dce16634ac9af98d19cfdeca4d5d5f82000d96867b558cba5ca5cf7c418bde0256f78fc6c3dc83a0ee417a2f73f506859f896c2079becc5cd58c4a3af347c839632d66ee2bee2fd574ccee69eecabf62de3dc73afbf1e27f4b45cafaecaecdfc05f6a333d8a8b55f4b23f5f36f7c81bc0aae56e7b8b9240e651b61ef2bf5e6cceccacd56b2e120a96e37c708472e8fe8f06f9d8d3d8a1c6103eb2ec85720e4b323b91d32a", 0x1000, 0x800, 0x1}, 0x1) 13:20:42 executing program 5: setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e20, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xea8}, {0xa, 0x4e23, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0xf021}, 0x7, [0x5, 0xc8f, 0x2, 0xc86, 0x40, 0x80000000, 0xfffffff8, 0x3]}, 0x5c) r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x1c) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0xff}, {0xa, 0x4e22, 0x4, @empty, 0x2}, 0x0, [0x9, 0x57, 0x4, 0xfffffff9, 0x401, 0x7, 0xc4e9, 0x4]}, 0x5c) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000180)=@fragment={0x8, 0x0, 0x8, 0x1, 0x0, 0x6, 0x64}, 0x8) r1 = socket$inet6(0xa, 0x5, 0xfffffffd) r2 = accept$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000200)=0x1c) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') socket$inet6(0xa, 0xa, 0x1ff) pkey_alloc(0x0, 0x0) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000280)=0x1, 0x4) socket$inet6(0xa, 0x4, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x3, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}, 0x8000) setsockopt$inet6_group_source_req(r2, 0x29, 0x2c, &(0x7f0000000300)={0x6, {{0xa, 0x4e24, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8001}}, {{0xa, 0x4e20, 0x5, @mcast1, 0x4}}}, 0x108) r3 = syz_open_dev$vcsa(&(0x7f0000000440), 0x8, 0xd0000) accept$inet6(r3, &(0x7f0000000480)={0xa, 0x0, 0x0, @remote}, &(0x7f00000004c0)=0x1c) pkey_alloc(0x0, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs2/custom1\x00', 0x6, 0x0) 13:20:42 executing program 6: r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000005, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r0, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000000)=@phonet={0x23, 0x81, 0x9, 0x1}, 0x0, 0x0, 0x1}, 0x7a) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8000, &(0x7f00000000c0)=0x9, 0x7f, 0x2) ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, &(0x7f0000000100)={0x18}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000440)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0xb5) r2 = io_uring_setup(0x5934, &(0x7f0000000480)={0x0, 0xb5ef, 0x0, 0x3, 0x2c5}) r3 = syz_io_uring_setup(0x2f29, &(0x7f0000000500)={0x0, 0xa6ea, 0x2, 0x2, 0x22c, 0x0, r2}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000580), &(0x7f00000005c0)) io_uring_setup(0x424, &(0x7f0000000600)={0x0, 0x13bb, 0x0, 0x3, 0xa2, 0x0, r3}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000680)={0x2eb0, 0x53ba, 0x0, 'queue0\x00', 0xfffffff8}) r4 = io_uring_setup(0x7beb, &(0x7f0000000740)={0x0, 0x2eba, 0x8, 0x1, 0x3c9}) syz_io_uring_setup(0x31d4, &(0x7f00000007c0)={0x0, 0x6994, 0x4, 0x1, 0x21f, 0x0, r4}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000000840), &(0x7f0000000880)) accept4$inet6(0xffffffffffffffff, &(0x7f0000000e40)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000e80)=0x1c, 0x80800) 13:20:42 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0xdcc0, 0x50000) ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f0000000040)) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x1, 0x4) r1 = syz_io_uring_complete(0x0) r2 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x8000, 0x2000) read$ptp(r2, &(0x7f0000000100)=""/135, 0x87) ioctl$PTP_SYS_OFFSET_EXTENDED(r0, 0xc4c03d09, &(0x7f00000001c0)={0xc}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x20, 0x0, 0x423, 0x70bd27, 0x3a3ed3f, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa0}]}, 0x20}, 0x1, 0x0, 0x0, 0x2404c051}, 0x4855) epoll_pwait2(r0, &(0x7f0000000780)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, &(0x7f0000000800), &(0x7f0000000840)={[0x20a]}, 0x8) ioctl$PTP_CLOCK_GETCAPS(r1, 0x80503d01, &(0x7f0000000880)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000900)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000940), 0x23bf, 0x111000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000a00)={'ip6_vti0\x00', &(0x7f0000000980)={'syztnl0\x00', 0x0, 0x2f, 0xd, 0x7f, 0xffffffff, 0x2d, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x1, 0x80000000, 0x9}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000b80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000bc0)=0x14) 13:20:42 executing program 0: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20, 0x7800, 0x99, 0x7fff}}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_TID={0xc}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x4) r3 = accept$packet(r1, 0x0, &(0x7f00000003c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000440)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x7f, r4}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', r2, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) r6 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r6, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) capset(&(0x7f00000005c0), &(0x7f0000000600)={0x53f1, 0x8, 0xc230, 0xfffffeff, 0x9, 0x2}) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000640)) setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000680)={{0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x6}, {0xa, 0x4e20, 0x200, @rand_addr=' \x01\x00'}, 0x9f0, [0x3ff, 0x315a, 0x80000000, 0xffff, 0x3ff, 0x9, 0x6, 0x4]}, 0x5c) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000007c0)={'sit0\x00', &(0x7f0000000740)={'sit0\x00', r5, 0x4, 0xff, 0x1, 0x2, 0x0, @mcast1, @mcast2, 0x8000, 0x8000, 0x1, 0xffff8001}}) remap_file_pages(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x8fe, 0x2000) getsockname$packet(r1, &(0x7f0000000800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000840)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), 0xffffffffffffffff) 13:20:42 executing program 2: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x40}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0xc0094) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r1, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7ff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7f}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x2000c051) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x4c, r2, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1eedc1aa}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x96b0}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x626}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004801) r3 = syz_open_dev$vcsa(&(0x7f0000000400), 0x800, 0x80080) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x8080) r4 = syz_open_dev$vcsa(&(0x7f0000000540), 0x800, 0x200000) write$cgroup_freezer_state(r4, &(0x7f0000000580)='FREEZING\x00', 0x9) socketpair(0x1, 0x3, 0x4, &(0x7f00000005c0)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000640)={'batadv0\x00', 0x0}) sendmsg$GTP_CMD_GETPDP(r5, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x54, 0x0, 0x401, 0x70bd27, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8, 0x1, r6}, @GTPA_FLOW={0x6}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_TID={0xc, 0x3, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x8000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, &(0x7f0000000780)={0x1000001c}) r7 = syz_open_dev$vcsa(&(0x7f00000007c0), 0x3, 0xb0ed8b12dabfe13b) sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x44, r0, 0x0, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1d}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x8040}, 0x800) r8 = syz_io_uring_complete(0x0) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x24, 0x0, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r8}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x24}, 0x1, 0x0, 0x0, 0x8801}, 0x24000010) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f0000000a40)={0xfffffffa, 0x1f, 0x1, 'queue1\x00', 0x749}) 13:20:42 executing program 4: ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f0000000000)={'\x00', 0x4d31343c, 0x3, 0x1000000}) r0 = syz_open_dev$vcsu(&(0x7f0000000080), 0xfff, 0x20001) ioctl$PTP_SYS_OFFSET_EXTENDED(r0, 0xc4c03d09, &(0x7f00000000c0)={0x6}) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f0000000580)={0x7, 0x5}) r1 = fsmount(r0, 0x0, 0x70) r2 = accept$inet6(r1, &(0x7f00000005c0)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000600)=0x1c) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000640)={0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r3, &(0x7f0000000680), 0x0, 0x0, 0x80000}, 0x400) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000008c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/231, 0xe7, 0x0, &(0x7f0000000800)=""/133, 0x85}, &(0x7f0000000900)=0x40) r4 = accept4$inet6(r2, &(0x7f0000000940)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000980)=0x1c, 0x800) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f00000009c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x11}}, 0x76}) ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f0000000a00)={0x3, 0x6, 0x1}) sigaltstack(&(0x7f0000fff000/0x1000)=nil, &(0x7f0000000a40)) remap_file_pages(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x2000000, 0xffff, 0x80000) read$ptp(0xffffffffffffffff, &(0x7f0000000a80)=""/254, 0xfe) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000b80)={0xf65e, {{0xa, 0x4e21, 0x6, @remote, 0x80000000}}, 0x0, 0x3, [{{0xa, 0x4e24, 0xff, @remote, 0x7}}, {{0xa, 0x4e21, 0x10001, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x3}}, {{0xa, 0x4e23, 0x981, @dev={0xfe, 0x80, '\x00', 0x40}}}]}, 0x210) read$ptp(r0, &(0x7f0000000dc0)=""/71, 0x47) 13:20:42 executing program 4: ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f0000000000)={'\x00', 0x4d31343c, 0x3, 0x1000000}) r0 = syz_open_dev$vcsu(&(0x7f0000000080), 0xfff, 0x20001) ioctl$PTP_SYS_OFFSET_EXTENDED(r0, 0xc4c03d09, &(0x7f00000000c0)={0x6}) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f0000000580)={0x7, 0x5}) r1 = fsmount(r0, 0x0, 0x70) r2 = accept$inet6(r1, &(0x7f00000005c0)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000600)=0x1c) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000640)={0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r3, &(0x7f0000000680), 0x0, 0x0, 0x80000}, 0x400) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000008c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/231, 0xe7, 0x0, &(0x7f0000000800)=""/133, 0x85}, &(0x7f0000000900)=0x40) r4 = accept4$inet6(r2, &(0x7f0000000940)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000980)=0x1c, 0x800) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f00000009c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x11}}, 0x76}) ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f0000000a00)={0x3, 0x6, 0x1}) sigaltstack(&(0x7f0000fff000/0x1000)=nil, &(0x7f0000000a40)) remap_file_pages(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x2000000, 0xffff, 0x80000) read$ptp(0xffffffffffffffff, &(0x7f0000000a80)=""/254, 0xfe) read$ptp(r0, &(0x7f0000000dc0)=""/71, 0x47) 13:20:42 executing program 6: r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000005, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r0, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000000)=@phonet={0x23, 0x81, 0x9, 0x1}, 0x0, 0x0, 0x1}, 0x7a) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8000, &(0x7f00000000c0)=0x9, 0x7f, 0x2) ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, &(0x7f0000000100)={0x18}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000440)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0xb5) r2 = io_uring_setup(0x5934, &(0x7f0000000480)={0x0, 0xb5ef, 0x0, 0x3, 0x2c5}) r3 = syz_io_uring_setup(0x2f29, &(0x7f0000000500)={0x0, 0xa6ea, 0x2, 0x2, 0x22c, 0x0, r2}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000580), &(0x7f00000005c0)) io_uring_setup(0x424, &(0x7f0000000600)={0x0, 0x13bb, 0x0, 0x3, 0xa2, 0x0, r3}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000680)={0x2eb0, 0x53ba, 0x0, 'queue0\x00', 0xfffffff8}) io_uring_setup(0x7beb, &(0x7f0000000740)={0x0, 0x2eba, 0x8, 0x1, 0x3c9}) accept4$inet6(0xffffffffffffffff, &(0x7f0000000e40)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000e80)=0x1c, 0x80800) 13:20:42 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0xdcc0, 0x50000) ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f0000000040)) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x1, 0x4) r1 = syz_io_uring_complete(0x0) r2 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x8000, 0x2000) read$ptp(r2, &(0x7f0000000100)=""/135, 0x87) ioctl$PTP_SYS_OFFSET_EXTENDED(r0, 0xc4c03d09, &(0x7f00000001c0)={0xc}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x20, 0x0, 0x423, 0x70bd27, 0x3a3ed3f, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa0}]}, 0x20}, 0x1, 0x0, 0x0, 0x2404c051}, 0x4855) epoll_pwait2(r0, &(0x7f0000000780)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, &(0x7f0000000800), &(0x7f0000000840)={[0x20a]}, 0x8) ioctl$PTP_CLOCK_GETCAPS(r1, 0x80503d01, &(0x7f0000000880)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000900)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_open_dev$vcsu(&(0x7f0000000940), 0x23bf, 0x111000) getsockname$packet(0xffffffffffffffff, &(0x7f0000000b80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000bc0)=0x14) 13:20:42 executing program 4: ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f0000000000)={'\x00', 0x4d31343c, 0x3, 0x1000000}) r0 = syz_open_dev$vcsu(&(0x7f0000000080), 0xfff, 0x20001) ioctl$PTP_SYS_OFFSET_EXTENDED(r0, 0xc4c03d09, &(0x7f00000000c0)={0x6}) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f0000000580)={0x7, 0x5}) r1 = fsmount(r0, 0x0, 0x70) r2 = accept$inet6(r1, &(0x7f00000005c0)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000600)=0x1c) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000640)={0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r3, &(0x7f0000000680), 0x0, 0x0, 0x80000}, 0x400) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000008c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/231, 0xe7, 0x0, &(0x7f0000000800)=""/133, 0x85}, &(0x7f0000000900)=0x40) r4 = accept4$inet6(r2, &(0x7f0000000940)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000980)=0x1c, 0x800) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f00000009c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x11}}, 0x76}) ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f0000000a00)={0x3, 0x6, 0x1}) sigaltstack(&(0x7f0000fff000/0x1000)=nil, &(0x7f0000000a40)) remap_file_pages(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x2000000, 0xffff, 0x80000) read$ptp(r0, &(0x7f0000000dc0)=""/71, 0x47) 13:20:42 executing program 6: r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000005, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r0, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000000)=@phonet={0x23, 0x81, 0x9, 0x1}, 0x0, 0x0, 0x1}, 0x7a) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8000, &(0x7f00000000c0)=0x9, 0x7f, 0x2) ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, &(0x7f0000000100)={0x18}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000440)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0xb5) r2 = io_uring_setup(0x5934, &(0x7f0000000480)={0x0, 0xb5ef, 0x0, 0x3, 0x2c5}) r3 = syz_io_uring_setup(0x2f29, &(0x7f0000000500)={0x0, 0xa6ea, 0x2, 0x2, 0x22c, 0x0, r2}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000580), &(0x7f00000005c0)) io_uring_setup(0x424, &(0x7f0000000600)={0x0, 0x13bb, 0x0, 0x3, 0xa2, 0x0, r3}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000680)={0x2eb0, 0x53ba, 0x0, 'queue0\x00', 0xfffffff8}) accept4$inet6(0xffffffffffffffff, &(0x7f0000000e40)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000e80)=0x1c, 0x80800) 13:20:42 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0xdcc0, 0x50000) ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f0000000040)) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x1, 0x4) r1 = syz_io_uring_complete(0x0) r2 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x8000, 0x2000) read$ptp(r2, &(0x7f0000000100)=""/135, 0x87) ioctl$PTP_SYS_OFFSET_EXTENDED(r0, 0xc4c03d09, &(0x7f00000001c0)={0xc}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x20, 0x0, 0x423, 0x70bd27, 0x3a3ed3f, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa0}]}, 0x20}, 0x1, 0x0, 0x0, 0x2404c051}, 0x4855) epoll_pwait2(r0, &(0x7f0000000780)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, &(0x7f0000000800), &(0x7f0000000840)={[0x20a]}, 0x8) ioctl$PTP_CLOCK_GETCAPS(r1, 0x80503d01, &(0x7f0000000880)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000900)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000b80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000bc0)=0x14) 13:20:42 executing program 5: setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e20, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xea8}, {0xa, 0x4e23, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0xf021}, 0x7, [0x5, 0xc8f, 0x2, 0xc86, 0x40, 0x80000000, 0xfffffff8, 0x3]}, 0x5c) r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x1c) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0xff}, {0xa, 0x4e22, 0x4, @empty, 0x2}, 0x0, [0x9, 0x57, 0x4, 0xfffffff9, 0x401, 0x7, 0xc4e9, 0x4]}, 0x5c) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000180)=@fragment={0x8, 0x0, 0x8, 0x1, 0x0, 0x6, 0x64}, 0x8) r1 = socket$inet6(0xa, 0x5, 0xfffffffd) r2 = accept$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000200)=0x1c) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') socket$inet6(0xa, 0xa, 0x1ff) pkey_alloc(0x0, 0x0) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000280)=0x1, 0x4) socket$inet6(0xa, 0x4, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x3, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}, 0x8000) setsockopt$inet6_group_source_req(r2, 0x29, 0x2c, &(0x7f0000000300)={0x6, {{0xa, 0x4e24, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8001}}, {{0xa, 0x4e20, 0x5, @mcast1, 0x4}}}, 0x108) r3 = syz_open_dev$vcsa(&(0x7f0000000440), 0x8, 0xd0000) accept$inet6(r3, &(0x7f0000000480)={0xa, 0x0, 0x0, @remote}, &(0x7f00000004c0)=0x1c) pkey_alloc(0x0, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs2/custom1\x00', 0x6, 0x0) 13:20:42 executing program 6: r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000005, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r0, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000000)=@phonet={0x23, 0x81, 0x9, 0x1}, 0x0, 0x0, 0x1}, 0x7a) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8000, &(0x7f00000000c0)=0x9, 0x7f, 0x2) ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, &(0x7f0000000100)={0x18}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000440)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0xb5) r2 = io_uring_setup(0x5934, &(0x7f0000000480)={0x0, 0xb5ef, 0x0, 0x3, 0x2c5}) r3 = syz_io_uring_setup(0x2f29, &(0x7f0000000500)={0x0, 0xa6ea, 0x2, 0x2, 0x22c, 0x0, r2}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000580), &(0x7f00000005c0)) io_uring_setup(0x424, &(0x7f0000000600)={0x0, 0x13bb, 0x0, 0x3, 0xa2, 0x0, r3}) accept4$inet6(0xffffffffffffffff, &(0x7f0000000e40)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000e80)=0x1c, 0x80800) 13:20:42 executing program 7: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000000)={{{@in=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}}}, &(0x7f0000000100)=0xe8) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000140)={0x11, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0x5}, @pad1, @enc_lim={0x4, 0x1, 0x5d}, @jumbo, @jumbo={0xc2, 0x4, 0xc49}]}, 0x20) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x4e23, 0x8cb3, @remote, 0x57}, {0xa, 0x4e24, 0x19c, @ipv4={'\x00', '\xff\xff', @loopback}, 0xffff}, 0x9, [0x1ff, 0x7, 0x2, 0x6, 0x3ff, 0x10001, 0x7f, 0x1ff]}, 0x5c) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000200), &(0x7f0000000240)=0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000280)={0xff, {{0xa, 0x4e20, 0x40, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8000}}, {{0xa, 0x4e22, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x6}}}, 0x108) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, 0x0, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x1e}}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8044000) socketpair(0x25, 0xa, 0xbeb, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000540)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000004c0)="9ad9bbc0a641ca92cdb7e63a363442f585852b2028680300d9a35a8b3dea7a9d6897f66df61e0139312c9d9dddc3e416c69cb6ec1c1980", 0x37, r2}, 0x68) accept4$inet6(r1, 0x0, &(0x7f00000005c0), 0x80800) r3 = socket$inet6(0xa, 0x3, 0x80000001) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000680)={'ip6_vti0\x00', &(0x7f0000000600)={'ip6_vti0\x00', r0, 0x2f, 0x28, 0x2, 0x468, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast1, 0x10, 0x7800, 0x0, 0xfffffff9}}) socketpair(0x6, 0x80000, 0x400, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_MCAST_LEAVE_GROUP(r4, 0x29, 0x2d, &(0x7f0000000700)={0xff, {{0xa, 0x4e21, 0x4, @loopback, 0x9}}}, 0x88) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f00000007c0)=0x9, 0x4) r5 = syz_io_uring_complete(0x0) epoll_ctl$EPOLL_CTL_DEL(r5, 0x2, r3) getsockopt$IP6T_SO_GET_INFO(r3, 0x29, 0x40, &(0x7f0000000800)={'mangle\x00', 0x0, [0x7fffffff, 0x7, 0xfffffe6e, 0xfffffffd, 0x8080]}, &(0x7f0000000880)=0x54) 13:20:50 executing program 1: ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(0xffffffffffffffff, 0xc0a85322, &(0x7f0000000000)) r0 = syz_open_dev$vcsa(&(0x7f0000000180), 0x1, 0x82) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x98, 0x7, 0x1c, 0x6, 0x0, 0x81, 0x101, 0x4, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x10120, 0x8, 0x1000, 0x2, 0x800, 0x258, 0x9, 0x0, 0xfffffffb, 0x0, 0x3}, 0x0, 0x3, r0, 0x9) syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), 0xffffffffffffffff) r2 = getpid() r3 = fork() openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) wait4(r2, &(0x7f0000000240), 0x80000000, &(0x7f0000000280)) r4 = openat$cgroup_freezer_state(r0, &(0x7f0000000340), 0x2, 0x0) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r4, &(0x7f0000000380)={r0, r1, 0x6}) io_uring_setup(0xca2, &(0x7f00000003c0)={0x0, 0x6132, 0x20, 0x3, 0x289, 0x0, r0}) r5 = accept4$inet6(r0, &(0x7f0000000440)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000480)=0x1c, 0x80800) setsockopt$inet6_group_source_req(r5, 0x29, 0x2b, &(0x7f00000004c0)={0x7f, {{0xa, 0x4e20, 0xfffffff9, @mcast2}}, {{0xa, 0x4e24, 0x111a564c, @local, 0x4}}}, 0x108) r6 = syz_open_dev$vcsa(&(0x7f0000000600), 0x193, 0x80) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000640)={{{@in=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@local}}, &(0x7f0000000740)=0xe8) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000800)={'ip6_vti0\x00', &(0x7f0000000780)={'ip6tnl0\x00', r7, 0x4, 0x5, 0x5, 0x7, 0x20, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8000, 0x40, 0x3ab0, 0xcee0}}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040000}, 0x20000000) r8 = syz_io_uring_complete(0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r8, &(0x7f0000000a40)={&(0x7f0000000940), 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x68, 0x0, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x810}, 0x4044000) 13:20:50 executing program 5: setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e20, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xea8}, {0xa, 0x4e23, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0xf021}, 0x7, [0x5, 0xc8f, 0x2, 0xc86, 0x40, 0x80000000, 0xfffffff8, 0x3]}, 0x5c) r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x1c) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0xff}, {0xa, 0x4e22, 0x4, @empty, 0x2}, 0x0, [0x9, 0x57, 0x4, 0xfffffff9, 0x401, 0x7, 0xc4e9, 0x4]}, 0x5c) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000180)=@fragment={0x8, 0x0, 0x8, 0x1, 0x0, 0x6, 0x64}, 0x8) r1 = socket$inet6(0xa, 0x5, 0xfffffffd) r2 = accept$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000200)=0x1c) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') socket$inet6(0xa, 0xa, 0x1ff) pkey_alloc(0x0, 0x0) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000280)=0x1, 0x4) socket$inet6(0xa, 0x4, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x3, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}, 0x8000) setsockopt$inet6_group_source_req(r2, 0x29, 0x2c, &(0x7f0000000300)={0x6, {{0xa, 0x4e24, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8001}}, {{0xa, 0x4e20, 0x5, @mcast1, 0x4}}}, 0x108) r3 = syz_open_dev$vcsa(&(0x7f0000000440), 0x8, 0xd0000) accept$inet6(r3, &(0x7f0000000480)={0xa, 0x0, 0x0, @remote}, &(0x7f00000004c0)=0x1c) syz_io_uring_complete(0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs2/custom1\x00', 0x6, 0x0) 13:20:50 executing program 2: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x40}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0xc0094) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r1, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7ff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7f}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x2000c051) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x4c, r2, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1eedc1aa}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x96b0}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x626}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004801) r3 = syz_open_dev$vcsa(&(0x7f0000000400), 0x800, 0x80080) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x8080) r4 = syz_open_dev$vcsa(&(0x7f0000000540), 0x800, 0x200000) write$cgroup_freezer_state(r4, &(0x7f0000000580)='FREEZING\x00', 0x9) socketpair(0x1, 0x3, 0x4, &(0x7f00000005c0)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000640)={'batadv0\x00', 0x0}) sendmsg$GTP_CMD_GETPDP(r5, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x54, 0x0, 0x401, 0x70bd27, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8, 0x1, r6}, @GTPA_FLOW={0x6}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_TID={0xc, 0x3, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x8000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, &(0x7f0000000780)={0x1000001c}) r7 = syz_open_dev$vcsa(&(0x7f00000007c0), 0x3, 0xb0ed8b12dabfe13b) sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x44, r0, 0x0, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1d}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x8040}, 0x800) r8 = syz_io_uring_complete(0x0) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x24, 0x0, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r8}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x24}, 0x1, 0x0, 0x0, 0x8801}, 0x24000010) 13:20:50 executing program 7: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000000)={{{@in=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}}}, &(0x7f0000000100)=0xe8) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000140)={0x11, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0x5}, @pad1, @enc_lim={0x4, 0x1, 0x5d}, @jumbo, @jumbo={0xc2, 0x4, 0xc49}]}, 0x20) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x4e23, 0x8cb3, @remote, 0x57}, {0xa, 0x4e24, 0x19c, @ipv4={'\x00', '\xff\xff', @loopback}, 0xffff}, 0x9, [0x1ff, 0x7, 0x2, 0x6, 0x3ff, 0x10001, 0x7f, 0x1ff]}, 0x5c) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000200), &(0x7f0000000240)=0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000280)={0xff, {{0xa, 0x4e20, 0x40, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8000}}, {{0xa, 0x4e22, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x6}}}, 0x108) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, 0x0, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x1e}}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8044000) socketpair(0x25, 0xa, 0xbeb, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000540)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000004c0)="9ad9bbc0a641ca92cdb7e63a363442f585852b2028680300d9a35a8b3dea7a9d6897f66df61e0139312c9d9dddc3e416c69cb6ec1c1980", 0x37, r2}, 0x68) accept4$inet6(r1, 0x0, &(0x7f00000005c0), 0x80800) r3 = socket$inet6(0xa, 0x3, 0x80000001) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000680)={'ip6_vti0\x00', &(0x7f0000000600)={'ip6_vti0\x00', r0, 0x2f, 0x28, 0x2, 0x468, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast1, 0x10, 0x7800, 0x0, 0xfffffff9}}) socketpair(0x6, 0x80000, 0x400, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_MCAST_LEAVE_GROUP(r4, 0x29, 0x2d, &(0x7f0000000700)={0xff, {{0xa, 0x4e21, 0x4, @loopback, 0x9}}}, 0x88) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f00000007c0)=0x9, 0x4) r5 = syz_io_uring_complete(0x0) epoll_ctl$EPOLL_CTL_DEL(r5, 0x2, r3) 13:20:50 executing program 4: ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f0000000000)={'\x00', 0x4d31343c, 0x3, 0x1000000}) r0 = syz_open_dev$vcsu(&(0x7f0000000080), 0xfff, 0x20001) ioctl$PTP_SYS_OFFSET_EXTENDED(r0, 0xc4c03d09, &(0x7f00000000c0)={0x6}) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f0000000580)={0x7, 0x5}) r1 = fsmount(r0, 0x0, 0x70) r2 = accept$inet6(r1, &(0x7f00000005c0)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000600)=0x1c) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000640)={0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r3, &(0x7f0000000680), 0x0, 0x0, 0x80000}, 0x400) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000008c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/231, 0xe7, 0x0, &(0x7f0000000800)=""/133, 0x85}, &(0x7f0000000900)=0x40) r4 = accept4$inet6(r2, &(0x7f0000000940)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000980)=0x1c, 0x800) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f00000009c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x11}}, 0x76}) ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f0000000a00)={0x3, 0x6, 0x1}) sigaltstack(&(0x7f0000fff000/0x1000)=nil, &(0x7f0000000a40)) read$ptp(r0, &(0x7f0000000dc0)=""/71, 0x47) 13:20:50 executing program 0: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20, 0x7800, 0x99, 0x7fff}}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_TID={0xc}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x4) r3 = accept$packet(r1, 0x0, &(0x7f00000003c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000440)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x7f, r4}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', r2, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) r6 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r6, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) capset(&(0x7f00000005c0), &(0x7f0000000600)={0x53f1, 0x8, 0xc230, 0xfffffeff, 0x9, 0x2}) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000640)) setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000680)={{0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x6}, {0xa, 0x4e20, 0x200, @rand_addr=' \x01\x00'}, 0x9f0, [0x3ff, 0x315a, 0x80000000, 0xffff, 0x3ff, 0x9, 0x6, 0x4]}, 0x5c) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000007c0)={'sit0\x00', &(0x7f0000000740)={'sit0\x00', r5, 0x4, 0xff, 0x1, 0x2, 0x0, @mcast1, @mcast2, 0x8000, 0x8000, 0x1, 0xffff8001}}) remap_file_pages(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x8fe, 0x2000) getsockname$packet(r1, &(0x7f0000000800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000840)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), 0xffffffffffffffff) 13:20:50 executing program 6: r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000005, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r0, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000000)=@phonet={0x23, 0x81, 0x9, 0x1}, 0x0, 0x0, 0x1}, 0x7a) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8000, &(0x7f00000000c0)=0x9, 0x7f, 0x2) ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, &(0x7f0000000100)={0x18}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000440)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0xb5) r2 = io_uring_setup(0x5934, &(0x7f0000000480)={0x0, 0xb5ef, 0x0, 0x3, 0x2c5}) syz_io_uring_setup(0x2f29, &(0x7f0000000500)={0x0, 0xa6ea, 0x2, 0x2, 0x22c, 0x0, r2}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000580), &(0x7f00000005c0)) accept4$inet6(0xffffffffffffffff, &(0x7f0000000e40)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000e80)=0x1c, 0x80800) 13:20:50 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0xdcc0, 0x50000) ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f0000000040)) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x1, 0x4) r1 = syz_io_uring_complete(0x0) r2 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x8000, 0x2000) read$ptp(r2, &(0x7f0000000100)=""/135, 0x87) ioctl$PTP_SYS_OFFSET_EXTENDED(r0, 0xc4c03d09, &(0x7f00000001c0)={0xc}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x20, 0x0, 0x423, 0x70bd27, 0x3a3ed3f, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa0}]}, 0x20}, 0x1, 0x0, 0x0, 0x2404c051}, 0x4855) epoll_pwait2(r0, &(0x7f0000000780)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, &(0x7f0000000800), &(0x7f0000000840)={[0x20a]}, 0x8) ioctl$PTP_CLOCK_GETCAPS(r1, 0x80503d01, &(0x7f0000000880)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000b80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000bc0)=0x14) 13:20:50 executing program 4: ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f0000000000)={'\x00', 0x4d31343c, 0x3, 0x1000000}) r0 = syz_open_dev$vcsu(&(0x7f0000000080), 0xfff, 0x20001) ioctl$PTP_SYS_OFFSET_EXTENDED(r0, 0xc4c03d09, &(0x7f00000000c0)={0x6}) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f0000000580)={0x7, 0x5}) r1 = fsmount(r0, 0x0, 0x70) r2 = accept$inet6(r1, &(0x7f00000005c0)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000600)=0x1c) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000640)={0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r3, &(0x7f0000000680), 0x0, 0x0, 0x80000}, 0x400) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000008c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/231, 0xe7, 0x0, &(0x7f0000000800)=""/133, 0x85}, &(0x7f0000000900)=0x40) r4 = accept4$inet6(r2, &(0x7f0000000940)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000980)=0x1c, 0x800) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f00000009c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x11}}, 0x76}) ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f0000000a00)={0x3, 0x6, 0x1}) read$ptp(r0, &(0x7f0000000dc0)=""/71, 0x47) 13:20:50 executing program 6: r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000005, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r0, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000000)=@phonet={0x23, 0x81, 0x9, 0x1}, 0x0, 0x0, 0x1}, 0x7a) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8000, &(0x7f00000000c0)=0x9, 0x7f, 0x2) ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, &(0x7f0000000100)={0x18}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000440)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0xb5) io_uring_setup(0x5934, &(0x7f0000000480)={0x0, 0xb5ef, 0x0, 0x3, 0x2c5}) accept4$inet6(0xffffffffffffffff, &(0x7f0000000e40)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000e80)=0x1c, 0x80800) 13:20:50 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0xdcc0, 0x50000) ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f0000000040)) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x1, 0x4) syz_io_uring_complete(0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x8000, 0x2000) read$ptp(r1, &(0x7f0000000100)=""/135, 0x87) ioctl$PTP_SYS_OFFSET_EXTENDED(r0, 0xc4c03d09, &(0x7f00000001c0)={0xc}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x20, 0x0, 0x423, 0x70bd27, 0x3a3ed3f, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa0}]}, 0x20}, 0x1, 0x0, 0x0, 0x2404c051}, 0x4855) epoll_pwait2(r0, &(0x7f0000000780)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, &(0x7f0000000800), &(0x7f0000000840)={[0x20a]}, 0x8) getsockname$packet(0xffffffffffffffff, &(0x7f0000000b80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000bc0)=0x14) 13:20:50 executing program 7: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000000)={{{@in=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}}}, &(0x7f0000000100)=0xe8) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000140)={0x11, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0x5}, @pad1, @enc_lim={0x4, 0x1, 0x5d}, @jumbo, @jumbo={0xc2, 0x4, 0xc49}]}, 0x20) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x4e23, 0x8cb3, @remote, 0x57}, {0xa, 0x4e24, 0x19c, @ipv4={'\x00', '\xff\xff', @loopback}, 0xffff}, 0x9, [0x1ff, 0x7, 0x2, 0x6, 0x3ff, 0x10001, 0x7f, 0x1ff]}, 0x5c) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000200), &(0x7f0000000240)=0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000280)={0xff, {{0xa, 0x4e20, 0x40, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8000}}, {{0xa, 0x4e22, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x6}}}, 0x108) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, 0x0, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x1e}}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8044000) socketpair(0x25, 0xa, 0xbeb, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000540)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000004c0)="9ad9bbc0a641ca92cdb7e63a363442f585852b2028680300d9a35a8b3dea7a9d6897f66df61e0139312c9d9dddc3e416c69cb6ec1c1980", 0x37, r2}, 0x68) accept4$inet6(r1, 0x0, &(0x7f00000005c0), 0x80800) r3 = socket$inet6(0xa, 0x3, 0x80000001) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000680)={'ip6_vti0\x00', &(0x7f0000000600)={'ip6_vti0\x00', r0, 0x2f, 0x28, 0x2, 0x468, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast1, 0x10, 0x7800, 0x0, 0xfffffff9}}) socketpair(0x6, 0x80000, 0x400, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_MCAST_LEAVE_GROUP(r4, 0x29, 0x2d, &(0x7f0000000700)={0xff, {{0xa, 0x4e21, 0x4, @loopback, 0x9}}}, 0x88) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f00000007c0)=0x9, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r3) 13:20:50 executing program 4: ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f0000000000)={'\x00', 0x4d31343c, 0x3, 0x1000000}) r0 = syz_open_dev$vcsu(&(0x7f0000000080), 0xfff, 0x20001) ioctl$PTP_SYS_OFFSET_EXTENDED(r0, 0xc4c03d09, &(0x7f00000000c0)={0x6}) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f0000000580)={0x7, 0x5}) r1 = fsmount(r0, 0x0, 0x70) r2 = accept$inet6(r1, &(0x7f00000005c0)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000600)=0x1c) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000640)={0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r3, &(0x7f0000000680), 0x0, 0x0, 0x80000}, 0x400) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000008c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/231, 0xe7, 0x0, &(0x7f0000000800)=""/133, 0x85}, &(0x7f0000000900)=0x40) r4 = accept4$inet6(r2, &(0x7f0000000940)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000980)=0x1c, 0x800) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f00000009c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x11}}, 0x76}) read$ptp(r0, &(0x7f0000000dc0)=""/71, 0x47) 13:20:50 executing program 6: r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000005, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r0, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000000)=@phonet={0x23, 0x81, 0x9, 0x1}, 0x0, 0x0, 0x1}, 0x7a) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8000, &(0x7f00000000c0)=0x9, 0x7f, 0x2) ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, &(0x7f0000000100)={0x18}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000440)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0xb5) accept4$inet6(0xffffffffffffffff, &(0x7f0000000e40)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000e80)=0x1c, 0x80800) 13:20:50 executing program 2: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x40}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0xc0094) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r1, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7ff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7f}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x2000c051) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x4c, r2, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1eedc1aa}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x96b0}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x626}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004801) r3 = syz_open_dev$vcsa(&(0x7f0000000400), 0x800, 0x80080) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x8080) r4 = syz_open_dev$vcsa(&(0x7f0000000540), 0x800, 0x200000) write$cgroup_freezer_state(r4, &(0x7f0000000580)='FREEZING\x00', 0x9) socketpair(0x1, 0x3, 0x4, &(0x7f00000005c0)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000640)={'batadv0\x00', 0x0}) sendmsg$GTP_CMD_GETPDP(r5, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x54, 0x0, 0x401, 0x70bd27, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8, 0x1, r6}, @GTPA_FLOW={0x6}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_TID={0xc, 0x3, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x8000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, &(0x7f0000000780)={0x1000001c}) r7 = syz_open_dev$vcsa(&(0x7f00000007c0), 0x3, 0xb0ed8b12dabfe13b) sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x44, r0, 0x0, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1d}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x8040}, 0x800) r8 = syz_io_uring_complete(0x0) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x24, 0x0, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r8}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x24}, 0x1, 0x0, 0x0, 0x8801}, 0x24000010) 13:20:59 executing program 0: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20, 0x7800, 0x99, 0x7fff}}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_TID={0xc}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x4) r3 = accept$packet(r1, 0x0, &(0x7f00000003c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000440)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x7f, r4}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', r2, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) r6 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r6, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) capset(&(0x7f00000005c0), &(0x7f0000000600)={0x53f1, 0x8, 0xc230, 0xfffffeff, 0x9, 0x2}) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000640)) setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000680)={{0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x6}, {0xa, 0x4e20, 0x200, @rand_addr=' \x01\x00'}, 0x9f0, [0x3ff, 0x315a, 0x80000000, 0xffff, 0x3ff, 0x9, 0x6, 0x4]}, 0x5c) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000007c0)={'sit0\x00', &(0x7f0000000740)={'sit0\x00', r5, 0x4, 0xff, 0x1, 0x2, 0x0, @mcast1, @mcast2, 0x8000, 0x8000, 0x1, 0xffff8001}}) remap_file_pages(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x8fe, 0x2000) getsockname$packet(r1, &(0x7f0000000800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000840)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), 0xffffffffffffffff) 13:20:59 executing program 2: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x40}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0xc0094) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r1, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7ff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7f}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x2000c051) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x4c, r2, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1eedc1aa}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x96b0}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x626}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004801) r3 = syz_open_dev$vcsa(&(0x7f0000000400), 0x800, 0x80080) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x8080) r4 = syz_open_dev$vcsa(&(0x7f0000000540), 0x800, 0x200000) write$cgroup_freezer_state(r4, &(0x7f0000000580)='FREEZING\x00', 0x9) socketpair(0x1, 0x3, 0x4, &(0x7f00000005c0)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000640)={'batadv0\x00', 0x0}) sendmsg$GTP_CMD_GETPDP(r5, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x54, 0x0, 0x401, 0x70bd27, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8, 0x1, r6}, @GTPA_FLOW={0x6}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_TID={0xc, 0x3, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x8000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, &(0x7f0000000780)={0x1000001c}) r7 = syz_open_dev$vcsa(&(0x7f00000007c0), 0x3, 0xb0ed8b12dabfe13b) sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x44, r0, 0x0, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1d}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x8040}, 0x800) syz_io_uring_complete(0x0) 13:20:59 executing program 7: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000000)={{{@in=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}}}, &(0x7f0000000100)=0xe8) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000140)={0x11, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0x5}, @pad1, @enc_lim={0x4, 0x1, 0x5d}, @jumbo, @jumbo={0xc2, 0x4, 0xc49}]}, 0x20) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x4e23, 0x8cb3, @remote, 0x57}, {0xa, 0x4e24, 0x19c, @ipv4={'\x00', '\xff\xff', @loopback}, 0xffff}, 0x9, [0x1ff, 0x7, 0x2, 0x6, 0x3ff, 0x10001, 0x7f, 0x1ff]}, 0x5c) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000200), &(0x7f0000000240)=0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000280)={0xff, {{0xa, 0x4e20, 0x40, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8000}}, {{0xa, 0x4e22, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x6}}}, 0x108) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, 0x0, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x1e}}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8044000) socketpair(0x25, 0xa, 0xbeb, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000540)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000004c0)="9ad9bbc0a641ca92cdb7e63a363442f585852b2028680300d9a35a8b3dea7a9d6897f66df61e0139312c9d9dddc3e416c69cb6ec1c1980", 0x37, r2}, 0x68) accept4$inet6(r1, 0x0, &(0x7f00000005c0), 0x80800) r3 = socket$inet6(0xa, 0x3, 0x80000001) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000680)={'ip6_vti0\x00', &(0x7f0000000600)={'ip6_vti0\x00', r0, 0x2f, 0x28, 0x2, 0x468, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast1, 0x10, 0x7800, 0x0, 0xfffffff9}}) socketpair(0x6, 0x80000, 0x400, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_MCAST_LEAVE_GROUP(r4, 0x29, 0x2d, &(0x7f0000000700)={0xff, {{0xa, 0x4e21, 0x4, @loopback, 0x9}}}, 0x88) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r3) 13:20:59 executing program 5: setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e20, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xea8}, {0xa, 0x4e23, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0xf021}, 0x7, [0x5, 0xc8f, 0x2, 0xc86, 0x40, 0x80000000, 0xfffffff8, 0x3]}, 0x5c) r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x1c) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0xff}, {0xa, 0x4e22, 0x4, @empty, 0x2}, 0x0, [0x9, 0x57, 0x4, 0xfffffff9, 0x401, 0x7, 0xc4e9, 0x4]}, 0x5c) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000180)=@fragment={0x8, 0x0, 0x8, 0x1, 0x0, 0x6, 0x64}, 0x8) r1 = socket$inet6(0xa, 0x5, 0xfffffffd) r2 = accept$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000200)=0x1c) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') socket$inet6(0xa, 0xa, 0x1ff) pkey_alloc(0x0, 0x0) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000280)=0x1, 0x4) socket$inet6(0xa, 0x4, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x3, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}, 0x8000) setsockopt$inet6_group_source_req(r2, 0x29, 0x2c, &(0x7f0000000300)={0x6, {{0xa, 0x4e24, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8001}}, {{0xa, 0x4e20, 0x5, @mcast1, 0x4}}}, 0x108) syz_open_dev$vcsa(&(0x7f0000000440), 0x8, 0xd0000) syz_io_uring_complete(0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs2/custom1\x00', 0x6, 0x0) 13:20:59 executing program 4: ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f0000000000)={'\x00', 0x4d31343c, 0x3, 0x1000000}) r0 = syz_open_dev$vcsu(&(0x7f0000000080), 0xfff, 0x20001) ioctl$PTP_SYS_OFFSET_EXTENDED(r0, 0xc4c03d09, &(0x7f00000000c0)={0x6}) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f0000000580)={0x7, 0x5}) r1 = fsmount(r0, 0x0, 0x70) r2 = accept$inet6(r1, &(0x7f00000005c0)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000600)=0x1c) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000640)={0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r3, &(0x7f0000000680), 0x0, 0x0, 0x80000}, 0x400) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000008c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/231, 0xe7, 0x0, &(0x7f0000000800)=""/133, 0x85}, &(0x7f0000000900)=0x40) accept4$inet6(r2, &(0x7f0000000940)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000980)=0x1c, 0x800) read$ptp(r0, &(0x7f0000000dc0)=""/71, 0x47) 13:20:59 executing program 6: r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000005, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r0, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000000)=@phonet={0x23, 0x81, 0x9, 0x1}, 0x0, 0x0, 0x1}, 0x7a) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8000, &(0x7f00000000c0)=0x9, 0x7f, 0x2) ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, &(0x7f0000000100)={0x18}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000440)='./binderfs/binder0\x00', 0x800, 0x0) accept4$inet6(0xffffffffffffffff, &(0x7f0000000e40)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000e80)=0x1c, 0x80800) 13:20:59 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0xdcc0, 0x50000) ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f0000000040)) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x1, 0x4) syz_io_uring_complete(0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x8000, 0x2000) read$ptp(r1, &(0x7f0000000100)=""/135, 0x87) ioctl$PTP_SYS_OFFSET_EXTENDED(r0, 0xc4c03d09, &(0x7f00000001c0)={0xc}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x20, 0x0, 0x423, 0x70bd27, 0x3a3ed3f, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa0}]}, 0x20}, 0x1, 0x0, 0x0, 0x2404c051}, 0x4855) getsockname$packet(0xffffffffffffffff, &(0x7f0000000b80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000bc0)=0x14) 13:20:59 executing program 1: ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(0xffffffffffffffff, 0xc0a85322, &(0x7f0000000000)) r0 = syz_open_dev$vcsa(&(0x7f0000000180), 0x1, 0x82) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x98, 0x7, 0x1c, 0x6, 0x0, 0x81, 0x101, 0x4, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x10120, 0x8, 0x1000, 0x2, 0x800, 0x258, 0x9, 0x0, 0xfffffffb, 0x0, 0x3}, 0x0, 0x3, r0, 0x9) syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), 0xffffffffffffffff) r2 = getpid() r3 = fork() openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) wait4(r2, &(0x7f0000000240), 0x80000000, &(0x7f0000000280)) r4 = openat$cgroup_freezer_state(r0, &(0x7f0000000340), 0x2, 0x0) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r4, &(0x7f0000000380)={r0, r1, 0x6}) io_uring_setup(0xca2, &(0x7f00000003c0)={0x0, 0x6132, 0x20, 0x3, 0x289, 0x0, r0}) r5 = accept4$inet6(r0, &(0x7f0000000440)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000480)=0x1c, 0x80800) setsockopt$inet6_group_source_req(r5, 0x29, 0x2b, &(0x7f00000004c0)={0x7f, {{0xa, 0x4e20, 0xfffffff9, @mcast2}}, {{0xa, 0x4e24, 0x111a564c, @local, 0x4}}}, 0x108) r6 = syz_open_dev$vcsa(&(0x7f0000000600), 0x193, 0x80) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000640)={{{@in=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@local}}, &(0x7f0000000740)=0xe8) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000800)={'ip6_vti0\x00', &(0x7f0000000780)={'ip6tnl0\x00', r7, 0x4, 0x5, 0x5, 0x7, 0x20, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8000, 0x40, 0x3ab0, 0xcee0}}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040000}, 0x20000000) syz_io_uring_complete(0x0) 13:20:59 executing program 6: r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000005, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r0, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000000)=@phonet={0x23, 0x81, 0x9, 0x1}, 0x0, 0x0, 0x1}, 0x7a) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8000, &(0x7f00000000c0)=0x9, 0x7f, 0x2) ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, &(0x7f0000000100)={0x18}) accept4$inet6(0xffffffffffffffff, &(0x7f0000000e40)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000e80)=0x1c, 0x80800) 13:20:59 executing program 4: ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f0000000000)={'\x00', 0x4d31343c, 0x3, 0x1000000}) r0 = syz_open_dev$vcsu(&(0x7f0000000080), 0xfff, 0x20001) ioctl$PTP_SYS_OFFSET_EXTENDED(r0, 0xc4c03d09, &(0x7f00000000c0)={0x6}) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f0000000580)={0x7, 0x5}) r1 = fsmount(r0, 0x0, 0x70) accept$inet6(r1, &(0x7f00000005c0)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000600)=0x1c) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000640)={0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r2, &(0x7f0000000680), 0x0, 0x0, 0x80000}, 0x400) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000008c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/231, 0xe7, 0x0, &(0x7f0000000800)=""/133, 0x85}, &(0x7f0000000900)=0x40) read$ptp(r0, &(0x7f0000000dc0)=""/71, 0x47) 13:20:59 executing program 6: r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000005, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r0, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000000)=@phonet={0x23, 0x81, 0x9, 0x1}, 0x0, 0x0, 0x1}, 0x7a) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8000, &(0x7f00000000c0)=0x9, 0x7f, 0x2) accept4$inet6(0xffffffffffffffff, &(0x7f0000000e40)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000e80)=0x1c, 0x80800) 13:20:59 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0xdcc0, 0x50000) ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f0000000040)) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x1, 0x4) syz_io_uring_complete(0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x8000, 0x2000) read$ptp(r1, &(0x7f0000000100)=""/135, 0x87) ioctl$PTP_SYS_OFFSET_EXTENDED(r0, 0xc4c03d09, &(0x7f00000001c0)={0xc}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000b80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000bc0)=0x14) 13:20:59 executing program 6: r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000005, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r0, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000000)=@phonet={0x23, 0x81, 0x9, 0x1}, 0x0, 0x0, 0x1}, 0x7a) accept4$inet6(0xffffffffffffffff, &(0x7f0000000e40)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000e80)=0x1c, 0x80800) 13:20:59 executing program 4: ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f0000000000)={'\x00', 0x4d31343c, 0x3, 0x1000000}) r0 = syz_open_dev$vcsu(&(0x7f0000000080), 0xfff, 0x20001) ioctl$PTP_SYS_OFFSET_EXTENDED(r0, 0xc4c03d09, &(0x7f00000000c0)={0x6}) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f0000000580)={0x7, 0x5}) r1 = fsmount(r0, 0x0, 0x70) accept$inet6(r1, &(0x7f00000005c0)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000600)=0x1c) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000640)={0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r2, &(0x7f0000000680), 0x0, 0x0, 0x80000}, 0x400) read$ptp(r0, &(0x7f0000000dc0)=""/71, 0x47) 13:21:07 executing program 1: ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(0xffffffffffffffff, 0xc0a85322, &(0x7f0000000000)) r0 = syz_open_dev$vcsa(&(0x7f0000000180), 0x1, 0x82) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x98, 0x7, 0x1c, 0x6, 0x0, 0x81, 0x101, 0x4, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x10120, 0x8, 0x1000, 0x2, 0x800, 0x258, 0x9, 0x0, 0xfffffffb, 0x0, 0x3}, 0x0, 0x3, r0, 0x9) syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), 0xffffffffffffffff) r2 = getpid() r3 = fork() openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) wait4(r2, &(0x7f0000000240), 0x80000000, &(0x7f0000000280)) r4 = openat$cgroup_freezer_state(r0, &(0x7f0000000340), 0x2, 0x0) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r4, &(0x7f0000000380)={r0, r1, 0x6}) io_uring_setup(0xca2, &(0x7f00000003c0)={0x0, 0x6132, 0x20, 0x3, 0x289, 0x0, r0}) r5 = accept4$inet6(r0, &(0x7f0000000440)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000480)=0x1c, 0x80800) setsockopt$inet6_group_source_req(r5, 0x29, 0x2b, &(0x7f00000004c0)={0x7f, {{0xa, 0x4e20, 0xfffffff9, @mcast2}}, {{0xa, 0x4e24, 0x111a564c, @local, 0x4}}}, 0x108) r6 = syz_open_dev$vcsa(&(0x7f0000000600), 0x193, 0x80) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000640)={{{@in=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@local}}, &(0x7f0000000740)=0xe8) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000800)={'ip6_vti0\x00', &(0x7f0000000780)={'ip6tnl0\x00', r7, 0x4, 0x5, 0x5, 0x7, 0x20, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8000, 0x40, 0x3ab0, 0xcee0}}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040000}, 0x20000000) 13:21:07 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0xdcc0, 0x50000) ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f0000000040)) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x1, 0x4) syz_io_uring_complete(0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x8000, 0x2000) read$ptp(r1, &(0x7f0000000100)=""/135, 0x87) getsockname$packet(0xffffffffffffffff, &(0x7f0000000b80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000bc0)=0x14) 13:21:07 executing program 6: mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000005, 0x10, 0xffffffffffffffff, 0x10000000) accept4$inet6(0xffffffffffffffff, &(0x7f0000000e40)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000e80)=0x1c, 0x80800) 13:21:07 executing program 7: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000000)={{{@in=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}}}, &(0x7f0000000100)=0xe8) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000140)={0x11, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0x5}, @pad1, @enc_lim={0x4, 0x1, 0x5d}, @jumbo, @jumbo={0xc2, 0x4, 0xc49}]}, 0x20) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x4e23, 0x8cb3, @remote, 0x57}, {0xa, 0x4e24, 0x19c, @ipv4={'\x00', '\xff\xff', @loopback}, 0xffff}, 0x9, [0x1ff, 0x7, 0x2, 0x6, 0x3ff, 0x10001, 0x7f, 0x1ff]}, 0x5c) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000200), &(0x7f0000000240)=0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000280)={0xff, {{0xa, 0x4e20, 0x40, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8000}}, {{0xa, 0x4e22, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x6}}}, 0x108) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, 0x0, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x1e}}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8044000) socketpair(0x25, 0xa, 0xbeb, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000540)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000004c0)="9ad9bbc0a641ca92cdb7e63a363442f585852b2028680300d9a35a8b3dea7a9d6897f66df61e0139312c9d9dddc3e416c69cb6ec1c1980", 0x37, r2}, 0x68) accept4$inet6(r1, 0x0, &(0x7f00000005c0), 0x80800) r3 = socket$inet6(0xa, 0x3, 0x80000001) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000680)={'ip6_vti0\x00', &(0x7f0000000600)={'ip6_vti0\x00', r0, 0x2f, 0x28, 0x2, 0x468, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast1, 0x10, 0x7800, 0x0, 0xfffffff9}}) socketpair(0x6, 0x80000, 0x400, &(0x7f00000006c0)) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r3) 13:21:07 executing program 2: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x40}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0xc0094) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r1, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7ff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7f}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x2000c051) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x4c, r2, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1eedc1aa}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x96b0}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x626}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004801) r3 = syz_open_dev$vcsa(&(0x7f0000000400), 0x800, 0x80080) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x8080) r4 = syz_open_dev$vcsa(&(0x7f0000000540), 0x800, 0x200000) write$cgroup_freezer_state(r4, &(0x7f0000000580)='FREEZING\x00', 0x9) socketpair(0x1, 0x3, 0x4, &(0x7f00000005c0)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000640)={'batadv0\x00', 0x0}) sendmsg$GTP_CMD_GETPDP(r5, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x54, 0x0, 0x401, 0x70bd27, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8, 0x1, r6}, @GTPA_FLOW={0x6}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_TID={0xc, 0x3, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x8000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, &(0x7f0000000780)={0x1000001c}) syz_open_dev$vcsa(&(0x7f00000007c0), 0x3, 0xb0ed8b12dabfe13b) syz_io_uring_complete(0x0) 13:21:07 executing program 4: ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f0000000000)={'\x00', 0x4d31343c, 0x3, 0x1000000}) r0 = syz_open_dev$vcsu(&(0x7f0000000080), 0xfff, 0x20001) ioctl$PTP_SYS_OFFSET_EXTENDED(r0, 0xc4c03d09, &(0x7f00000000c0)={0x6}) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f0000000580)={0x7, 0x5}) r1 = fsmount(r0, 0x0, 0x70) accept$inet6(r1, &(0x7f00000005c0)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000600)=0x1c) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000640)) read$ptp(r0, &(0x7f0000000dc0)=""/71, 0x47) 13:21:07 executing program 5: setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e20, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xea8}, {0xa, 0x4e23, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0xf021}, 0x7, [0x5, 0xc8f, 0x2, 0xc86, 0x40, 0x80000000, 0xfffffff8, 0x3]}, 0x5c) r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x1c) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0xff}, {0xa, 0x4e22, 0x4, @empty, 0x2}, 0x0, [0x9, 0x57, 0x4, 0xfffffff9, 0x401, 0x7, 0xc4e9, 0x4]}, 0x5c) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000180)=@fragment={0x8, 0x0, 0x8, 0x1, 0x0, 0x6, 0x64}, 0x8) r1 = socket$inet6(0xa, 0x5, 0xfffffffd) r2 = accept$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000200)=0x1c) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') socket$inet6(0xa, 0xa, 0x1ff) pkey_alloc(0x0, 0x0) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000280)=0x1, 0x4) socket$inet6(0xa, 0x4, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x3, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}, 0x8000) setsockopt$inet6_group_source_req(r2, 0x29, 0x2c, &(0x7f0000000300)={0x6, {{0xa, 0x4e24, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8001}}, {{0xa, 0x4e20, 0x5, @mcast1, 0x4}}}, 0x108) syz_io_uring_complete(0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs2/custom1\x00', 0x6, 0x0) 13:21:07 executing program 0: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20, 0x7800, 0x99, 0x7fff}}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_TID={0xc}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x4) r3 = accept$packet(r1, 0x0, &(0x7f00000003c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000440)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x7f, r4}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', r2, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) r6 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r6, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) capset(&(0x7f00000005c0), &(0x7f0000000600)={0x53f1, 0x8, 0xc230, 0xfffffeff, 0x9, 0x2}) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000640)) setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000680)={{0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x6}, {0xa, 0x4e20, 0x200, @rand_addr=' \x01\x00'}, 0x9f0, [0x3ff, 0x315a, 0x80000000, 0xffff, 0x3ff, 0x9, 0x6, 0x4]}, 0x5c) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000007c0)={'sit0\x00', &(0x7f0000000740)={'sit0\x00', r5, 0x4, 0xff, 0x1, 0x2, 0x0, @mcast1, @mcast2, 0x8000, 0x8000, 0x1, 0xffff8001}}) remap_file_pages(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x8fe, 0x2000) r7 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r7) 13:21:07 executing program 6: accept4$inet6(0xffffffffffffffff, &(0x7f0000000e40)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000e80)=0x1c, 0x80800) 13:21:07 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0xdcc0, 0x50000) ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f0000000040)) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x1, 0x4) syz_io_uring_complete(0x0) syz_open_dev$vcsa(&(0x7f00000000c0), 0x8000, 0x2000) getsockname$packet(0xffffffffffffffff, &(0x7f0000000b80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000bc0)=0x14) 13:21:07 executing program 6: accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000e80), 0x80800) 13:21:07 executing program 4: ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f0000000000)={'\x00', 0x4d31343c, 0x3, 0x1000000}) r0 = syz_open_dev$vcsu(&(0x7f0000000080), 0xfff, 0x20001) ioctl$PTP_SYS_OFFSET_EXTENDED(r0, 0xc4c03d09, &(0x7f00000000c0)={0x6}) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f0000000580)={0x7, 0x5}) r1 = fsmount(r0, 0x0, 0x70) accept$inet6(r1, &(0x7f00000005c0)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000600)=0x1c) read$ptp(r0, &(0x7f0000000dc0)=""/71, 0x47) 13:21:07 executing program 0: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20, 0x7800, 0x99, 0x7fff}}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_TID={0xc}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x4) r3 = accept$packet(r1, 0x0, &(0x7f00000003c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000440)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x7f, r4}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', r2, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) r6 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r6, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) capset(&(0x7f00000005c0), &(0x7f0000000600)={0x53f1, 0x8, 0xc230, 0xfffffeff, 0x9, 0x2}) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000640)) setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000680)={{0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x6}, {0xa, 0x4e20, 0x200, @rand_addr=' \x01\x00'}, 0x9f0, [0x3ff, 0x315a, 0x80000000, 0xffff, 0x3ff, 0x9, 0x6, 0x4]}, 0x5c) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000007c0)={'sit0\x00', &(0x7f0000000740)={'sit0\x00', r5, 0x4, 0xff, 0x1, 0x2, 0x0, @mcast1, @mcast2, 0x8000, 0x8000, 0x1, 0xffff8001}}) r7 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r7) 13:21:07 executing program 6: accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) 13:21:07 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0xdcc0, 0x50000) ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f0000000040)) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x1, 0x4) syz_io_uring_complete(0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000b80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000bc0)=0x14) 13:21:15 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0xdcc0, 0x50000) ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f0000000040)) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x1, 0x4) getsockname$packet(0xffffffffffffffff, &(0x7f0000000b80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000bc0)=0x14) 13:21:15 executing program 0: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20, 0x7800, 0x99, 0x7fff}}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_TID={0xc}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x4) r3 = accept$packet(r1, 0x0, &(0x7f00000003c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000440)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x7f, r4}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', r2, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) r5 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r5, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) capset(&(0x7f00000005c0), &(0x7f0000000600)={0x53f1, 0x8, 0xc230, 0xfffffeff, 0x9, 0x2}) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000640)) setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000680)={{0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x6}, {0xa, 0x4e20, 0x200, @rand_addr=' \x01\x00'}, 0x9f0, [0x3ff, 0x315a, 0x80000000, 0xffff, 0x3ff, 0x9, 0x6, 0x4]}, 0x5c) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) r6 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r6) 13:21:15 executing program 7: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000000)={{{@in=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}}}, &(0x7f0000000100)=0xe8) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000140)={0x11, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0x5}, @pad1, @enc_lim={0x4, 0x1, 0x5d}, @jumbo, @jumbo={0xc2, 0x4, 0xc49}]}, 0x20) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x4e23, 0x8cb3, @remote, 0x57}, {0xa, 0x4e24, 0x19c, @ipv4={'\x00', '\xff\xff', @loopback}, 0xffff}, 0x9, [0x1ff, 0x7, 0x2, 0x6, 0x3ff, 0x10001, 0x7f, 0x1ff]}, 0x5c) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000200), &(0x7f0000000240)=0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000280)={0xff, {{0xa, 0x4e20, 0x40, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8000}}, {{0xa, 0x4e22, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x6}}}, 0x108) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, 0x0, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x1e}}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8044000) socketpair(0x25, 0xa, 0xbeb, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000540)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000004c0)="9ad9bbc0a641ca92cdb7e63a363442f585852b2028680300d9a35a8b3dea7a9d6897f66df61e0139312c9d9dddc3e416c69cb6ec1c1980", 0x37, r2}, 0x68) accept4$inet6(r1, 0x0, &(0x7f00000005c0), 0x80800) r3 = socket$inet6(0xa, 0x3, 0x80000001) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000680)={'ip6_vti0\x00', &(0x7f0000000600)={'ip6_vti0\x00', r0, 0x2f, 0x28, 0x2, 0x468, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast1, 0x10, 0x7800, 0x0, 0xfffffff9}}) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r3) 13:21:15 executing program 5: setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e20, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xea8}, {0xa, 0x4e23, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0xf021}, 0x7, [0x5, 0xc8f, 0x2, 0xc86, 0x40, 0x80000000, 0xfffffff8, 0x3]}, 0x5c) r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x1c) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0xff}, {0xa, 0x4e22, 0x4, @empty, 0x2}, 0x0, [0x9, 0x57, 0x4, 0xfffffff9, 0x401, 0x7, 0xc4e9, 0x4]}, 0x5c) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000180)=@fragment={0x8, 0x0, 0x8, 0x1, 0x0, 0x6, 0x64}, 0x8) r1 = socket$inet6(0xa, 0x5, 0xfffffffd) r2 = accept$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000200)=0x1c) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') socket$inet6(0xa, 0xa, 0x1ff) pkey_alloc(0x0, 0x0) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000280)=0x1, 0x4) socket$inet6(0xa, 0x4, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x3, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}, 0x8000) setsockopt$inet6_group_source_req(r2, 0x29, 0x2c, &(0x7f0000000300)={0x6, {{0xa, 0x4e24, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8001}}, {{0xa, 0x4e20, 0x5, @mcast1, 0x4}}}, 0x108) syz_io_uring_complete(0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs2/custom1\x00', 0x6, 0x0) 13:21:15 executing program 6: accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:21:15 executing program 4: ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f0000000000)={'\x00', 0x4d31343c, 0x3, 0x1000000}) r0 = syz_open_dev$vcsu(&(0x7f0000000080), 0xfff, 0x20001) ioctl$PTP_SYS_OFFSET_EXTENDED(r0, 0xc4c03d09, &(0x7f00000000c0)={0x6}) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f0000000580)={0x7, 0x5}) fsmount(r0, 0x0, 0x70) read$ptp(r0, &(0x7f0000000dc0)=""/71, 0x47) 13:21:15 executing program 1: ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(0xffffffffffffffff, 0xc0a85322, &(0x7f0000000000)) r0 = syz_open_dev$vcsa(&(0x7f0000000180), 0x1, 0x82) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x98, 0x7, 0x1c, 0x6, 0x0, 0x81, 0x101, 0x4, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x10120, 0x8, 0x1000, 0x2, 0x800, 0x258, 0x9, 0x0, 0xfffffffb, 0x0, 0x3}, 0x0, 0x3, r0, 0x9) syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), 0xffffffffffffffff) r2 = getpid() r3 = fork() openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) wait4(r2, &(0x7f0000000240), 0x80000000, &(0x7f0000000280)) r4 = openat$cgroup_freezer_state(r0, &(0x7f0000000340), 0x2, 0x0) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r4, &(0x7f0000000380)={r0, r1, 0x6}) io_uring_setup(0xca2, &(0x7f00000003c0)={0x0, 0x6132, 0x20, 0x3, 0x289, 0x0, r0}) r5 = accept4$inet6(r0, &(0x7f0000000440)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000480)=0x1c, 0x80800) setsockopt$inet6_group_source_req(r5, 0x29, 0x2b, &(0x7f00000004c0)={0x7f, {{0xa, 0x4e20, 0xfffffff9, @mcast2}}, {{0xa, 0x4e24, 0x111a564c, @local, 0x4}}}, 0x108) r6 = syz_open_dev$vcsa(&(0x7f0000000600), 0x193, 0x80) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000640)={{{@in=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@local}}, &(0x7f0000000740)=0xe8) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000800)={'ip6_vti0\x00', &(0x7f0000000780)={'ip6tnl0\x00', r7, 0x4, 0x5, 0x5, 0x7, 0x20, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8000, 0x40, 0x3ab0, 0xcee0}}) 13:21:15 executing program 2: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x40}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0xc0094) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r1, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7ff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7f}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x2000c051) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x4c, r2, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1eedc1aa}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x96b0}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x626}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004801) r3 = syz_open_dev$vcsa(&(0x7f0000000400), 0x800, 0x80080) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x8080) r4 = syz_open_dev$vcsa(&(0x7f0000000540), 0x800, 0x200000) write$cgroup_freezer_state(r4, &(0x7f0000000580)='FREEZING\x00', 0x9) socketpair(0x1, 0x3, 0x4, &(0x7f00000005c0)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000640)={'batadv0\x00', 0x0}) sendmsg$GTP_CMD_GETPDP(r5, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x54, 0x0, 0x401, 0x70bd27, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8, 0x1, r6}, @GTPA_FLOW={0x6}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_TID={0xc, 0x3, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x8000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, &(0x7f0000000780)={0x1000001c}) syz_io_uring_complete(0x0) 13:21:15 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0xdcc0, 0x50000) ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f0000000040)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000b80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000bc0)=0x14) 13:21:15 executing program 3: syz_open_dev$vcsu(&(0x7f0000000000), 0xdcc0, 0x50000) getsockname$packet(0xffffffffffffffff, &(0x7f0000000b80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000bc0)=0x14) 13:21:15 executing program 4: ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f0000000000)={'\x00', 0x4d31343c, 0x3, 0x1000000}) r0 = syz_open_dev$vcsu(&(0x7f0000000080), 0xfff, 0x20001) ioctl$PTP_SYS_OFFSET_EXTENDED(r0, 0xc4c03d09, &(0x7f00000000c0)={0x6}) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f0000000580)={0x7, 0x5}) read$ptp(r0, &(0x7f0000000dc0)=""/71, 0x47) 13:21:15 executing program 7: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000000)={{{@in=@local, @in=@dev}}, {{@in6}}}, &(0x7f0000000100)=0xe8) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000140)={0x11, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0x5}, @pad1, @enc_lim={0x4, 0x1, 0x5d}, @jumbo, @jumbo={0xc2, 0x4, 0xc49}]}, 0x20) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x4e23, 0x8cb3, @remote, 0x57}, {0xa, 0x4e24, 0x19c, @ipv4={'\x00', '\xff\xff', @loopback}, 0xffff}, 0x9, [0x1ff, 0x7, 0x2, 0x6, 0x3ff, 0x10001, 0x7f, 0x1ff]}, 0x5c) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000200), &(0x7f0000000240)=0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000280)={0xff, {{0xa, 0x4e20, 0x40, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8000}}, {{0xa, 0x4e22, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x6}}}, 0x108) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, 0x0, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x1e}}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8044000) socketpair(0x25, 0xa, 0xbeb, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000540)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000004c0)="9ad9bbc0a641ca92cdb7e63a363442f585852b2028680300d9a35a8b3dea7a9d6897f66df61e0139312c9d9dddc3e416c69cb6ec1c1980", 0x37, r1}, 0x68) accept4$inet6(r0, 0x0, &(0x7f00000005c0), 0x80800) r2 = socket$inet6(0xa, 0x3, 0x80000001) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r2) 13:21:15 executing program 6: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000000)={{{@in=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}}}, &(0x7f0000000100)=0xe8) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000140)={0x11, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0x5}, @pad1, @enc_lim={0x4, 0x1, 0x5d}, @jumbo, @jumbo={0xc2, 0x4, 0xc49}]}, 0x20) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x4e23, 0x8cb3, @remote, 0x57}, {0xa, 0x4e24, 0x19c, @ipv4={'\x00', '\xff\xff', @loopback}, 0xffff}, 0x9, [0x1ff, 0x7, 0x2, 0x6, 0x3ff, 0x10001, 0x7f, 0x1ff]}, 0x5c) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000200), &(0x7f0000000240)=0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000280)={0xff, {{0xa, 0x4e20, 0x40, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8000}}, {{0xa, 0x4e22, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x6}}}, 0x108) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, 0x0, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x1e}}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8044000) socketpair(0x25, 0xa, 0xbeb, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000540)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000004c0)="9ad9bbc0a641ca92cdb7e63a363442f585852b2028680300d9a35a8b3dea7a9d6897f66df61e0139312c9d9dddc3e416c69cb6ec1c1980", 0x37, r2}, 0x68) accept4$inet6(r1, 0x0, &(0x7f00000005c0), 0x80800) r3 = socket$inet6(0xa, 0x3, 0x80000001) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000680)={'ip6_vti0\x00', &(0x7f0000000600)={'ip6_vti0\x00', r0, 0x2f, 0x28, 0x2, 0x468, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast1, 0x10, 0x7800, 0x0, 0xfffffff9}}) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r3) 13:21:15 executing program 3: getsockname$packet(0xffffffffffffffff, &(0x7f0000000b80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000bc0)=0x14) 13:21:15 executing program 0: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20, 0x7800, 0x99, 0x7fff}}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_TID={0xc}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x4) r3 = accept$packet(r1, 0x0, &(0x7f00000003c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000440)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x7f, r4}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', r2, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) r5 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r5, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) capset(&(0x7f00000005c0), &(0x7f0000000600)={0x53f1, 0x8, 0xc230, 0xfffffeff, 0x9, 0x2}) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000640)) setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000680)={{0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x6}, {0xa, 0x4e20, 0x200, @rand_addr=' \x01\x00'}, 0x9f0, [0x3ff, 0x315a, 0x80000000, 0xffff, 0x3ff, 0x9, 0x6, 0x4]}, 0x5c) r6 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r6) 13:21:15 executing program 3: getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000bc0)) 13:21:15 executing program 4: ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f0000000000)={'\x00', 0x4d31343c, 0x3, 0x1000000}) r0 = syz_open_dev$vcsu(&(0x7f0000000080), 0xfff, 0x20001) ioctl$PTP_SYS_OFFSET_EXTENDED(r0, 0xc4c03d09, &(0x7f00000000c0)={0x6}) read$ptp(r0, &(0x7f0000000dc0)=""/71, 0x47) 13:21:22 executing program 2: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x40}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0xc0094) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r1, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7ff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7f}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x2000c051) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x4c, r2, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1eedc1aa}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x96b0}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x626}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004801) r3 = syz_open_dev$vcsa(&(0x7f0000000400), 0x800, 0x80080) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x8080) r4 = syz_open_dev$vcsa(&(0x7f0000000540), 0x800, 0x200000) write$cgroup_freezer_state(r4, &(0x7f0000000580)='FREEZING\x00', 0x9) socketpair(0x1, 0x3, 0x4, &(0x7f00000005c0)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000640)={'batadv0\x00', 0x0}) sendmsg$GTP_CMD_GETPDP(r5, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x54, 0x0, 0x401, 0x70bd27, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8, 0x1, r6}, @GTPA_FLOW={0x6}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_TID={0xc, 0x3, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x8000) syz_io_uring_complete(0x0) 13:21:22 executing program 6: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000000)={{{@in=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}}}, &(0x7f0000000100)=0xe8) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000140)={0x11, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0x5}, @pad1, @enc_lim={0x4, 0x1, 0x5d}, @jumbo, @jumbo={0xc2, 0x4, 0xc49}]}, 0x20) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x4e23, 0x8cb3, @remote, 0x57}, {0xa, 0x4e24, 0x19c, @ipv4={'\x00', '\xff\xff', @loopback}, 0xffff}, 0x9, [0x1ff, 0x7, 0x2, 0x6, 0x3ff, 0x10001, 0x7f, 0x1ff]}, 0x5c) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000200), &(0x7f0000000240)=0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000280)={0xff, {{0xa, 0x4e20, 0x40, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8000}}, {{0xa, 0x4e22, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x6}}}, 0x108) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, 0x0, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x1e}}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8044000) socketpair(0x25, 0xa, 0xbeb, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000540)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000004c0)="9ad9bbc0a641ca92cdb7e63a363442f585852b2028680300d9a35a8b3dea7a9d6897f66df61e0139312c9d9dddc3e416c69cb6ec1c1980", 0x37, r2}, 0x68) accept4$inet6(r1, 0x0, &(0x7f00000005c0), 0x80800) r3 = socket$inet6(0xa, 0x3, 0x80000001) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000680)={'ip6_vti0\x00', &(0x7f0000000600)={'ip6_vti0\x00', r0, 0x2f, 0x28, 0x2, 0x468, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast1, 0x10, 0x7800, 0x0, 0xfffffff9}}) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r3) 13:21:22 executing program 4: ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f0000000000)={'\x00', 0x4d31343c, 0x3, 0x1000000}) r0 = syz_open_dev$vcsu(&(0x7f0000000080), 0xfff, 0x20001) read$ptp(r0, &(0x7f0000000dc0)=""/71, 0x47) 13:21:22 executing program 3: getsockname$packet(0xffffffffffffffff, 0x0, 0x0) 13:21:22 executing program 5: setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e20, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xea8}, {0xa, 0x4e23, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0xf021}, 0x7, [0x5, 0xc8f, 0x2, 0xc86, 0x40, 0x80000000, 0xfffffff8, 0x3]}, 0x5c) r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x1c) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0xff}, {0xa, 0x4e22, 0x4, @empty, 0x2}, 0x0, [0x9, 0x57, 0x4, 0xfffffff9, 0x401, 0x7, 0xc4e9, 0x4]}, 0x5c) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000180)=@fragment={0x8, 0x0, 0x8, 0x1, 0x0, 0x6, 0x64}, 0x8) r1 = socket$inet6(0xa, 0x5, 0xfffffffd) r2 = accept$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000200)=0x1c) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') socket$inet6(0xa, 0xa, 0x1ff) pkey_alloc(0x0, 0x0) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000280)=0x1, 0x4) socket$inet6(0xa, 0x4, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x3, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}, 0x8000) setsockopt$inet6_group_source_req(r2, 0x29, 0x2c, &(0x7f0000000300)={0x6, {{0xa, 0x4e24, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8001}}, {{0xa, 0x4e20, 0x5, @mcast1, 0x4}}}, 0x108) syz_io_uring_complete(0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs2/custom1\x00', 0x6, 0x0) 13:21:22 executing program 7: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000000)={{{@in=@local, @in=@dev}}, {{@in6}}}, &(0x7f0000000100)=0xe8) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000140)={0x11, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0x5}, @pad1, @enc_lim={0x4, 0x1, 0x5d}, @jumbo, @jumbo={0xc2, 0x4, 0xc49}]}, 0x20) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x4e23, 0x8cb3, @remote, 0x57}, {0xa, 0x4e24, 0x19c, @ipv4={'\x00', '\xff\xff', @loopback}, 0xffff}, 0x9, [0x1ff, 0x7, 0x2, 0x6, 0x3ff, 0x10001, 0x7f, 0x1ff]}, 0x5c) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000200), &(0x7f0000000240)=0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000280)={0xff, {{0xa, 0x4e20, 0x40, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8000}}, {{0xa, 0x4e22, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x6}}}, 0x108) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, 0x0, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x1e}}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8044000) socketpair(0x25, 0xa, 0xbeb, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000540)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000004c0)="9ad9bbc0a641ca92cdb7e63a363442f585852b2028680300d9a35a8b3dea7a9d6897f66df61e0139312c9d9dddc3e416c69cb6ec1c1980", 0x37, r1}, 0x68) accept4$inet6(r0, 0x0, &(0x7f00000005c0), 0x80800) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) 13:21:22 executing program 0: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20, 0x7800, 0x99, 0x7fff}}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_TID={0xc}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x4) r3 = accept$packet(r1, 0x0, &(0x7f00000003c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000440)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x7f, r4}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', r2, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) r5 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r5, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) capset(&(0x7f00000005c0), &(0x7f0000000600)={0x53f1, 0x8, 0xc230, 0xfffffeff, 0x9, 0x2}) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000640)) setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000680)={{0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x6}, {0xa, 0x4e20, 0x200, @rand_addr=' \x01\x00'}, 0x9f0, [0x3ff, 0x315a, 0x80000000, 0xffff, 0x3ff, 0x9, 0x6, 0x4]}, 0x5c) r6 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r6) 13:21:22 executing program 1: ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(0xffffffffffffffff, 0xc0a85322, &(0x7f0000000000)) r0 = syz_open_dev$vcsa(&(0x7f0000000180), 0x1, 0x82) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x98, 0x7, 0x1c, 0x6, 0x0, 0x81, 0x101, 0x4, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x10120, 0x8, 0x1000, 0x2, 0x800, 0x258, 0x9, 0x0, 0xfffffffb, 0x0, 0x3}, 0x0, 0x3, r0, 0x9) syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), 0xffffffffffffffff) r2 = getpid() r3 = fork() openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) wait4(r2, &(0x7f0000000240), 0x80000000, &(0x7f0000000280)) r4 = openat$cgroup_freezer_state(r0, &(0x7f0000000340), 0x2, 0x0) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r4, &(0x7f0000000380)={r0, r1, 0x6}) io_uring_setup(0xca2, &(0x7f00000003c0)={0x0, 0x6132, 0x20, 0x3, 0x289, 0x0, r0}) r5 = accept4$inet6(r0, &(0x7f0000000440)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000480)=0x1c, 0x80800) setsockopt$inet6_group_source_req(r5, 0x29, 0x2b, &(0x7f00000004c0)={0x7f, {{0xa, 0x4e20, 0xfffffff9, @mcast2}}, {{0xa, 0x4e24, 0x111a564c, @local, 0x4}}}, 0x108) syz_open_dev$vcsa(&(0x7f0000000600), 0x193, 0x80) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000800)={'ip6_vti0\x00', &(0x7f0000000780)={'ip6tnl0\x00', 0x0, 0x4, 0x5, 0x5, 0x7, 0x20, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8000, 0x40, 0x3ab0, 0xcee0}}) 13:21:30 executing program 4: ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f0000000000)={'\x00', 0x4d31343c, 0x3, 0x1000000}) read$ptp(0xffffffffffffffff, &(0x7f0000000dc0)=""/71, 0x47) 13:21:30 executing program 1: ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(0xffffffffffffffff, 0xc0a85322, &(0x7f0000000000)) r0 = syz_open_dev$vcsa(&(0x7f0000000180), 0x1, 0x82) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x98, 0x7, 0x1c, 0x6, 0x0, 0x81, 0x101, 0x4, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x10120, 0x8, 0x1000, 0x2, 0x800, 0x258, 0x9, 0x0, 0xfffffffb, 0x0, 0x3}, 0x0, 0x3, r0, 0x9) syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), 0xffffffffffffffff) r2 = getpid() r3 = fork() openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) wait4(r2, &(0x7f0000000240), 0x80000000, &(0x7f0000000280)) r4 = openat$cgroup_freezer_state(r0, &(0x7f0000000340), 0x2, 0x0) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r4, &(0x7f0000000380)={r0, r1, 0x6}) io_uring_setup(0xca2, &(0x7f00000003c0)={0x0, 0x6132, 0x20, 0x3, 0x289, 0x0, r0}) r5 = accept4$inet6(r0, &(0x7f0000000440)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000480)=0x1c, 0x80800) setsockopt$inet6_group_source_req(r5, 0x29, 0x2b, &(0x7f00000004c0)={0x7f, {{0xa, 0x4e20, 0xfffffff9, @mcast2}}, {{0xa, 0x4e24, 0x111a564c, @local, 0x4}}}, 0x108) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000800)={'ip6_vti0\x00', &(0x7f0000000780)={'ip6tnl0\x00', 0x0, 0x4, 0x5, 0x5, 0x7, 0x20, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8000, 0x40, 0x3ab0, 0xcee0}}) 13:21:30 executing program 7: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000000)={{{@in=@local, @in=@dev}}, {{@in6}}}, &(0x7f0000000100)=0xe8) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000140)={0x11, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0x5}, @pad1, @enc_lim={0x4, 0x1, 0x5d}, @jumbo, @jumbo={0xc2, 0x4, 0xc49}]}, 0x20) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x4e23, 0x8cb3, @remote, 0x57}, {0xa, 0x4e24, 0x19c, @ipv4={'\x00', '\xff\xff', @loopback}, 0xffff}, 0x9, [0x1ff, 0x7, 0x2, 0x6, 0x3ff, 0x10001, 0x7f, 0x1ff]}, 0x5c) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000200), &(0x7f0000000240)=0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000280)={0xff, {{0xa, 0x4e20, 0x40, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8000}}, {{0xa, 0x4e22, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x6}}}, 0x108) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, 0x0, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x1e}}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8044000) socketpair(0x25, 0xa, 0xbeb, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000540)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000004c0)="9ad9bbc0a641ca92cdb7e63a363442f585852b2028680300d9a35a8b3dea7a9d6897f66df61e0139312c9d9dddc3e416c69cb6ec1c1980", 0x37, r1}, 0x68) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) 13:21:30 executing program 5: setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e20, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xea8}, {0xa, 0x4e23, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0xf021}, 0x7, [0x5, 0xc8f, 0x2, 0xc86, 0x40, 0x80000000, 0xfffffff8, 0x3]}, 0x5c) r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x1c) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0xff}, {0xa, 0x4e22, 0x4, @empty, 0x2}, 0x0, [0x9, 0x57, 0x4, 0xfffffff9, 0x401, 0x7, 0xc4e9, 0x4]}, 0x5c) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000180)=@fragment={0x8, 0x0, 0x8, 0x1, 0x0, 0x6, 0x64}, 0x8) r1 = socket$inet6(0xa, 0x5, 0xfffffffd) r2 = accept$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000200)=0x1c) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') socket$inet6(0xa, 0xa, 0x1ff) pkey_alloc(0x0, 0x0) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000280)=0x1, 0x4) socket$inet6(0xa, 0x4, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x3, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}, 0x8000) syz_open_dev$vcsa(&(0x7f0000000440), 0x8, 0xd0000) syz_io_uring_complete(0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs2/custom1\x00', 0x6, 0x0) 13:21:30 executing program 3: setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e20, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xea8}, {0xa, 0x4e23, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0xf021}, 0x7, [0x5, 0xc8f, 0x2, 0xc86, 0x40, 0x80000000, 0xfffffff8, 0x3]}, 0x5c) r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x1c) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0xff}, {0xa, 0x4e22, 0x4, @empty, 0x2}, 0x0, [0x9, 0x57, 0x4, 0xfffffff9, 0x401, 0x7, 0xc4e9, 0x4]}, 0x5c) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000180)=@fragment={0x8, 0x0, 0x8, 0x1, 0x0, 0x6, 0x64}, 0x8) r1 = socket$inet6(0xa, 0x5, 0xfffffffd) r2 = accept$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000200)=0x1c) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') socket$inet6(0xa, 0xa, 0x1ff) pkey_alloc(0x0, 0x0) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000280)=0x1, 0x4) socket$inet6(0xa, 0x4, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x3, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}, 0x8000) setsockopt$inet6_group_source_req(r2, 0x29, 0x2c, &(0x7f0000000300)={0x6, {{0xa, 0x4e24, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8001}}, {{0xa, 0x4e20, 0x5, @mcast1, 0x4}}}, 0x108) syz_io_uring_complete(0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs2/custom1\x00', 0x6, 0x0) 13:21:30 executing program 0: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20, 0x7800, 0x99, 0x7fff}}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_TID={0xc}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x4) r3 = accept$packet(r1, 0x0, &(0x7f00000003c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000440)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x7f, r4}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', r2, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) r5 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r5, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) capset(&(0x7f00000005c0), &(0x7f0000000600)={0x53f1, 0x8, 0xc230, 0xfffffeff, 0x9, 0x2}) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000640)) setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000680)={{0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x6}, {0xa, 0x4e20, 0x200, @rand_addr=' \x01\x00'}, 0x9f0, [0x3ff, 0x315a, 0x80000000, 0xffff, 0x3ff, 0x9, 0x6, 0x4]}, 0x5c) r6 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r6) 13:21:30 executing program 6: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000000)={{{@in=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}}}, &(0x7f0000000100)=0xe8) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000140)={0x11, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0x5}, @pad1, @enc_lim={0x4, 0x1, 0x5d}, @jumbo, @jumbo={0xc2, 0x4, 0xc49}]}, 0x20) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x4e23, 0x8cb3, @remote, 0x57}, {0xa, 0x4e24, 0x19c, @ipv4={'\x00', '\xff\xff', @loopback}, 0xffff}, 0x9, [0x1ff, 0x7, 0x2, 0x6, 0x3ff, 0x10001, 0x7f, 0x1ff]}, 0x5c) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000200), &(0x7f0000000240)=0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000280)={0xff, {{0xa, 0x4e20, 0x40, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8000}}, {{0xa, 0x4e22, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x6}}}, 0x108) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, 0x0, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x1e}}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8044000) socketpair(0x25, 0xa, 0xbeb, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000540)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000004c0)="9ad9bbc0a641ca92cdb7e63a363442f585852b2028680300d9a35a8b3dea7a9d6897f66df61e0139312c9d9dddc3e416c69cb6ec1c1980", 0x37, r2}, 0x68) accept4$inet6(r1, 0x0, &(0x7f00000005c0), 0x80800) r3 = socket$inet6(0xa, 0x3, 0x80000001) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000680)={'ip6_vti0\x00', &(0x7f0000000600)={'ip6_vti0\x00', r0, 0x2f, 0x28, 0x2, 0x468, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast1, 0x10, 0x7800, 0x0, 0xfffffff9}}) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r3) 13:21:30 executing program 2: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x40}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0xc0094) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r1, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7ff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7f}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x2000c051) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x4c, r2, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1eedc1aa}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x96b0}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x626}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004801) r3 = syz_open_dev$vcsa(&(0x7f0000000400), 0x800, 0x80080) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x8080) r4 = syz_open_dev$vcsa(&(0x7f0000000540), 0x800, 0x200000) write$cgroup_freezer_state(r4, &(0x7f0000000580)='FREEZING\x00', 0x9) socketpair(0x1, 0x3, 0x4, &(0x7f00000005c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000640)) syz_io_uring_complete(0x0) 13:21:30 executing program 4: ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f0000000000)={'\x00', 0x4d31343c, 0x3, 0x1000000}) read$ptp(0xffffffffffffffff, &(0x7f0000000dc0)=""/71, 0x47) 13:21:30 executing program 6: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000000)={{{@in=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}}}, &(0x7f0000000100)=0xe8) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000140)={0x11, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0x5}, @pad1, @enc_lim={0x4, 0x1, 0x5d}, @jumbo, @jumbo={0xc2, 0x4, 0xc49}]}, 0x20) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x4e23, 0x8cb3, @remote, 0x57}, {0xa, 0x4e24, 0x19c, @ipv4={'\x00', '\xff\xff', @loopback}, 0xffff}, 0x9, [0x1ff, 0x7, 0x2, 0x6, 0x3ff, 0x10001, 0x7f, 0x1ff]}, 0x5c) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000200), &(0x7f0000000240)=0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000280)={0xff, {{0xa, 0x4e20, 0x40, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8000}}, {{0xa, 0x4e22, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x6}}}, 0x108) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, 0x0, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x1e}}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8044000) socketpair(0x25, 0xa, 0xbeb, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000540)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000004c0)="9ad9bbc0a641ca92cdb7e63a363442f585852b2028680300d9a35a8b3dea7a9d6897f66df61e0139312c9d9dddc3e416c69cb6ec1c1980", 0x37, r2}, 0x68) accept4$inet6(r1, 0x0, &(0x7f00000005c0), 0x80800) r3 = socket$inet6(0xa, 0x3, 0x80000001) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000680)={'ip6_vti0\x00', &(0x7f0000000600)={'ip6_vti0\x00', r0, 0x2f, 0x28, 0x2, 0x468, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast1, 0x10, 0x7800, 0x0, 0xfffffff9}}) 13:21:30 executing program 4: ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f0000000000)={'\x00', 0x4d31343c, 0x3, 0x1000000}) read$ptp(0xffffffffffffffff, &(0x7f0000000dc0)=""/71, 0x47) 13:21:30 executing program 3: setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e20, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xea8}, {0xa, 0x4e23, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0xf021}, 0x7, [0x5, 0xc8f, 0x2, 0xc86, 0x40, 0x80000000, 0xfffffff8, 0x3]}, 0x5c) r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x1c) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0xff}, {0xa, 0x4e22, 0x4, @empty, 0x2}, 0x0, [0x9, 0x57, 0x4, 0xfffffff9, 0x401, 0x7, 0xc4e9, 0x4]}, 0x5c) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000180)=@fragment={0x8, 0x0, 0x8, 0x1, 0x0, 0x6, 0x64}, 0x8) r1 = socket$inet6(0xa, 0x5, 0xfffffffd) r2 = accept$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000200)=0x1c) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') socket$inet6(0xa, 0xa, 0x1ff) pkey_alloc(0x0, 0x0) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000280)=0x1, 0x4) socket$inet6(0xa, 0x4, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x3, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}, 0x8000) setsockopt$inet6_group_source_req(r2, 0x29, 0x2c, &(0x7f0000000300)={0x6, {{0xa, 0x4e24, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8001}}, {{0xa, 0x4e20, 0x5, @mcast1, 0x4}}}, 0x108) syz_io_uring_complete(0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs2/custom1\x00', 0x6, 0x0) 13:21:30 executing program 1: ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(0xffffffffffffffff, 0xc0a85322, &(0x7f0000000000)) r0 = syz_open_dev$vcsa(&(0x7f0000000180), 0x1, 0x82) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x98, 0x7, 0x1c, 0x6, 0x0, 0x81, 0x101, 0x4, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x10120, 0x8, 0x1000, 0x2, 0x800, 0x258, 0x9, 0x0, 0xfffffffb, 0x0, 0x3}, 0x0, 0x3, r0, 0x9) syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), 0xffffffffffffffff) r2 = getpid() r3 = fork() openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) wait4(r2, &(0x7f0000000240), 0x80000000, &(0x7f0000000280)) r4 = openat$cgroup_freezer_state(r0, &(0x7f0000000340), 0x2, 0x0) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r4, &(0x7f0000000380)={r0, r1, 0x6}) io_uring_setup(0xca2, &(0x7f00000003c0)={0x0, 0x6132, 0x20, 0x3, 0x289, 0x0, r0}) accept4$inet6(r0, &(0x7f0000000440)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000480)=0x1c, 0x80800) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000800)={'ip6_vti0\x00', &(0x7f0000000780)={'ip6tnl0\x00', 0x0, 0x4, 0x5, 0x5, 0x7, 0x20, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8000, 0x40, 0x3ab0, 0xcee0}}) 13:21:30 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000080), 0xfff, 0x20001) read$ptp(r0, &(0x7f0000000dc0)=""/71, 0x47) 13:21:30 executing program 7: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000000)={{{@in=@local, @in=@dev}}, {{@in6}}}, &(0x7f0000000100)=0xe8) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000140)={0x11, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0x5}, @pad1, @enc_lim={0x4, 0x1, 0x5d}, @jumbo, @jumbo={0xc2, 0x4, 0xc49}]}, 0x20) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x4e23, 0x8cb3, @remote, 0x57}, {0xa, 0x4e24, 0x19c, @ipv4={'\x00', '\xff\xff', @loopback}, 0xffff}, 0x9, [0x1ff, 0x7, 0x2, 0x6, 0x3ff, 0x10001, 0x7f, 0x1ff]}, 0x5c) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000200), &(0x7f0000000240)=0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000280)={0xff, {{0xa, 0x4e20, 0x40, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8000}}, {{0xa, 0x4e22, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x6}}}, 0x108) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, 0x0, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x1e}}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8044000) socketpair(0x25, 0xa, 0xbeb, &(0x7f0000000500)) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) 13:21:30 executing program 6: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000000)={{{@in=@local, @in=@dev}}, {{@in6}}}, &(0x7f0000000100)=0xe8) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000140)={0x11, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0x5}, @pad1, @enc_lim={0x4, 0x1, 0x5d}, @jumbo, @jumbo={0xc2, 0x4, 0xc49}]}, 0x20) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x4e23, 0x8cb3, @remote, 0x57}, {0xa, 0x4e24, 0x19c, @ipv4={'\x00', '\xff\xff', @loopback}, 0xffff}, 0x9, [0x1ff, 0x7, 0x2, 0x6, 0x3ff, 0x10001, 0x7f, 0x1ff]}, 0x5c) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000200), &(0x7f0000000240)=0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000280)={0xff, {{0xa, 0x4e20, 0x40, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8000}}, {{0xa, 0x4e22, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x6}}}, 0x108) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, 0x0, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x1e}}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8044000) socketpair(0x25, 0xa, 0xbeb, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000540)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000004c0)="9ad9bbc0a641ca92cdb7e63a363442f585852b2028680300d9a35a8b3dea7a9d6897f66df61e0139312c9d9dddc3e416c69cb6ec1c1980", 0x37, r1}, 0x68) accept4$inet6(r0, 0x0, &(0x7f00000005c0), 0x80800) socket$inet6(0xa, 0x3, 0x80000001) 13:21:30 executing program 0: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20, 0x7800, 0x99, 0x7fff}}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_TID={0xc}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x4) r3 = accept$packet(r1, 0x0, &(0x7f00000003c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000440)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x7f, r4}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', r2, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) r5 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r5, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) capset(&(0x7f00000005c0), &(0x7f0000000600)={0x53f1, 0x8, 0xc230, 0xfffffeff, 0x9, 0x2}) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000640)) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) r6 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r6) 13:21:30 executing program 2: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x40}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0xc0094) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r1, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7ff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7f}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x2000c051) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x4c, r2, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1eedc1aa}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x96b0}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x626}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004801) r3 = syz_open_dev$vcsa(&(0x7f0000000400), 0x800, 0x80080) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x8080) r4 = syz_open_dev$vcsa(&(0x7f0000000540), 0x800, 0x200000) write$cgroup_freezer_state(r4, &(0x7f0000000580)='FREEZING\x00', 0x9) socketpair(0x1, 0x3, 0x4, &(0x7f00000005c0)) syz_io_uring_complete(0x0) 13:21:30 executing program 4: r0 = syz_open_dev$vcsu(0x0, 0xfff, 0x20001) read$ptp(r0, &(0x7f0000000dc0)=""/71, 0x47) 13:21:31 executing program 7: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000000)={{{@in=@local, @in=@dev}}, {{@in6}}}, &(0x7f0000000100)=0xe8) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000140)={0x11, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0x5}, @pad1, @enc_lim={0x4, 0x1, 0x5d}, @jumbo, @jumbo={0xc2, 0x4, 0xc49}]}, 0x20) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x4e23, 0x8cb3, @remote, 0x57}, {0xa, 0x4e24, 0x19c, @ipv4={'\x00', '\xff\xff', @loopback}, 0xffff}, 0x9, [0x1ff, 0x7, 0x2, 0x6, 0x3ff, 0x10001, 0x7f, 0x1ff]}, 0x5c) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000200), &(0x7f0000000240)=0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000280)={0xff, {{0xa, 0x4e20, 0x40, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8000}}, {{0xa, 0x4e22, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x6}}}, 0x108) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, 0x0, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x1e}}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8044000) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) 13:21:31 executing program 5: setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e20, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xea8}, {0xa, 0x4e23, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0xf021}, 0x7, [0x5, 0xc8f, 0x2, 0xc86, 0x40, 0x80000000, 0xfffffff8, 0x3]}, 0x5c) r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x1c) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0xff}, {0xa, 0x4e22, 0x4, @empty, 0x2}, 0x0, [0x9, 0x57, 0x4, 0xfffffff9, 0x401, 0x7, 0xc4e9, 0x4]}, 0x5c) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000180)=@fragment={0x8, 0x0, 0x8, 0x1, 0x0, 0x6, 0x64}, 0x8) r1 = socket$inet6(0xa, 0x5, 0xfffffffd) r2 = accept$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000200)=0x1c) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') socket$inet6(0xa, 0xa, 0x1ff) pkey_alloc(0x0, 0x0) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000280)=0x1, 0x4) socket$inet6(0xa, 0x4, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x3, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}, 0x8000) syz_open_dev$vcsa(&(0x7f0000000440), 0x8, 0xd0000) syz_io_uring_complete(0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs2/custom1\x00', 0x6, 0x0) 13:21:31 executing program 4: r0 = syz_open_dev$vcsu(0x0, 0xfff, 0x20001) read$ptp(r0, &(0x7f0000000dc0)=""/71, 0x47) 13:21:31 executing program 6: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000000)={{{@in=@local, @in=@dev}}, {{@in6}}}, &(0x7f0000000100)=0xe8) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000140)={0x11, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0x5}, @pad1, @enc_lim={0x4, 0x1, 0x5d}, @jumbo, @jumbo={0xc2, 0x4, 0xc49}]}, 0x20) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x4e23, 0x8cb3, @remote, 0x57}, {0xa, 0x4e24, 0x19c, @ipv4={'\x00', '\xff\xff', @loopback}, 0xffff}, 0x9, [0x1ff, 0x7, 0x2, 0x6, 0x3ff, 0x10001, 0x7f, 0x1ff]}, 0x5c) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000200), &(0x7f0000000240)=0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000280)={0xff, {{0xa, 0x4e20, 0x40, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8000}}, {{0xa, 0x4e22, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x6}}}, 0x108) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, 0x0, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x1e}}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8044000) socketpair(0x25, 0xa, 0xbeb, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000540)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000004c0)="9ad9bbc0a641ca92cdb7e63a363442f585852b2028680300d9a35a8b3dea7a9d6897f66df61e0139312c9d9dddc3e416c69cb6ec1c1980", 0x37, r1}, 0x68) accept4$inet6(r0, 0x0, &(0x7f00000005c0), 0x80800) 13:21:39 executing program 4: r0 = syz_open_dev$vcsu(0x0, 0xfff, 0x20001) read$ptp(r0, &(0x7f0000000dc0)=""/71, 0x47) 13:21:39 executing program 3: setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e20, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xea8}, {0xa, 0x4e23, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0xf021}, 0x7, [0x5, 0xc8f, 0x2, 0xc86, 0x40, 0x80000000, 0xfffffff8, 0x3]}, 0x5c) r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x1c) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0xff}, {0xa, 0x4e22, 0x4, @empty, 0x2}, 0x0, [0x9, 0x57, 0x4, 0xfffffff9, 0x401, 0x7, 0xc4e9, 0x4]}, 0x5c) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000180)=@fragment={0x8, 0x0, 0x8, 0x1, 0x0, 0x6, 0x64}, 0x8) r1 = socket$inet6(0xa, 0x5, 0xfffffffd) r2 = accept$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000200)=0x1c) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') socket$inet6(0xa, 0xa, 0x1ff) pkey_alloc(0x0, 0x0) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000280)=0x1, 0x4) socket$inet6(0xa, 0x4, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x3, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}, 0x8000) setsockopt$inet6_group_source_req(r2, 0x29, 0x2c, &(0x7f0000000300)={0x6, {{0xa, 0x4e24, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8001}}, {{0xa, 0x4e20, 0x5, @mcast1, 0x4}}}, 0x108) syz_io_uring_complete(0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs2/custom1\x00', 0x6, 0x0) 13:21:39 executing program 2: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x40}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0xc0094) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r1, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7ff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7f}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x2000c051) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x4c, r2, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1eedc1aa}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x96b0}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x626}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004801) r3 = syz_open_dev$vcsa(&(0x7f0000000400), 0x800, 0x80080) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x8080) r4 = syz_open_dev$vcsa(&(0x7f0000000540), 0x800, 0x200000) write$cgroup_freezer_state(r4, &(0x7f0000000580)='FREEZING\x00', 0x9) syz_io_uring_complete(0x0) 13:21:39 executing program 5: setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e20, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xea8}, {0xa, 0x4e23, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0xf021}, 0x7, [0x5, 0xc8f, 0x2, 0xc86, 0x40, 0x80000000, 0xfffffff8, 0x3]}, 0x5c) r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x1c) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0xff}, {0xa, 0x4e22, 0x4, @empty, 0x2}, 0x0, [0x9, 0x57, 0x4, 0xfffffff9, 0x401, 0x7, 0xc4e9, 0x4]}, 0x5c) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000180)=@fragment={0x8, 0x0, 0x8, 0x1, 0x0, 0x6, 0x64}, 0x8) r1 = socket$inet6(0xa, 0x5, 0xfffffffd) r2 = accept$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000200)=0x1c) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') socket$inet6(0xa, 0xa, 0x1ff) pkey_alloc(0x0, 0x0) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000280)=0x1, 0x4) socket$inet6(0xa, 0x4, 0x20) syz_open_dev$vcsa(&(0x7f0000000440), 0x8, 0xd0000) syz_io_uring_complete(0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs2/custom1\x00', 0x6, 0x0) 13:21:39 executing program 1: ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(0xffffffffffffffff, 0xc0a85322, &(0x7f0000000000)) r0 = syz_open_dev$vcsa(&(0x7f0000000180), 0x1, 0x82) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x98, 0x7, 0x1c, 0x6, 0x0, 0x81, 0x101, 0x4, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x10120, 0x8, 0x1000, 0x2, 0x800, 0x258, 0x9, 0x0, 0xfffffffb, 0x0, 0x3}, 0x0, 0x3, r0, 0x9) syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), 0xffffffffffffffff) r2 = getpid() r3 = fork() openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) wait4(r2, &(0x7f0000000240), 0x80000000, &(0x7f0000000280)) r4 = openat$cgroup_freezer_state(r0, &(0x7f0000000340), 0x2, 0x0) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r4, &(0x7f0000000380)={r0, r1, 0x6}) io_uring_setup(0xca2, &(0x7f00000003c0)={0x0, 0x6132, 0x20, 0x3, 0x289, 0x0, r0}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000800)={'ip6_vti0\x00', &(0x7f0000000780)={'ip6tnl0\x00', 0x0, 0x4, 0x5, 0x5, 0x7, 0x20, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8000, 0x40, 0x3ab0, 0xcee0}}) 13:21:39 executing program 6: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000000)={{{@in=@local, @in=@dev}}, {{@in6}}}, &(0x7f0000000100)=0xe8) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000140)={0x11, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0x5}, @pad1, @enc_lim={0x4, 0x1, 0x5d}, @jumbo, @jumbo={0xc2, 0x4, 0xc49}]}, 0x20) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x4e23, 0x8cb3, @remote, 0x57}, {0xa, 0x4e24, 0x19c, @ipv4={'\x00', '\xff\xff', @loopback}, 0xffff}, 0x9, [0x1ff, 0x7, 0x2, 0x6, 0x3ff, 0x10001, 0x7f, 0x1ff]}, 0x5c) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000200), &(0x7f0000000240)=0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000280)={0xff, {{0xa, 0x4e20, 0x40, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8000}}, {{0xa, 0x4e22, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x6}}}, 0x108) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, 0x0, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x1e}}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8044000) socketpair(0x25, 0xa, 0xbeb, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000540)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000004c0)="9ad9bbc0a641ca92cdb7e63a363442f585852b2028680300d9a35a8b3dea7a9d6897f66df61e0139312c9d9dddc3e416c69cb6ec1c1980", 0x37, r1}, 0x68) accept4$inet6(r0, 0x0, &(0x7f00000005c0), 0x80800) 13:21:39 executing program 0: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20, 0x7800, 0x99, 0x7fff}}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_TID={0xc}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x4) r3 = accept$packet(r1, 0x0, &(0x7f00000003c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000440)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x7f, r4}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', r2, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) r5 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r5, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) capset(&(0x7f00000005c0), &(0x7f0000000600)={0x53f1, 0x8, 0xc230, 0xfffffeff, 0x9, 0x2}) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000640)) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) r6 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r6) 13:21:39 executing program 7: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000000)={{{@in=@local, @in=@dev}}, {{@in6}}}, &(0x7f0000000100)=0xe8) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000140)={0x11, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0x5}, @pad1, @enc_lim={0x4, 0x1, 0x5d}, @jumbo, @jumbo={0xc2, 0x4, 0xc49}]}, 0x20) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x4e23, 0x8cb3, @remote, 0x57}, {0xa, 0x4e24, 0x19c, @ipv4={'\x00', '\xff\xff', @loopback}, 0xffff}, 0x9, [0x1ff, 0x7, 0x2, 0x6, 0x3ff, 0x10001, 0x7f, 0x1ff]}, 0x5c) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000200), &(0x7f0000000240)=0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000280)={0xff, {{0xa, 0x4e20, 0x40, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8000}}, {{0xa, 0x4e22, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x6}}}, 0x108) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) 13:21:39 executing program 6: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000000)={{{@in=@local, @in=@dev}}, {{@in6}}}, &(0x7f0000000100)=0xe8) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000140)={0x11, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0x5}, @pad1, @enc_lim={0x4, 0x1, 0x5d}, @jumbo, @jumbo={0xc2, 0x4, 0xc49}]}, 0x20) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x4e23, 0x8cb3, @remote, 0x57}, {0xa, 0x4e24, 0x19c, @ipv4={'\x00', '\xff\xff', @loopback}, 0xffff}, 0x9, [0x1ff, 0x7, 0x2, 0x6, 0x3ff, 0x10001, 0x7f, 0x1ff]}, 0x5c) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000200), &(0x7f0000000240)=0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000280)={0xff, {{0xa, 0x4e20, 0x40, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8000}}, {{0xa, 0x4e22, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x6}}}, 0x108) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, 0x0, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x1e}}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8044000) socketpair(0x25, 0xa, 0xbeb, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000540)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000004c0)="9ad9bbc0a641ca92cdb7e63a363442f585852b2028680300d9a35a8b3dea7a9d6897f66df61e0139312c9d9dddc3e416c69cb6ec1c1980", 0x37, r1}, 0x68) accept4$inet6(r0, 0x0, &(0x7f00000005c0), 0x80800) 13:21:39 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000080), 0x0, 0x20001) read$ptp(r0, &(0x7f0000000dc0)=""/71, 0x47) 13:21:39 executing program 5: setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e20, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xea8}, {0xa, 0x4e23, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0xf021}, 0x7, [0x5, 0xc8f, 0x2, 0xc86, 0x40, 0x80000000, 0xfffffff8, 0x3]}, 0x5c) r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x1c) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0xff}, {0xa, 0x4e22, 0x4, @empty, 0x2}, 0x0, [0x9, 0x57, 0x4, 0xfffffff9, 0x401, 0x7, 0xc4e9, 0x4]}, 0x5c) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000180)=@fragment={0x8, 0x0, 0x8, 0x1, 0x0, 0x6, 0x64}, 0x8) r1 = socket$inet6(0xa, 0x5, 0xfffffffd) r2 = accept$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000200)=0x1c) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') socket$inet6(0xa, 0xa, 0x1ff) pkey_alloc(0x0, 0x0) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000280)=0x1, 0x4) syz_open_dev$vcsa(&(0x7f0000000440), 0x8, 0xd0000) syz_io_uring_complete(0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs2/custom1\x00', 0x6, 0x0) 13:21:39 executing program 7: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000000)={{{@in=@local, @in=@dev}}, {{@in6}}}, &(0x7f0000000100)=0xe8) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000140)={0x11, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0x5}, @pad1, @enc_lim={0x4, 0x1, 0x5d}, @jumbo, @jumbo={0xc2, 0x4, 0xc49}]}, 0x20) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x4e23, 0x8cb3, @remote, 0x57}, {0xa, 0x4e24, 0x19c, @ipv4={'\x00', '\xff\xff', @loopback}, 0xffff}, 0x9, [0x1ff, 0x7, 0x2, 0x6, 0x3ff, 0x10001, 0x7f, 0x1ff]}, 0x5c) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000200), &(0x7f0000000240)=0x4) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) [ 179.743605] Bluetooth: hci3: command 0x0406 tx timeout [ 179.744551] Bluetooth: hci0: command 0x0406 tx timeout [ 179.745402] Bluetooth: hci5: command 0x0406 tx timeout [ 179.745552] Bluetooth: hci4: command 0x0406 tx timeout [ 179.746209] Bluetooth: hci1: command 0x0406 tx timeout [ 179.747961] Bluetooth: hci2: command 0x0406 tx timeout [ 179.748601] Bluetooth: hci7: command 0x0406 tx timeout [ 179.748766] Bluetooth: hci6: command 0x0406 tx timeout 13:21:48 executing program 7: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000000)={{{@in=@local, @in=@dev}}, {{@in6}}}, &(0x7f0000000100)=0xe8) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000140)={0x11, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0x5}, @pad1, @enc_lim={0x4, 0x1, 0x5d}, @jumbo, @jumbo={0xc2, 0x4, 0xc49}]}, 0x20) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x4e23, 0x8cb3, @remote, 0x57}, {0xa, 0x4e24, 0x19c, @ipv4={'\x00', '\xff\xff', @loopback}, 0xffff}, 0x9, [0x1ff, 0x7, 0x2, 0x6, 0x3ff, 0x10001, 0x7f, 0x1ff]}, 0x5c) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000200), &(0x7f0000000240)=0x4) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) 13:21:48 executing program 1: ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(0xffffffffffffffff, 0xc0a85322, &(0x7f0000000000)) r0 = syz_open_dev$vcsa(&(0x7f0000000180), 0x1, 0x82) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x98, 0x7, 0x1c, 0x6, 0x0, 0x81, 0x101, 0x4, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x10120, 0x8, 0x1000, 0x2, 0x800, 0x258, 0x9, 0x0, 0xfffffffb, 0x0, 0x3}, 0x0, 0x3, r0, 0x9) syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), 0xffffffffffffffff) r2 = getpid() r3 = fork() openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) wait4(r2, &(0x7f0000000240), 0x80000000, &(0x7f0000000280)) r4 = openat$cgroup_freezer_state(r0, &(0x7f0000000340), 0x2, 0x0) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r4, &(0x7f0000000380)={r0, r1, 0x6}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000800)={'ip6_vti0\x00', &(0x7f0000000780)={'ip6tnl0\x00', 0x0, 0x4, 0x5, 0x5, 0x7, 0x20, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8000, 0x40, 0x3ab0, 0xcee0}}) 13:21:48 executing program 5: setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e20, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xea8}, {0xa, 0x4e23, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0xf021}, 0x7, [0x5, 0xc8f, 0x2, 0xc86, 0x40, 0x80000000, 0xfffffff8, 0x3]}, 0x5c) r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x1c) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0xff}, {0xa, 0x4e22, 0x4, @empty, 0x2}, 0x0, [0x9, 0x57, 0x4, 0xfffffff9, 0x401, 0x7, 0xc4e9, 0x4]}, 0x5c) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000180)=@fragment={0x8, 0x0, 0x8, 0x1, 0x0, 0x6, 0x64}, 0x8) r1 = socket$inet6(0xa, 0x5, 0xfffffffd) accept$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000200)=0x1c) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') socket$inet6(0xa, 0xa, 0x1ff) pkey_alloc(0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000440), 0x8, 0xd0000) syz_io_uring_complete(0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs2/custom1\x00', 0x6, 0x0) 13:21:48 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000080), 0x0, 0x20001) read$ptp(r0, &(0x7f0000000dc0)=""/71, 0x47) 13:21:48 executing program 2: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x40}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0xc0094) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r1, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7ff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7f}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x2000c051) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x4c, r2, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1eedc1aa}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x96b0}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x626}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004801) r3 = syz_open_dev$vcsa(&(0x7f0000000400), 0x800, 0x80080) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x8080) syz_open_dev$vcsa(&(0x7f0000000540), 0x800, 0x200000) syz_io_uring_complete(0x0) 13:21:48 executing program 3: setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e20, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xea8}, {0xa, 0x4e23, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0xf021}, 0x7, [0x5, 0xc8f, 0x2, 0xc86, 0x40, 0x80000000, 0xfffffff8, 0x3]}, 0x5c) r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x1c) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0xff}, {0xa, 0x4e22, 0x4, @empty, 0x2}, 0x0, [0x9, 0x57, 0x4, 0xfffffff9, 0x401, 0x7, 0xc4e9, 0x4]}, 0x5c) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000180)=@fragment={0x8, 0x0, 0x8, 0x1, 0x0, 0x6, 0x64}, 0x8) r1 = socket$inet6(0xa, 0x5, 0xfffffffd) r2 = accept$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000200)=0x1c) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') socket$inet6(0xa, 0xa, 0x1ff) pkey_alloc(0x0, 0x0) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000280)=0x1, 0x4) socket$inet6(0xa, 0x4, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x3, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}, 0x8000) setsockopt$inet6_group_source_req(r2, 0x29, 0x2c, &(0x7f0000000300)={0x6, {{0xa, 0x4e24, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8001}}, {{0xa, 0x4e20, 0x5, @mcast1, 0x4}}}, 0x108) syz_io_uring_complete(0x0) 13:21:48 executing program 0: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20, 0x7800, 0x99, 0x7fff}}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_TID={0xc}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x4) r3 = accept$packet(r1, 0x0, &(0x7f00000003c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000440)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x7f, r4}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', r2, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) r5 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r5, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) capset(&(0x7f00000005c0), &(0x7f0000000600)={0x53f1, 0x8, 0xc230, 0xfffffeff, 0x9, 0x2}) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) r6 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r6) 13:21:48 executing program 6: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000000)={{{@in=@local, @in=@dev}}, {{@in6}}}, &(0x7f0000000100)=0xe8) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000140)={0x11, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0x5}, @pad1, @enc_lim={0x4, 0x1, 0x5d}, @jumbo, @jumbo={0xc2, 0x4, 0xc49}]}, 0x20) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x4e23, 0x8cb3, @remote, 0x57}, {0xa, 0x4e24, 0x19c, @ipv4={'\x00', '\xff\xff', @loopback}, 0xffff}, 0x9, [0x1ff, 0x7, 0x2, 0x6, 0x3ff, 0x10001, 0x7f, 0x1ff]}, 0x5c) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000200), &(0x7f0000000240)=0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000280)={0xff, {{0xa, 0x4e20, 0x40, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8000}}, {{0xa, 0x4e22, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x6}}}, 0x108) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, 0x0, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x1e}}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8044000) socketpair(0x25, 0xa, 0xbeb, &(0x7f0000000500)) accept4$inet6(r0, 0x0, &(0x7f00000005c0), 0x80800) socket$inet6(0xa, 0x3, 0x80000001) 13:21:48 executing program 6: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000000)={{{@in=@local, @in=@dev}}, {{@in6}}}, &(0x7f0000000100)=0xe8) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000140)={0x11, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0x5}, @pad1, @enc_lim={0x4, 0x1, 0x5d}, @jumbo, @jumbo={0xc2, 0x4, 0xc49}]}, 0x20) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x4e23, 0x8cb3, @remote, 0x57}, {0xa, 0x4e24, 0x19c, @ipv4={'\x00', '\xff\xff', @loopback}, 0xffff}, 0x9, [0x1ff, 0x7, 0x2, 0x6, 0x3ff, 0x10001, 0x7f, 0x1ff]}, 0x5c) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000200), &(0x7f0000000240)=0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000280)={0xff, {{0xa, 0x4e20, 0x40, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8000}}, {{0xa, 0x4e22, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x6}}}, 0x108) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, 0x0, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x1e}}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8044000) socketpair(0x25, 0xa, 0xbeb, &(0x7f0000000500)) accept4$inet6(r0, 0x0, &(0x7f00000005c0), 0x80800) socket$inet6(0xa, 0x3, 0x80000001) 13:21:48 executing program 7: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000000)={{{@in=@local, @in=@dev}}, {{@in6}}}, &(0x7f0000000100)=0xe8) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000140)={0x11, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0x5}, @pad1, @enc_lim={0x4, 0x1, 0x5d}, @jumbo, @jumbo={0xc2, 0x4, 0xc49}]}, 0x20) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x4e23, 0x8cb3, @remote, 0x57}, {0xa, 0x4e24, 0x19c, @ipv4={'\x00', '\xff\xff', @loopback}, 0xffff}, 0x9, [0x1ff, 0x7, 0x2, 0x6, 0x3ff, 0x10001, 0x7f, 0x1ff]}, 0x5c) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000200), &(0x7f0000000240)=0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) 13:21:48 executing program 5: setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e20, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xea8}, {0xa, 0x4e23, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0xf021}, 0x7, [0x5, 0xc8f, 0x2, 0xc86, 0x40, 0x80000000, 0xfffffff8, 0x3]}, 0x5c) r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x1c) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0xff}, {0xa, 0x4e22, 0x4, @empty, 0x2}, 0x0, [0x9, 0x57, 0x4, 0xfffffff9, 0x401, 0x7, 0xc4e9, 0x4]}, 0x5c) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000180)=@fragment={0x8, 0x0, 0x8, 0x1, 0x0, 0x6, 0x64}, 0x8) r1 = socket$inet6(0xa, 0x5, 0xfffffffd) accept$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000200)=0x1c) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') socket$inet6(0xa, 0xa, 0x1ff) pkey_alloc(0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000440), 0x8, 0xd0000) syz_io_uring_complete(0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs2/custom1\x00', 0x6, 0x0) 13:21:48 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000080), 0x0, 0x20001) read$ptp(r0, &(0x7f0000000dc0)=""/71, 0x47) 13:21:49 executing program 3: setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e20, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xea8}, {0xa, 0x4e23, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0xf021}, 0x7, [0x5, 0xc8f, 0x2, 0xc86, 0x40, 0x80000000, 0xfffffff8, 0x3]}, 0x5c) r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x1c) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0xff}, {0xa, 0x4e22, 0x4, @empty, 0x2}, 0x0, [0x9, 0x57, 0x4, 0xfffffff9, 0x401, 0x7, 0xc4e9, 0x4]}, 0x5c) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000180)=@fragment={0x8, 0x0, 0x8, 0x1, 0x0, 0x6, 0x64}, 0x8) r1 = socket$inet6(0xa, 0x5, 0xfffffffd) r2 = accept$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000200)=0x1c) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') socket$inet6(0xa, 0xa, 0x1ff) pkey_alloc(0x0, 0x0) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000280)=0x1, 0x4) socket$inet6(0xa, 0x4, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x3, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}, 0x8000) setsockopt$inet6_group_source_req(r2, 0x29, 0x2c, &(0x7f0000000300)={0x6, {{0xa, 0x4e24, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8001}}, {{0xa, 0x4e20, 0x5, @mcast1, 0x4}}}, 0x108) syz_io_uring_complete(0x0) 13:21:56 executing program 0: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20, 0x7800, 0x99, 0x7fff}}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_TID={0xc}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x4) r3 = accept$packet(r1, 0x0, &(0x7f00000003c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000440)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x7f, r4}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', r2, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) r5 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r5, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) capset(&(0x7f00000005c0), &(0x7f0000000600)={0x53f1, 0x8, 0xc230, 0xfffffeff, 0x9, 0x2}) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) r6 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r6) 13:21:56 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000080), 0xfff, 0x0) read$ptp(r0, &(0x7f0000000dc0)=""/71, 0x47) 13:21:56 executing program 3: setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e20, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xea8}, {0xa, 0x4e23, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0xf021}, 0x7, [0x5, 0xc8f, 0x2, 0xc86, 0x40, 0x80000000, 0xfffffff8, 0x3]}, 0x5c) r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x1c) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0xff}, {0xa, 0x4e22, 0x4, @empty, 0x2}, 0x0, [0x9, 0x57, 0x4, 0xfffffff9, 0x401, 0x7, 0xc4e9, 0x4]}, 0x5c) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000180)=@fragment={0x8, 0x0, 0x8, 0x1, 0x0, 0x6, 0x64}, 0x8) r1 = socket$inet6(0xa, 0x5, 0xfffffffd) r2 = accept$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000200)=0x1c) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') socket$inet6(0xa, 0xa, 0x1ff) pkey_alloc(0x0, 0x0) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000280)=0x1, 0x4) socket$inet6(0xa, 0x4, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x3, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}, 0x8000) setsockopt$inet6_group_source_req(r2, 0x29, 0x2c, &(0x7f0000000300)={0x6, {{0xa, 0x4e24, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8001}}, {{0xa, 0x4e20, 0x5, @mcast1, 0x4}}}, 0x108) syz_io_uring_complete(0x0) 13:21:56 executing program 2: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x40}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0xc0094) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r1, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7ff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7f}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x2000c051) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x4c, r2, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1eedc1aa}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x96b0}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x626}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004801) r3 = syz_open_dev$vcsa(&(0x7f0000000400), 0x800, 0x80080) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x8080) syz_open_dev$vcsa(&(0x7f0000000540), 0x800, 0x200000) syz_io_uring_complete(0x0) 13:21:56 executing program 1: ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(0xffffffffffffffff, 0xc0a85322, &(0x7f0000000000)) r0 = syz_open_dev$vcsa(&(0x7f0000000180), 0x1, 0x82) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x98, 0x7, 0x1c, 0x6, 0x0, 0x81, 0x101, 0x4, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x10120, 0x8, 0x1000, 0x2, 0x800, 0x258, 0x9, 0x0, 0xfffffffb, 0x0, 0x3}, 0x0, 0x3, r0, 0x9) syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), 0xffffffffffffffff) r1 = getpid() fork() openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) wait4(r1, &(0x7f0000000240), 0x80000000, &(0x7f0000000280)) openat$cgroup_freezer_state(r0, &(0x7f0000000340), 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000800)={'ip6_vti0\x00', &(0x7f0000000780)={'ip6tnl0\x00', 0x0, 0x4, 0x5, 0x5, 0x7, 0x20, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8000, 0x40, 0x3ab0, 0xcee0}}) 13:21:56 executing program 5: setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e20, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xea8}, {0xa, 0x4e23, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0xf021}, 0x7, [0x5, 0xc8f, 0x2, 0xc86, 0x40, 0x80000000, 0xfffffff8, 0x3]}, 0x5c) r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x1c) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0xff}, {0xa, 0x4e22, 0x4, @empty, 0x2}, 0x0, [0x9, 0x57, 0x4, 0xfffffff9, 0x401, 0x7, 0xc4e9, 0x4]}, 0x5c) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000180)=@fragment={0x8, 0x0, 0x8, 0x1, 0x0, 0x6, 0x64}, 0x8) r1 = socket$inet6(0xa, 0x5, 0xfffffffd) accept$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000200)=0x1c) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') socket$inet6(0xa, 0xa, 0x1ff) pkey_alloc(0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000440), 0x8, 0xd0000) syz_io_uring_complete(0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs2/custom1\x00', 0x6, 0x0) 13:21:56 executing program 6: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000000)={{{@in=@local, @in=@dev}}, {{@in6}}}, &(0x7f0000000100)=0xe8) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000140)={0x11, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0x5}, @pad1, @enc_lim={0x4, 0x1, 0x5d}, @jumbo, @jumbo={0xc2, 0x4, 0xc49}]}, 0x20) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x4e23, 0x8cb3, @remote, 0x57}, {0xa, 0x4e24, 0x19c, @ipv4={'\x00', '\xff\xff', @loopback}, 0xffff}, 0x9, [0x1ff, 0x7, 0x2, 0x6, 0x3ff, 0x10001, 0x7f, 0x1ff]}, 0x5c) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000200), &(0x7f0000000240)=0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000280)={0xff, {{0xa, 0x4e20, 0x40, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8000}}, {{0xa, 0x4e22, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x6}}}, 0x108) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, 0x0, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x1e}}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8044000) accept4$inet6(r0, 0x0, &(0x7f00000005c0), 0x80800) socket$inet6(0xa, 0x3, 0x80000001) 13:21:56 executing program 7: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000000)={{{@in=@local, @in=@dev}}, {{@in6}}}, &(0x7f0000000100)=0xe8) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000140)={0x11, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0x5}, @pad1, @enc_lim={0x4, 0x1, 0x5d}, @jumbo, @jumbo={0xc2, 0x4, 0xc49}]}, 0x20) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x4e23, 0x8cb3, @remote, 0x57}, {0xa, 0x4e24, 0x19c, @ipv4={'\x00', '\xff\xff', @loopback}, 0xffff}, 0x9, [0x1ff, 0x7, 0x2, 0x6, 0x3ff, 0x10001, 0x7f, 0x1ff]}, 0x5c) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) 13:21:57 executing program 6: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000000)={{{@in=@local, @in=@dev}}, {{@in6}}}, &(0x7f0000000100)=0xe8) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000140)={0x11, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0x5}, @pad1, @enc_lim={0x4, 0x1, 0x5d}, @jumbo, @jumbo={0xc2, 0x4, 0xc49}]}, 0x20) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x4e23, 0x8cb3, @remote, 0x57}, {0xa, 0x4e24, 0x19c, @ipv4={'\x00', '\xff\xff', @loopback}, 0xffff}, 0x9, [0x1ff, 0x7, 0x2, 0x6, 0x3ff, 0x10001, 0x7f, 0x1ff]}, 0x5c) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000200), &(0x7f0000000240)=0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000280)={0xff, {{0xa, 0x4e20, 0x40, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8000}}, {{0xa, 0x4e22, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x6}}}, 0x108) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, 0x0, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x1e}}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8044000) accept4$inet6(r0, 0x0, &(0x7f00000005c0), 0x80800) socket$inet6(0xa, 0x3, 0x80000001) 13:21:57 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000080), 0xfff, 0x0) read$ptp(r0, &(0x7f0000000dc0)=""/71, 0x47) 13:21:57 executing program 5: setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e20, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xea8}, {0xa, 0x4e23, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0xf021}, 0x7, [0x5, 0xc8f, 0x2, 0xc86, 0x40, 0x80000000, 0xfffffff8, 0x3]}, 0x5c) r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x1c) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0xff}, {0xa, 0x4e22, 0x4, @empty, 0x2}, 0x0, [0x9, 0x57, 0x4, 0xfffffff9, 0x401, 0x7, 0xc4e9, 0x4]}, 0x5c) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000180)=@fragment={0x8, 0x0, 0x8, 0x1, 0x0, 0x6, 0x64}, 0x8) r1 = socket$inet6(0xa, 0x5, 0xfffffffd) r2 = accept$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000200)=0x1c) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') socket$inet6(0xa, 0xa, 0x1ff) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000280)=0x1, 0x4) syz_open_dev$vcsa(&(0x7f0000000440), 0x8, 0xd0000) syz_io_uring_complete(0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs2/custom1\x00', 0x6, 0x0) 13:21:57 executing program 7: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000000)={{{@in=@local, @in=@dev}}, {{@in6}}}, &(0x7f0000000100)=0xe8) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000140)={0x11, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0x5}, @pad1, @enc_lim={0x4, 0x1, 0x5d}, @jumbo, @jumbo={0xc2, 0x4, 0xc49}]}, 0x20) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) 13:21:57 executing program 6: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000000)={{{@in=@local, @in=@dev}}, {{@in6}}}, &(0x7f0000000100)=0xe8) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000140)={0x11, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0x5}, @pad1, @enc_lim={0x4, 0x1, 0x5d}, @jumbo, @jumbo={0xc2, 0x4, 0xc49}]}, 0x20) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x4e23, 0x8cb3, @remote, 0x57}, {0xa, 0x4e24, 0x19c, @ipv4={'\x00', '\xff\xff', @loopback}, 0xffff}, 0x9, [0x1ff, 0x7, 0x2, 0x6, 0x3ff, 0x10001, 0x7f, 0x1ff]}, 0x5c) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000200), &(0x7f0000000240)=0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000280)={0xff, {{0xa, 0x4e20, 0x40, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8000}}, {{0xa, 0x4e22, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x6}}}, 0x108) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, 0x0, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x1e}}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8044000) accept4$inet6(r0, 0x0, &(0x7f00000005c0), 0x80800) socket$inet6(0xa, 0x3, 0x80000001) 13:21:57 executing program 1: ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(0xffffffffffffffff, 0xc0a85322, &(0x7f0000000000)) r0 = syz_open_dev$vcsa(&(0x7f0000000180), 0x1, 0x82) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x98, 0x7, 0x1c, 0x6, 0x0, 0x81, 0x101, 0x4, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x10120, 0x8, 0x1000, 0x2, 0x800, 0x258, 0x9, 0x0, 0xfffffffb, 0x0, 0x3}, 0x0, 0x3, r0, 0x9) syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), 0xffffffffffffffff) r1 = getpid() fork() openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) wait4(r1, &(0x7f0000000240), 0x80000000, &(0x7f0000000280)) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000800)={'ip6_vti0\x00', &(0x7f0000000780)={'ip6tnl0\x00', 0x0, 0x4, 0x5, 0x5, 0x7, 0x20, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8000, 0x40, 0x3ab0, 0xcee0}}) 13:21:57 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000080), 0xfff, 0x0) read$ptp(r0, &(0x7f0000000dc0)=""/71, 0x47) 13:21:57 executing program 3: setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e20, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xea8}, {0xa, 0x4e23, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0xf021}, 0x7, [0x5, 0xc8f, 0x2, 0xc86, 0x40, 0x80000000, 0xfffffff8, 0x3]}, 0x5c) r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x1c) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0xff}, {0xa, 0x4e22, 0x4, @empty, 0x2}, 0x0, [0x9, 0x57, 0x4, 0xfffffff9, 0x401, 0x7, 0xc4e9, 0x4]}, 0x5c) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000180)=@fragment={0x8, 0x0, 0x8, 0x1, 0x0, 0x6, 0x64}, 0x8) r1 = socket$inet6(0xa, 0x5, 0xfffffffd) r2 = accept$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000200)=0x1c) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') socket$inet6(0xa, 0xa, 0x1ff) pkey_alloc(0x0, 0x0) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000280)=0x1, 0x4) socket$inet6(0xa, 0x4, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x3, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}, 0x8000) setsockopt$inet6_group_source_req(r2, 0x29, 0x2c, &(0x7f0000000300)={0x6, {{0xa, 0x4e24, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8001}}, {{0xa, 0x4e20, 0x5, @mcast1, 0x4}}}, 0x108) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs2/custom1\x00', 0x6, 0x0) 13:21:57 executing program 0: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20, 0x7800, 0x99, 0x7fff}}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_TID={0xc}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x4) r3 = accept$packet(r1, 0x0, &(0x7f00000003c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000440)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x7f, r4}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', r2, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) r5 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r5, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) r6 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r6) 13:21:57 executing program 2: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x40}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0xc0094) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r1, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7ff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7f}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x2000c051) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x4c, r2, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1eedc1aa}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x96b0}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x626}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004801) r3 = syz_open_dev$vcsa(&(0x7f0000000400), 0x800, 0x80080) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x8080) syz_io_uring_complete(0x0) 13:21:57 executing program 5: setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e20, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xea8}, {0xa, 0x4e23, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0xf021}, 0x7, [0x5, 0xc8f, 0x2, 0xc86, 0x40, 0x80000000, 0xfffffff8, 0x3]}, 0x5c) r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x1c) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0xff}, {0xa, 0x4e22, 0x4, @empty, 0x2}, 0x0, [0x9, 0x57, 0x4, 0xfffffff9, 0x401, 0x7, 0xc4e9, 0x4]}, 0x5c) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000180)=@fragment={0x8, 0x0, 0x8, 0x1, 0x0, 0x6, 0x64}, 0x8) r1 = socket$inet6(0xa, 0x5, 0xfffffffd) r2 = accept$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000200)=0x1c) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') socket$inet6(0xa, 0xa, 0x1ff) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000280)=0x1, 0x4) syz_open_dev$vcsa(&(0x7f0000000440), 0x8, 0xd0000) syz_io_uring_complete(0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs2/custom1\x00', 0x6, 0x0) 13:22:06 executing program 4: syz_open_dev$vcsu(&(0x7f0000000080), 0xfff, 0x20001) read$ptp(0xffffffffffffffff, &(0x7f0000000dc0)=""/71, 0x47) 13:22:06 executing program 7: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000000)={{{@in=@local, @in=@dev}}, {{@in6}}}, &(0x7f0000000100)=0xe8) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) 13:22:06 executing program 0: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20, 0x7800, 0x99, 0x7fff}}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_TID={0xc}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x4) r3 = accept$packet(r1, 0x0, &(0x7f00000003c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000440)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x7f, r4}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', r2, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) r5 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r5) 13:22:06 executing program 2: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x40}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0xc0094) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r1, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7ff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7f}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x2000c051) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x4c, r2, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1eedc1aa}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x96b0}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x626}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004801) syz_open_dev$vcsa(&(0x7f0000000400), 0x800, 0x80080) syz_io_uring_complete(0x0) 13:22:06 executing program 5: setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e20, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xea8}, {0xa, 0x4e23, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0xf021}, 0x7, [0x5, 0xc8f, 0x2, 0xc86, 0x40, 0x80000000, 0xfffffff8, 0x3]}, 0x5c) r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x1c) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0xff}, {0xa, 0x4e22, 0x4, @empty, 0x2}, 0x0, [0x9, 0x57, 0x4, 0xfffffff9, 0x401, 0x7, 0xc4e9, 0x4]}, 0x5c) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000180)=@fragment={0x8, 0x0, 0x8, 0x1, 0x0, 0x6, 0x64}, 0x8) r1 = socket$inet6(0xa, 0x5, 0xfffffffd) r2 = accept$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000200)=0x1c) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') socket$inet6(0xa, 0xa, 0x1ff) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000280)=0x1, 0x4) syz_open_dev$vcsa(&(0x7f0000000440), 0x8, 0xd0000) syz_io_uring_complete(0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs2/custom1\x00', 0x6, 0x0) 13:22:06 executing program 1: ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(0xffffffffffffffff, 0xc0a85322, &(0x7f0000000000)) r0 = syz_open_dev$vcsa(&(0x7f0000000180), 0x1, 0x82) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x98, 0x7, 0x1c, 0x6, 0x0, 0x81, 0x101, 0x4, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x10120, 0x8, 0x1000, 0x2, 0x800, 0x258, 0x9, 0x0, 0xfffffffb, 0x0, 0x3}, 0x0, 0x3, r0, 0x9) syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), 0xffffffffffffffff) getpid() fork() openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000800)={'ip6_vti0\x00', &(0x7f0000000780)={'ip6tnl0\x00', 0x0, 0x4, 0x5, 0x5, 0x7, 0x20, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8000, 0x40, 0x3ab0, 0xcee0}}) 13:22:06 executing program 3: setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e20, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xea8}, {0xa, 0x4e23, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0xf021}, 0x7, [0x5, 0xc8f, 0x2, 0xc86, 0x40, 0x80000000, 0xfffffff8, 0x3]}, 0x5c) r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x1c) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0xff}, {0xa, 0x4e22, 0x4, @empty, 0x2}, 0x0, [0x9, 0x57, 0x4, 0xfffffff9, 0x401, 0x7, 0xc4e9, 0x4]}, 0x5c) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000180)=@fragment={0x8, 0x0, 0x8, 0x1, 0x0, 0x6, 0x64}, 0x8) r1 = socket$inet6(0xa, 0x5, 0xfffffffd) r2 = accept$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000200)=0x1c) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') socket$inet6(0xa, 0xa, 0x1ff) pkey_alloc(0x0, 0x0) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000280)=0x1, 0x4) socket$inet6(0xa, 0x4, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x3, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}, 0x8000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs2/custom1\x00', 0x6, 0x0) 13:22:06 executing program 6: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000000)={{{@in=@local, @in=@dev}}, {{@in6}}}, &(0x7f0000000100)=0xe8) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000140)={0x11, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0x5}, @pad1, @enc_lim={0x4, 0x1, 0x5d}, @jumbo, @jumbo={0xc2, 0x4, 0xc49}]}, 0x20) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x4e23, 0x8cb3, @remote, 0x57}, {0xa, 0x4e24, 0x19c, @ipv4={'\x00', '\xff\xff', @loopback}, 0xffff}, 0x9, [0x1ff, 0x7, 0x2, 0x6, 0x3ff, 0x10001, 0x7f, 0x1ff]}, 0x5c) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000200), &(0x7f0000000240)=0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000280)={0xff, {{0xa, 0x4e20, 0x40, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8000}}, {{0xa, 0x4e22, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x6}}}, 0x108) socketpair(0x25, 0xa, 0xbeb, &(0x7f0000000500)) accept4$inet6(r0, 0x0, &(0x7f00000005c0), 0x80800) socket$inet6(0xa, 0x3, 0x80000001) 13:22:06 executing program 5: setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e20, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xea8}, {0xa, 0x4e23, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0xf021}, 0x7, [0x5, 0xc8f, 0x2, 0xc86, 0x40, 0x80000000, 0xfffffff8, 0x3]}, 0x5c) r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x1c) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0xff}, {0xa, 0x4e22, 0x4, @empty, 0x2}, 0x0, [0x9, 0x57, 0x4, 0xfffffff9, 0x401, 0x7, 0xc4e9, 0x4]}, 0x5c) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000180)=@fragment={0x8, 0x0, 0x8, 0x1, 0x0, 0x6, 0x64}, 0x8) r1 = socket$inet6(0xa, 0x5, 0xfffffffd) r2 = accept$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000200)=0x1c) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000280)=0x1, 0x4) syz_open_dev$vcsa(&(0x7f0000000440), 0x8, 0xd0000) syz_io_uring_complete(0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs2/custom1\x00', 0x6, 0x0) 13:22:06 executing program 7: epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) 13:22:06 executing program 4: syz_open_dev$vcsu(&(0x7f0000000080), 0xfff, 0x20001) read$ptp(0xffffffffffffffff, &(0x7f0000000dc0)=""/71, 0x47) 13:22:06 executing program 6: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000000)={{{@in=@local, @in=@dev}}, {{@in6}}}, &(0x7f0000000100)=0xe8) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000140)={0x11, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0x5}, @pad1, @enc_lim={0x4, 0x1, 0x5d}, @jumbo, @jumbo={0xc2, 0x4, 0xc49}]}, 0x20) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x4e23, 0x8cb3, @remote, 0x57}, {0xa, 0x4e24, 0x19c, @ipv4={'\x00', '\xff\xff', @loopback}, 0xffff}, 0x9, [0x1ff, 0x7, 0x2, 0x6, 0x3ff, 0x10001, 0x7f, 0x1ff]}, 0x5c) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000200), &(0x7f0000000240)=0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair(0x25, 0xa, 0xbeb, &(0x7f0000000500)) accept4$inet6(r0, 0x0, &(0x7f00000005c0), 0x80800) socket$inet6(0xa, 0x3, 0x80000001) 13:22:15 executing program 5: setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e20, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xea8}, {0xa, 0x4e23, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0xf021}, 0x7, [0x5, 0xc8f, 0x2, 0xc86, 0x40, 0x80000000, 0xfffffff8, 0x3]}, 0x5c) r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x1c) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0xff}, {0xa, 0x4e22, 0x4, @empty, 0x2}, 0x0, [0x9, 0x57, 0x4, 0xfffffff9, 0x401, 0x7, 0xc4e9, 0x4]}, 0x5c) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000180)=@fragment={0x8, 0x0, 0x8, 0x1, 0x0, 0x6, 0x64}, 0x8) r1 = socket$inet6(0xa, 0x5, 0xfffffffd) r2 = accept$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000200)=0x1c) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000280)=0x1, 0x4) syz_open_dev$vcsa(&(0x7f0000000440), 0x8, 0xd0000) syz_io_uring_complete(0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs2/custom1\x00', 0x6, 0x0) 13:22:15 executing program 6: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000000)={{{@in=@local, @in=@dev}}, {{@in6}}}, &(0x7f0000000100)=0xe8) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000140)={0x11, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0x5}, @pad1, @enc_lim={0x4, 0x1, 0x5d}, @jumbo, @jumbo={0xc2, 0x4, 0xc49}]}, 0x20) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x4e23, 0x8cb3, @remote, 0x57}, {0xa, 0x4e24, 0x19c, @ipv4={'\x00', '\xff\xff', @loopback}, 0xffff}, 0x9, [0x1ff, 0x7, 0x2, 0x6, 0x3ff, 0x10001, 0x7f, 0x1ff]}, 0x5c) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000200), &(0x7f0000000240)=0x4) socketpair(0x25, 0xa, 0xbeb, &(0x7f0000000500)) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f00000005c0), 0x80800) socket$inet6(0xa, 0x3, 0x80000001) 13:22:15 executing program 3: setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e20, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xea8}, {0xa, 0x4e23, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0xf021}, 0x7, [0x5, 0xc8f, 0x2, 0xc86, 0x40, 0x80000000, 0xfffffff8, 0x3]}, 0x5c) r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x1c) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0xff}, {0xa, 0x4e22, 0x4, @empty, 0x2}, 0x0, [0x9, 0x57, 0x4, 0xfffffff9, 0x401, 0x7, 0xc4e9, 0x4]}, 0x5c) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000180)=@fragment={0x8, 0x0, 0x8, 0x1, 0x0, 0x6, 0x64}, 0x8) r1 = socket$inet6(0xa, 0x5, 0xfffffffd) r2 = accept$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000200)=0x1c) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') socket$inet6(0xa, 0xa, 0x1ff) pkey_alloc(0x0, 0x0) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000280)=0x1, 0x4) socket$inet6(0xa, 0x4, 0x20) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs2/custom1\x00', 0x6, 0x0) 13:22:15 executing program 4: syz_open_dev$vcsu(&(0x7f0000000080), 0xfff, 0x20001) read$ptp(0xffffffffffffffff, &(0x7f0000000dc0)=""/71, 0x47) 13:22:15 executing program 1: ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(0xffffffffffffffff, 0xc0a85322, &(0x7f0000000000)) r0 = syz_open_dev$vcsa(&(0x7f0000000180), 0x1, 0x82) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x98, 0x7, 0x1c, 0x6, 0x0, 0x81, 0x101, 0x4, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x10120, 0x8, 0x1000, 0x2, 0x800, 0x258, 0x9, 0x0, 0xfffffffb, 0x0, 0x3}, 0x0, 0x3, r0, 0x9) syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), 0xffffffffffffffff) getpid() fork() ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000800)={'ip6_vti0\x00', &(0x7f0000000780)={'ip6tnl0\x00', 0x0, 0x4, 0x5, 0x5, 0x7, 0x20, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8000, 0x40, 0x3ab0, 0xcee0}}) 13:22:15 executing program 7: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20, 0x7800, 0x99, 0x7fff}}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_TID={0xc}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x4) r3 = accept$packet(r1, 0x0, &(0x7f00000003c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000440)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x7f, r4}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', r2, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) r5 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r5, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) r6 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r6) 13:22:15 executing program 2: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x40}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0xc0094) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r1, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7ff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7f}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x2000c051) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x4c, r2, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1eedc1aa}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x96b0}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x626}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004801) syz_io_uring_complete(0x0) 13:22:15 executing program 0: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20, 0x7800, 0x99, 0x7fff}}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_TID={0xc}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x4) r3 = accept$packet(r1, 0x0, &(0x7f00000003c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000440)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x7f, r4}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', r2, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) r5 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r5) 13:22:15 executing program 6: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000000)={{{@in=@local, @in=@dev}}, {{@in6}}}, &(0x7f0000000100)=0xe8) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000140)={0x11, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0x5}, @pad1, @enc_lim={0x4, 0x1, 0x5d}, @jumbo, @jumbo={0xc2, 0x4, 0xc49}]}, 0x20) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x4e23, 0x8cb3, @remote, 0x57}, {0xa, 0x4e24, 0x19c, @ipv4={'\x00', '\xff\xff', @loopback}, 0xffff}, 0x9, [0x1ff, 0x7, 0x2, 0x6, 0x3ff, 0x10001, 0x7f, 0x1ff]}, 0x5c) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000200), &(0x7f0000000240)=0x4) socketpair(0x25, 0xa, 0xbeb, &(0x7f0000000500)) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f00000005c0), 0x80800) socket$inet6(0xa, 0x3, 0x80000001) 13:22:15 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000080), 0xfff, 0x20001) read$ptp(r0, 0x0, 0x0) 13:22:15 executing program 1: ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(0xffffffffffffffff, 0xc0a85322, &(0x7f0000000000)) r0 = syz_open_dev$vcsa(&(0x7f0000000180), 0x1, 0x82) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x98, 0x7, 0x1c, 0x6, 0x0, 0x81, 0x101, 0x4, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x10120, 0x8, 0x1000, 0x2, 0x800, 0x258, 0x9, 0x0, 0xfffffffb, 0x0, 0x3}, 0x0, 0x3, r0, 0x9) syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), 0xffffffffffffffff) getpid() ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000800)={'ip6_vti0\x00', &(0x7f0000000780)={'ip6tnl0\x00', 0x0, 0x4, 0x5, 0x5, 0x7, 0x20, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8000, 0x40, 0x3ab0, 0xcee0}}) 13:22:15 executing program 5: setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e20, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xea8}, {0xa, 0x4e23, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0xf021}, 0x7, [0x5, 0xc8f, 0x2, 0xc86, 0x40, 0x80000000, 0xfffffff8, 0x3]}, 0x5c) r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x1c) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0xff}, {0xa, 0x4e22, 0x4, @empty, 0x2}, 0x0, [0x9, 0x57, 0x4, 0xfffffff9, 0x401, 0x7, 0xc4e9, 0x4]}, 0x5c) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000180)=@fragment={0x8, 0x0, 0x8, 0x1, 0x0, 0x6, 0x64}, 0x8) r1 = socket$inet6(0xa, 0x5, 0xfffffffd) r2 = accept$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000200)=0x1c) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000280)=0x1, 0x4) syz_open_dev$vcsa(&(0x7f0000000440), 0x8, 0xd0000) syz_io_uring_complete(0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs2/custom1\x00', 0x6, 0x0) 13:22:15 executing program 6: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000000)={{{@in=@local, @in=@dev}}, {{@in6}}}, &(0x7f0000000100)=0xe8) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000140)={0x11, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0x5}, @pad1, @enc_lim={0x4, 0x1, 0x5d}, @jumbo, @jumbo={0xc2, 0x4, 0xc49}]}, 0x20) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x4e23, 0x8cb3, @remote, 0x57}, {0xa, 0x4e24, 0x19c, @ipv4={'\x00', '\xff\xff', @loopback}, 0xffff}, 0x9, [0x1ff, 0x7, 0x2, 0x6, 0x3ff, 0x10001, 0x7f, 0x1ff]}, 0x5c) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000200), &(0x7f0000000240)=0x4) socketpair(0x25, 0xa, 0xbeb, &(0x7f0000000500)) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f00000005c0), 0x80800) socket$inet6(0xa, 0x3, 0x80000001) 13:22:15 executing program 1: ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(0xffffffffffffffff, 0xc0a85322, &(0x7f0000000000)) r0 = syz_open_dev$vcsa(&(0x7f0000000180), 0x1, 0x82) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x98, 0x7, 0x1c, 0x6, 0x0, 0x81, 0x101, 0x4, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x10120, 0x8, 0x1000, 0x2, 0x800, 0x258, 0x9, 0x0, 0xfffffffb, 0x0, 0x3}, 0x0, 0x3, r0, 0x9) syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000800)={'ip6_vti0\x00', &(0x7f0000000780)={'ip6tnl0\x00', 0x0, 0x4, 0x5, 0x5, 0x7, 0x20, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8000, 0x40, 0x3ab0, 0xcee0}}) 13:22:15 executing program 7: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20, 0x7800, 0x99, 0x7fff}}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_TID={0xc}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x4) r3 = accept$packet(r1, 0x0, &(0x7f00000003c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000440)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x7f, r4}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', r2, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) r5 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r5, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) r6 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r6) 13:22:15 executing program 2: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x40}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0xc0094) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r1, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7ff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7f}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x2000c051) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x4c, r2, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1eedc1aa}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x96b0}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x626}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004801) syz_io_uring_complete(0x0) 13:22:23 executing program 5: setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e20, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xea8}, {0xa, 0x4e23, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0xf021}, 0x7, [0x5, 0xc8f, 0x2, 0xc86, 0x40, 0x80000000, 0xfffffff8, 0x3]}, 0x5c) r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x1c) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0xff}, {0xa, 0x4e22, 0x4, @empty, 0x2}, 0x0, [0x9, 0x57, 0x4, 0xfffffff9, 0x401, 0x7, 0xc4e9, 0x4]}, 0x5c) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000180)=@fragment={0x8, 0x0, 0x8, 0x1, 0x0, 0x6, 0x64}, 0x8) r1 = socket$inet6(0xa, 0x5, 0xfffffffd) r2 = accept$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000200)=0x1c) socket$inet6(0xa, 0xa, 0x1ff) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000280)=0x1, 0x4) syz_open_dev$vcsa(&(0x7f0000000440), 0x8, 0xd0000) syz_io_uring_complete(0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs2/custom1\x00', 0x6, 0x0) 13:22:23 executing program 7: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20, 0x7800, 0x99, 0x7fff}}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_TID={0xc}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x4) r3 = accept$packet(r1, 0x0, &(0x7f00000003c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000440)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x7f, r4}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', r2, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) r5 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r5, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) r6 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r6) 13:22:23 executing program 6: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000000)={{{@in=@local, @in=@dev}}, {{@in6}}}, &(0x7f0000000100)=0xe8) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000140)={0x11, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0x5}, @pad1, @enc_lim={0x4, 0x1, 0x5d}, @jumbo, @jumbo={0xc2, 0x4, 0xc49}]}, 0x20) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x4e23, 0x8cb3, @remote, 0x57}, {0xa, 0x4e24, 0x19c, @ipv4={'\x00', '\xff\xff', @loopback}, 0xffff}, 0x9, [0x1ff, 0x7, 0x2, 0x6, 0x3ff, 0x10001, 0x7f, 0x1ff]}, 0x5c) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair(0x25, 0xa, 0xbeb, &(0x7f0000000500)) accept4$inet6(r0, 0x0, &(0x7f00000005c0), 0x80800) socket$inet6(0xa, 0x3, 0x80000001) 13:22:23 executing program 2: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x40}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0xc0094) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r1, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7ff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7f}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x2000c051) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x4c, r2, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1eedc1aa}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x96b0}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x626}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004801) syz_io_uring_complete(0x0) 13:22:23 executing program 0: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20, 0x7800, 0x99, 0x7fff}}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_TID={0xc}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x4) r3 = accept$packet(r1, 0x0, &(0x7f00000003c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000440)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x7f, r4}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', r2, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) r5 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r5) 13:22:23 executing program 1: ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(0xffffffffffffffff, 0xc0a85322, &(0x7f0000000000)) r0 = syz_open_dev$vcsa(&(0x7f0000000180), 0x1, 0x82) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x98, 0x7, 0x1c, 0x6, 0x0, 0x81, 0x101, 0x4, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x10120, 0x8, 0x1000, 0x2, 0x800, 0x258, 0x9, 0x0, 0xfffffffb, 0x0, 0x3}, 0x0, 0x3, r0, 0x9) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000800)={'ip6_vti0\x00', &(0x7f0000000780)={'ip6tnl0\x00', 0x0, 0x4, 0x5, 0x5, 0x7, 0x20, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8000, 0x40, 0x3ab0, 0xcee0}}) 13:22:23 executing program 3: setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e20, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xea8}, {0xa, 0x4e23, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0xf021}, 0x7, [0x5, 0xc8f, 0x2, 0xc86, 0x40, 0x80000000, 0xfffffff8, 0x3]}, 0x5c) r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x1c) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0xff}, {0xa, 0x4e22, 0x4, @empty, 0x2}, 0x0, [0x9, 0x57, 0x4, 0xfffffff9, 0x401, 0x7, 0xc4e9, 0x4]}, 0x5c) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000180)=@fragment={0x8, 0x0, 0x8, 0x1, 0x0, 0x6, 0x64}, 0x8) r1 = socket$inet6(0xa, 0x5, 0xfffffffd) accept$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000200)=0x1c) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') socket$inet6(0xa, 0xa, 0x1ff) pkey_alloc(0x0, 0x0) socket$inet6(0xa, 0x4, 0x20) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs2/custom1\x00', 0x6, 0x0) 13:22:23 executing program 4: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x40}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0xc0094) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r1, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7ff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7f}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x2000c051) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x4c, r2, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1eedc1aa}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x96b0}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x626}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004801) syz_io_uring_complete(0x0) 13:22:23 executing program 6: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000000)={{{@in=@local, @in=@dev}}, {{@in6}}}, &(0x7f0000000100)=0xe8) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000140)={0x11, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0x5}, @pad1, @enc_lim={0x4, 0x1, 0x5d}, @jumbo, @jumbo={0xc2, 0x4, 0xc49}]}, 0x20) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x4e23, 0x8cb3, @remote, 0x57}, {0xa, 0x4e24, 0x19c, @ipv4={'\x00', '\xff\xff', @loopback}, 0xffff}, 0x9, [0x1ff, 0x7, 0x2, 0x6, 0x3ff, 0x10001, 0x7f, 0x1ff]}, 0x5c) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair(0x25, 0xa, 0xbeb, &(0x7f0000000500)) accept4$inet6(r0, 0x0, &(0x7f00000005c0), 0x80800) socket$inet6(0xa, 0x3, 0x80000001) 13:22:23 executing program 1: ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(0xffffffffffffffff, 0xc0a85322, &(0x7f0000000000)) r0 = syz_open_dev$vcsa(&(0x7f0000000180), 0x1, 0x82) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000800)={'ip6_vti0\x00', &(0x7f0000000780)={'ip6tnl0\x00', 0x0, 0x4, 0x5, 0x5, 0x7, 0x20, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8000, 0x40, 0x3ab0, 0xcee0}}) 13:22:23 executing program 5: setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e20, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xea8}, {0xa, 0x4e23, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0xf021}, 0x7, [0x5, 0xc8f, 0x2, 0xc86, 0x40, 0x80000000, 0xfffffff8, 0x3]}, 0x5c) r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x1c) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0xff}, {0xa, 0x4e22, 0x4, @empty, 0x2}, 0x0, [0x9, 0x57, 0x4, 0xfffffff9, 0x401, 0x7, 0xc4e9, 0x4]}, 0x5c) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000180)=@fragment={0x8, 0x0, 0x8, 0x1, 0x0, 0x6, 0x64}, 0x8) r1 = socket$inet6(0xa, 0x5, 0xfffffffd) r2 = accept$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000200)=0x1c) socket$inet6(0xa, 0xa, 0x1ff) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000280)=0x1, 0x4) syz_open_dev$vcsa(&(0x7f0000000440), 0x8, 0xd0000) syz_io_uring_complete(0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs2/custom1\x00', 0x6, 0x0) 13:22:24 executing program 3: setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e20, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xea8}, {0xa, 0x4e23, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0xf021}, 0x7, [0x5, 0xc8f, 0x2, 0xc86, 0x40, 0x80000000, 0xfffffff8, 0x3]}, 0x5c) r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x1c) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0xff}, {0xa, 0x4e22, 0x4, @empty, 0x2}, 0x0, [0x9, 0x57, 0x4, 0xfffffff9, 0x401, 0x7, 0xc4e9, 0x4]}, 0x5c) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000180)=@fragment={0x8, 0x0, 0x8, 0x1, 0x0, 0x6, 0x64}, 0x8) r1 = socket$inet6(0xa, 0x5, 0xfffffffd) accept$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000200)=0x1c) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') socket$inet6(0xa, 0xa, 0x1ff) socket$inet6(0xa, 0x4, 0x20) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs2/custom1\x00', 0x6, 0x0) 13:22:24 executing program 6: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000000)={{{@in=@local, @in=@dev}}, {{@in6}}}, &(0x7f0000000100)=0xe8) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000140)={0x11, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0x5}, @pad1, @enc_lim={0x4, 0x1, 0x5d}, @jumbo, @jumbo={0xc2, 0x4, 0xc49}]}, 0x20) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x4e23, 0x8cb3, @remote, 0x57}, {0xa, 0x4e24, 0x19c, @ipv4={'\x00', '\xff\xff', @loopback}, 0xffff}, 0x9, [0x1ff, 0x7, 0x2, 0x6, 0x3ff, 0x10001, 0x7f, 0x1ff]}, 0x5c) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair(0x25, 0xa, 0xbeb, &(0x7f0000000500)) accept4$inet6(r0, 0x0, &(0x7f00000005c0), 0x80800) socket$inet6(0xa, 0x3, 0x80000001) 13:22:24 executing program 1: ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(0xffffffffffffffff, 0xc0a85322, &(0x7f0000000000)) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000800)={'ip6_vti0\x00', &(0x7f0000000780)={'ip6tnl0\x00', 0x0, 0x4, 0x5, 0x5, 0x7, 0x20, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8000, 0x40, 0x3ab0, 0xcee0}}) 13:22:24 executing program 2: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x40}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0xc0094) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r1, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7ff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7f}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x2000c051) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) syz_open_dev$vcsa(&(0x7f0000000400), 0x800, 0x80080) syz_io_uring_complete(0x0) 13:22:24 executing program 7: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20, 0x7800, 0x99, 0x7fff}}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_TID={0xc}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x4) r3 = accept$packet(r1, 0x0, &(0x7f00000003c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000440)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x7f, r4}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', r2, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) r5 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r5, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), 0xffffffffffffffff) 13:22:24 executing program 5: setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e20, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xea8}, {0xa, 0x4e23, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0xf021}, 0x7, [0x5, 0xc8f, 0x2, 0xc86, 0x40, 0x80000000, 0xfffffff8, 0x3]}, 0x5c) r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x1c) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0xff}, {0xa, 0x4e22, 0x4, @empty, 0x2}, 0x0, [0x9, 0x57, 0x4, 0xfffffff9, 0x401, 0x7, 0xc4e9, 0x4]}, 0x5c) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000180)=@fragment={0x8, 0x0, 0x8, 0x1, 0x0, 0x6, 0x64}, 0x8) r1 = socket$inet6(0xa, 0x5, 0xfffffffd) r2 = accept$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000200)=0x1c) socket$inet6(0xa, 0xa, 0x1ff) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000280)=0x1, 0x4) syz_open_dev$vcsa(&(0x7f0000000440), 0x8, 0xd0000) syz_io_uring_complete(0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs2/custom1\x00', 0x6, 0x0) 13:22:24 executing program 1: ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(0xffffffffffffffff, 0xc0a85322, &(0x7f0000000000)) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000800)={'ip6_vti0\x00', &(0x7f0000000780)={'ip6tnl0\x00', 0x0, 0x4, 0x5, 0x5, 0x7, 0x20, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8000, 0x40, 0x3ab0, 0xcee0}}) 13:22:24 executing program 5: setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e20, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xea8}, {0xa, 0x4e23, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0xf021}, 0x7, [0x5, 0xc8f, 0x2, 0xc86, 0x40, 0x80000000, 0xfffffff8, 0x3]}, 0x5c) r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x1c) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0xff}, {0xa, 0x4e22, 0x4, @empty, 0x2}, 0x0, [0x9, 0x57, 0x4, 0xfffffff9, 0x401, 0x7, 0xc4e9, 0x4]}, 0x5c) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000180)=@fragment={0x8, 0x0, 0x8, 0x1, 0x0, 0x6, 0x64}, 0x8) socket$inet6(0xa, 0x5, 0xfffffffd) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') socket$inet6(0xa, 0xa, 0x1ff) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=0x1, 0x4) syz_open_dev$vcsa(&(0x7f0000000440), 0x8, 0xd0000) syz_io_uring_complete(0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs2/custom1\x00', 0x6, 0x0) 13:22:24 executing program 0: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20, 0x7800, 0x99, 0x7fff}}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_TID={0xc}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x4) r3 = accept$packet(r1, 0x0, &(0x7f00000003c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000440)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x7f, r4}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', r2, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) r5 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r5) 13:22:24 executing program 4: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x40}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0xc0094) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r1, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7ff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7f}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x2000c051) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x4c, r2, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1eedc1aa}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x96b0}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x626}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004801) syz_io_uring_complete(0x0) 13:22:24 executing program 1: ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(0xffffffffffffffff, 0xc0a85322, &(0x7f0000000000)) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000800)={'ip6_vti0\x00', &(0x7f0000000780)={'ip6tnl0\x00', 0x0, 0x4, 0x5, 0x5, 0x7, 0x20, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8000, 0x40, 0x3ab0, 0xcee0}}) 13:22:32 executing program 6: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000000)={{{@in=@local, @in=@dev}}, {{@in6}}}, &(0x7f0000000100)=0xe8) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000140)={0x11, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0x5}, @pad1, @enc_lim={0x4, 0x1, 0x5d}, @jumbo, @jumbo={0xc2, 0x4, 0xc49}]}, 0x20) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair(0x25, 0xa, 0xbeb, &(0x7f0000000500)) accept4$inet6(r0, 0x0, &(0x7f00000005c0), 0x80800) socket$inet6(0xa, 0x3, 0x80000001) 13:22:32 executing program 5: setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e20, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xea8}, {0xa, 0x4e23, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0xf021}, 0x7, [0x5, 0xc8f, 0x2, 0xc86, 0x40, 0x80000000, 0xfffffff8, 0x3]}, 0x5c) r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x1c) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0xff}, {0xa, 0x4e22, 0x4, @empty, 0x2}, 0x0, [0x9, 0x57, 0x4, 0xfffffff9, 0x401, 0x7, 0xc4e9, 0x4]}, 0x5c) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000180)=@fragment={0x8, 0x0, 0x8, 0x1, 0x0, 0x6, 0x64}, 0x8) socket$inet6(0xa, 0x5, 0xfffffffd) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') socket$inet6(0xa, 0xa, 0x1ff) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=0x1, 0x4) syz_open_dev$vcsa(&(0x7f0000000440), 0x8, 0xd0000) syz_io_uring_complete(0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs2/custom1\x00', 0x6, 0x0) 13:22:32 executing program 3: setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e20, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xea8}, {0xa, 0x4e23, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0xf021}, 0x7, [0x5, 0xc8f, 0x2, 0xc86, 0x40, 0x80000000, 0xfffffff8, 0x3]}, 0x5c) r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x1c) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0xff}, {0xa, 0x4e22, 0x4, @empty, 0x2}, 0x0, [0x9, 0x57, 0x4, 0xfffffff9, 0x401, 0x7, 0xc4e9, 0x4]}, 0x5c) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000180)=@fragment={0x8, 0x0, 0x8, 0x1, 0x0, 0x6, 0x64}, 0x8) r1 = socket$inet6(0xa, 0x5, 0xfffffffd) accept$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000200)=0x1c) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') socket$inet6(0xa, 0x4, 0x20) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs2/custom1\x00', 0x6, 0x0) 13:22:32 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000180), 0x1, 0x82) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000800)={'ip6_vti0\x00', &(0x7f0000000780)={'ip6tnl0\x00', 0x0, 0x4, 0x5, 0x5, 0x7, 0x20, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8000, 0x40, 0x3ab0, 0xcee0}}) 13:22:32 executing program 7: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20, 0x7800, 0x99, 0x7fff}}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_TID={0xc}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x4) r3 = accept$packet(r1, 0x0, &(0x7f00000003c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000440)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x7f, r4}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', r2, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) r5 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r5, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), 0xffffffffffffffff) 13:22:32 executing program 0: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20, 0x7800, 0x99, 0x7fff}}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_TID={0xc}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x4) r3 = accept$packet(r1, 0x0, &(0x7f00000003c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000440)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x7f, r4}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', r2, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) r5 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r5) 13:22:32 executing program 2: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x40}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0xc0094) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r1, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7ff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7f}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x2000c051) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) syz_open_dev$vcsa(&(0x7f0000000400), 0x800, 0x80080) syz_io_uring_complete(0x0) 13:22:32 executing program 4: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x40}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0xc0094) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r1, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7ff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7f}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x2000c051) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x4c, r2, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1eedc1aa}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x96b0}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x626}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004801) syz_io_uring_complete(0x0) 13:22:32 executing program 1: r0 = syz_open_dev$vcsa(0x0, 0x1, 0x82) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000800)={'ip6_vti0\x00', &(0x7f0000000780)={'ip6tnl0\x00', 0x0, 0x4, 0x5, 0x5, 0x7, 0x20, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8000, 0x40, 0x3ab0, 0xcee0}}) 13:22:32 executing program 1: r0 = syz_open_dev$vcsa(0x0, 0x1, 0x82) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000800)={'ip6_vti0\x00', &(0x7f0000000780)={'ip6tnl0\x00', 0x0, 0x4, 0x5, 0x5, 0x7, 0x20, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8000, 0x40, 0x3ab0, 0xcee0}}) 13:22:32 executing program 5: setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e20, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xea8}, {0xa, 0x4e23, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0xf021}, 0x7, [0x5, 0xc8f, 0x2, 0xc86, 0x40, 0x80000000, 0xfffffff8, 0x3]}, 0x5c) r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x1c) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0xff}, {0xa, 0x4e22, 0x4, @empty, 0x2}, 0x0, [0x9, 0x57, 0x4, 0xfffffff9, 0x401, 0x7, 0xc4e9, 0x4]}, 0x5c) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000180)=@fragment={0x8, 0x0, 0x8, 0x1, 0x0, 0x6, 0x64}, 0x8) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') socket$inet6(0xa, 0xa, 0x1ff) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=0x1, 0x4) syz_open_dev$vcsa(&(0x7f0000000440), 0x8, 0xd0000) syz_io_uring_complete(0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs2/custom1\x00', 0x6, 0x0) 13:22:32 executing program 6: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000000)={{{@in=@local, @in=@dev}}, {{@in6}}}, &(0x7f0000000100)=0xe8) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair(0x25, 0xa, 0xbeb, &(0x7f0000000500)) accept4$inet6(r0, 0x0, &(0x7f00000005c0), 0x80800) socket$inet6(0xa, 0x3, 0x80000001) 13:22:32 executing program 1: r0 = syz_open_dev$vcsa(0x0, 0x1, 0x82) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000800)={'ip6_vti0\x00', &(0x7f0000000780)={'ip6tnl0\x00', 0x0, 0x4, 0x5, 0x5, 0x7, 0x20, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8000, 0x40, 0x3ab0, 0xcee0}}) 13:22:32 executing program 4: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x40}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0xc0094) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r1, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7ff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7f}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x2000c051) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x4c, r2, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1eedc1aa}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x96b0}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x626}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004801) 13:22:32 executing program 5: setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e20, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xea8}, {0xa, 0x4e23, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0xf021}, 0x7, [0x5, 0xc8f, 0x2, 0xc86, 0x40, 0x80000000, 0xfffffff8, 0x3]}, 0x5c) r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x1c) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0xff}, {0xa, 0x4e22, 0x4, @empty, 0x2}, 0x0, [0x9, 0x57, 0x4, 0xfffffff9, 0x401, 0x7, 0xc4e9, 0x4]}, 0x5c) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000180)=@fragment={0x8, 0x0, 0x8, 0x1, 0x0, 0x6, 0x64}, 0x8) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') socket$inet6(0xa, 0xa, 0x1ff) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=0x1, 0x4) syz_open_dev$vcsa(&(0x7f0000000440), 0x8, 0xd0000) syz_io_uring_complete(0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs2/custom1\x00', 0x6, 0x0) 13:22:40 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000180), 0x0, 0x82) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000800)={'ip6_vti0\x00', &(0x7f0000000780)={'ip6tnl0\x00', 0x0, 0x4, 0x5, 0x5, 0x7, 0x20, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8000, 0x40, 0x3ab0, 0xcee0}}) 13:22:40 executing program 0: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20, 0x7800, 0x99, 0x7fff}}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_TID={0xc}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x4) r3 = accept$packet(r1, 0x0, &(0x7f00000003c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000440)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x7f, r4}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', r2, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) r5 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r5) 13:22:40 executing program 2: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x40}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0xc0094) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r1, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7ff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7f}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x2000c051) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) syz_open_dev$vcsa(&(0x7f0000000400), 0x800, 0x80080) syz_io_uring_complete(0x0) 13:22:40 executing program 3: setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e20, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xea8}, {0xa, 0x4e23, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0xf021}, 0x7, [0x5, 0xc8f, 0x2, 0xc86, 0x40, 0x80000000, 0xfffffff8, 0x3]}, 0x5c) r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x1c) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0xff}, {0xa, 0x4e22, 0x4, @empty, 0x2}, 0x0, [0x9, 0x57, 0x4, 0xfffffff9, 0x401, 0x7, 0xc4e9, 0x4]}, 0x5c) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000180)=@fragment={0x8, 0x0, 0x8, 0x1, 0x0, 0x6, 0x64}, 0x8) r1 = socket$inet6(0xa, 0x5, 0xfffffffd) accept$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000200)=0x1c) socket$inet6(0xa, 0x4, 0x20) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs2/custom1\x00', 0x6, 0x0) 13:22:40 executing program 7: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20, 0x7800, 0x99, 0x7fff}}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_TID={0xc}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x4) r3 = accept$packet(r1, 0x0, &(0x7f00000003c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000440)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x7f, r4}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', r2, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) r5 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r5, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), 0xffffffffffffffff) 13:22:40 executing program 5: setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e20, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xea8}, {0xa, 0x4e23, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0xf021}, 0x7, [0x5, 0xc8f, 0x2, 0xc86, 0x40, 0x80000000, 0xfffffff8, 0x3]}, 0x5c) r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x1c) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0xff}, {0xa, 0x4e22, 0x4, @empty, 0x2}, 0x0, [0x9, 0x57, 0x4, 0xfffffff9, 0x401, 0x7, 0xc4e9, 0x4]}, 0x5c) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') socket$inet6(0xa, 0xa, 0x1ff) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=0x1, 0x4) syz_open_dev$vcsa(&(0x7f0000000440), 0x8, 0xd0000) syz_io_uring_complete(0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs2/custom1\x00', 0x6, 0x0) 13:22:40 executing program 6: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000000)={{{@in=@local, @in=@dev}}, {{@in6}}}, &(0x7f0000000100)=0xe8) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair(0x25, 0xa, 0xbeb, &(0x7f0000000500)) accept4$inet6(r0, 0x0, &(0x7f00000005c0), 0x80800) socket$inet6(0xa, 0x3, 0x80000001) 13:22:40 executing program 4: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x40}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0xc0094) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r1, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7ff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7f}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x2000c051) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) 13:22:40 executing program 5: setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e20, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xea8}, {0xa, 0x4e23, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0xf021}, 0x7, [0x5, 0xc8f, 0x2, 0xc86, 0x40, 0x80000000, 0xfffffff8, 0x3]}, 0x5c) accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x1c) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') socket$inet6(0xa, 0xa, 0x1ff) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=0x1, 0x4) syz_open_dev$vcsa(&(0x7f0000000440), 0x8, 0xd0000) syz_io_uring_complete(0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs2/custom1\x00', 0x6, 0x0) 13:22:40 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000180), 0x0, 0x82) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000800)={'ip6_vti0\x00', &(0x7f0000000780)={'ip6tnl0\x00', 0x0, 0x4, 0x5, 0x5, 0x7, 0x20, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8000, 0x40, 0x3ab0, 0xcee0}}) 13:22:40 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair(0x25, 0xa, 0xbeb, &(0x7f0000000500)) accept4$inet6(r0, 0x0, &(0x7f00000005c0), 0x80800) socket$inet6(0xa, 0x3, 0x80000001) 13:22:40 executing program 5: setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e20, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xea8}, {0xa, 0x4e23, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0xf021}, 0x7, [0x5, 0xc8f, 0x2, 0xc86, 0x40, 0x80000000, 0xfffffff8, 0x3]}, 0x5c) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') socket$inet6(0xa, 0xa, 0x1ff) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=0x1, 0x4) syz_open_dev$vcsa(&(0x7f0000000440), 0x8, 0xd0000) syz_io_uring_complete(0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs2/custom1\x00', 0x6, 0x0) 13:22:40 executing program 7: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20, 0x7800, 0x99, 0x7fff}}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_TID={0xc}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x4) r3 = accept$packet(r1, 0x0, &(0x7f00000003c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000440)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x7f, r4}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', r2, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) r5 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r5, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) r6 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r6) 13:22:40 executing program 3: setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e20, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xea8}, {0xa, 0x4e23, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0xf021}, 0x7, [0x5, 0xc8f, 0x2, 0xc86, 0x40, 0x80000000, 0xfffffff8, 0x3]}, 0x5c) r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x1c) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0xff}, {0xa, 0x4e22, 0x4, @empty, 0x2}, 0x0, [0x9, 0x57, 0x4, 0xfffffff9, 0x401, 0x7, 0xc4e9, 0x4]}, 0x5c) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000180)=@fragment={0x8, 0x0, 0x8, 0x1, 0x0, 0x6, 0x64}, 0x8) r1 = socket$inet6(0xa, 0x5, 0xfffffffd) accept$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000200)=0x1c) socket$inet6(0xa, 0x4, 0x20) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs2/custom1\x00', 0x6, 0x0) 13:22:48 executing program 0: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20, 0x7800, 0x99, 0x7fff}}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_TID={0xc}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x4) r2 = accept$packet(r1, 0x0, &(0x7f00000003c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000440)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x7f, r3}) r4 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r4, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) r5 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r5) 13:22:48 executing program 4: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x40}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0xc0094) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) 13:22:48 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') socket$inet6(0xa, 0xa, 0x1ff) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=0x1, 0x4) syz_open_dev$vcsa(&(0x7f0000000440), 0x8, 0xd0000) syz_io_uring_complete(0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs2/custom1\x00', 0x6, 0x0) 13:22:48 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair(0x0, 0xa, 0xbeb, &(0x7f0000000500)) accept4$inet6(r0, 0x0, &(0x7f00000005c0), 0x80800) socket$inet6(0xa, 0x3, 0x80000001) 13:22:48 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000180), 0x0, 0x82) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000800)={'ip6_vti0\x00', &(0x7f0000000780)={'ip6tnl0\x00', 0x0, 0x4, 0x5, 0x5, 0x7, 0x20, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8000, 0x40, 0x3ab0, 0xcee0}}) 13:22:48 executing program 3: setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e20, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xea8}, {0xa, 0x4e23, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0xf021}, 0x7, [0x5, 0xc8f, 0x2, 0xc86, 0x40, 0x80000000, 0xfffffff8, 0x3]}, 0x5c) r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x1c) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0xff}, {0xa, 0x4e22, 0x4, @empty, 0x2}, 0x0, [0x9, 0x57, 0x4, 0xfffffff9, 0x401, 0x7, 0xc4e9, 0x4]}, 0x5c) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000180)=@fragment={0x8, 0x0, 0x8, 0x1, 0x0, 0x6, 0x64}, 0x8) r1 = socket$inet6(0xa, 0x5, 0xfffffffd) accept$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000200)=0x1c) socket$inet6(0xa, 0x4, 0x20) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs2/custom1\x00', 0x6, 0x0) 13:22:48 executing program 7: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20, 0x7800, 0x99, 0x7fff}}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_TID={0xc}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x4) r3 = accept$packet(r1, 0x0, &(0x7f00000003c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000440)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x7f, r4}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', r2, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) r5 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r5, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) r6 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r6) 13:22:48 executing program 2: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x40}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0xc0094) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r1, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7ff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7f}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x2000c051) syz_open_dev$vcsa(&(0x7f0000000400), 0x800, 0x80080) syz_io_uring_complete(0x0) 13:22:48 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000180), 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000800)={'ip6_vti0\x00', &(0x7f0000000780)={'ip6tnl0\x00', 0x0, 0x4, 0x5, 0x5, 0x7, 0x20, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8000, 0x40, 0x3ab0, 0xcee0}}) 13:22:48 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, 0x0) socket$inet6(0xa, 0xa, 0x1ff) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=0x1, 0x4) syz_open_dev$vcsa(&(0x7f0000000440), 0x8, 0xd0000) syz_io_uring_complete(0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs2/custom1\x00', 0x6, 0x0) 13:22:48 executing program 1: syz_open_dev$vcsa(&(0x7f0000000180), 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000800)={'ip6_vti0\x00', &(0x7f0000000780)={'ip6tnl0\x00', 0x0, 0x4, 0x5, 0x5, 0x7, 0x20, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8000, 0x40, 0x3ab0, 0xcee0}}) 13:22:57 executing program 1: syz_open_dev$vcsa(&(0x7f0000000180), 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000800)={'ip6_vti0\x00', &(0x7f0000000780)={'ip6tnl0\x00', 0x0, 0x4, 0x5, 0x5, 0x7, 0x20, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8000, 0x40, 0x3ab0, 0xcee0}}) 13:22:57 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, 0x0) socket$inet6(0xa, 0xa, 0x1ff) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=0x1, 0x4) syz_open_dev$vcsa(&(0x7f0000000440), 0x8, 0xd0000) syz_io_uring_complete(0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs2/custom1\x00', 0x6, 0x0) 13:22:57 executing program 4: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x40}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0xc0094) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) 13:22:57 executing program 0: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20, 0x7800, 0x99, 0x7fff}}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_TID={0xc}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x4) r2 = accept$packet(r1, 0x0, &(0x7f00000003c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000440)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x7f, r3}) r4 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r4, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) r5 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r5) 13:22:57 executing program 3: setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e20, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xea8}, {0xa, 0x4e23, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0xf021}, 0x7, [0x5, 0xc8f, 0x2, 0xc86, 0x40, 0x80000000, 0xfffffff8, 0x3]}, 0x5c) r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x1c) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0xff}, {0xa, 0x4e22, 0x4, @empty, 0x2}, 0x0, [0x9, 0x57, 0x4, 0xfffffff9, 0x401, 0x7, 0xc4e9, 0x4]}, 0x5c) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000180)=@fragment={0x8, 0x0, 0x8, 0x1, 0x0, 0x6, 0x64}, 0x8) socket$inet6(0xa, 0x5, 0xfffffffd) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') socket$inet6(0xa, 0x4, 0x20) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs2/custom1\x00', 0x6, 0x0) 13:22:57 executing program 2: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x40}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0xc0094) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) syz_open_dev$vcsa(&(0x7f0000000400), 0x800, 0x80080) syz_io_uring_complete(0x0) 13:22:57 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair(0x0, 0x0, 0xbeb, &(0x7f0000000500)) accept4$inet6(r0, 0x0, &(0x7f00000005c0), 0x80800) socket$inet6(0xa, 0x3, 0x80000001) 13:22:57 executing program 7: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20, 0x7800, 0x99, 0x7fff}}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_TID={0xc}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x4) r3 = accept$packet(r1, 0x0, &(0x7f00000003c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000440)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x7f, r4}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', r2, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) r5 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r5, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) r6 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r6) 13:22:57 executing program 1: syz_open_dev$vcsa(&(0x7f0000000180), 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000800)={'ip6_vti0\x00', &(0x7f0000000780)={'ip6tnl0\x00', 0x0, 0x4, 0x5, 0x5, 0x7, 0x20, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8000, 0x40, 0x3ab0, 0xcee0}}) 13:22:57 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, 0x0) socket$inet6(0xa, 0xa, 0x1ff) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=0x1, 0x4) syz_open_dev$vcsa(&(0x7f0000000440), 0x8, 0xd0000) syz_io_uring_complete(0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs2/custom1\x00', 0x6, 0x0) 13:22:57 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000500)) accept4$inet6(r0, 0x0, &(0x7f00000005c0), 0x80800) socket$inet6(0xa, 0x3, 0x80000001) 13:22:57 executing program 2: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x40}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0xc0094) syz_open_dev$vcsa(&(0x7f0000000400), 0x800, 0x80080) syz_io_uring_complete(0x0) 13:22:57 executing program 4: syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) 13:22:57 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') socket$inet6(0xa, 0x0, 0x1ff) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=0x1, 0x4) syz_open_dev$vcsa(&(0x7f0000000440), 0x8, 0xd0000) syz_io_uring_complete(0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs2/custom1\x00', 0x6, 0x0) 13:22:57 executing program 0: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20, 0x7800, 0x99, 0x7fff}}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_TID={0xc}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x4) r2 = accept$packet(r1, 0x0, &(0x7f00000003c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000400)) r3 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r3, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) r4 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r4) 13:22:57 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000180), 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, 0x0) 13:22:58 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) accept4$inet6(r0, 0x0, &(0x7f00000005c0), 0x80800) socket$inet6(0xa, 0x3, 0x80000001) 13:22:58 executing program 7: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20, 0x7800, 0x99, 0x7fff}}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_TID={0xc}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x4) r3 = accept$packet(r1, 0x0, &(0x7f00000003c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000440)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x7f, r4}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', r2, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) r5 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r5) 13:22:58 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) syz_open_dev$vcsa(&(0x7f0000000400), 0x800, 0x80080) syz_io_uring_complete(0x0) 13:22:58 executing program 3: setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e20, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xea8}, {0xa, 0x4e23, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0xf021}, 0x7, [0x5, 0xc8f, 0x2, 0xc86, 0x40, 0x80000000, 0xfffffff8, 0x3]}, 0x5c) r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x1c) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0xff}, {0xa, 0x4e22, 0x4, @empty, 0x2}, 0x0, [0x9, 0x57, 0x4, 0xfffffff9, 0x401, 0x7, 0xc4e9, 0x4]}, 0x5c) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000180)=@fragment={0x8, 0x0, 0x8, 0x1, 0x0, 0x6, 0x64}, 0x8) socket$inet6(0xa, 0x5, 0xfffffffd) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') socket$inet6(0xa, 0x4, 0x20) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs2/custom1\x00', 0x6, 0x0) 13:22:58 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=0x1, 0x4) syz_open_dev$vcsa(&(0x7f0000000440), 0x8, 0xd0000) syz_io_uring_complete(0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs2/custom1\x00', 0x6, 0x0) 13:22:58 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) accept4$inet6(r0, 0x0, &(0x7f00000005c0), 0x80800) socket$inet6(0xa, 0x3, 0x80000001) 13:22:58 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) accept4$inet6(r0, 0x0, &(0x7f00000005c0), 0x80800) socket$inet6(0xa, 0x3, 0x80000001) 13:22:58 executing program 2: syz_open_dev$vcsa(&(0x7f0000000400), 0x800, 0x80080) syz_io_uring_complete(0x0) 13:22:58 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) accept4$inet6(r0, 0x0, &(0x7f00000005c0), 0x80800) socket$inet6(0xa, 0x3, 0x80000001) 13:22:58 executing program 4: syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) 13:22:58 executing program 2: syz_open_dev$vcsa(0x0, 0x800, 0x80080) syz_io_uring_complete(0x0) 13:22:58 executing program 7: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20, 0x7800, 0x99, 0x7fff}}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_TID={0xc}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x4) r3 = accept$packet(r1, 0x0, &(0x7f00000003c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000440)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x7f, r4}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', r2, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) r5 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r5) 13:22:58 executing program 6: socket$inet6_tcp(0xa, 0x1, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000500)) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f00000005c0), 0x80800) socket$inet6(0xa, 0x3, 0x80000001) 13:23:06 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) accept4$inet6(r0, 0x0, &(0x7f00000005c0), 0x80800) socket$inet6(0xa, 0x3, 0x80000001) 13:23:06 executing program 2: syz_open_dev$vcsa(0x0, 0x800, 0x80080) syz_io_uring_complete(0x0) 13:23:06 executing program 0: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20, 0x7800, 0x99, 0x7fff}}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_TID={0xc}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x4) r2 = accept$packet(r1, 0x0, &(0x7f00000003c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000400)) r3 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r3, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) r4 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r4) 13:23:06 executing program 6: socket$inet6_tcp(0xa, 0x1, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000500)) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f00000005c0), 0x80800) socket$inet6(0xa, 0x3, 0x80000001) 13:23:06 executing program 3: setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e20, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xea8}, {0xa, 0x4e23, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0xf021}, 0x7, [0x5, 0xc8f, 0x2, 0xc86, 0x40, 0x80000000, 0xfffffff8, 0x3]}, 0x5c) r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x1c) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0xff}, {0xa, 0x4e22, 0x4, @empty, 0x2}, 0x0, [0x9, 0x57, 0x4, 0xfffffff9, 0x401, 0x7, 0xc4e9, 0x4]}, 0x5c) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000180)=@fragment={0x8, 0x0, 0x8, 0x1, 0x0, 0x6, 0x64}, 0x8) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') socket$inet6(0xa, 0x4, 0x20) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs2/custom1\x00', 0x6, 0x0) 13:23:06 executing program 4: syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 13:23:06 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=0x1, 0x4) syz_open_dev$vcsa(&(0x7f0000000440), 0x8, 0xd0000) syz_io_uring_complete(0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs2/custom1\x00', 0x6, 0x0) 13:23:06 executing program 7: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20, 0x7800, 0x99, 0x7fff}}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_TID={0xc}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x4) r3 = accept$packet(r1, 0x0, &(0x7f00000003c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000440)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x7f, r4}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', r2, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) r5 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r5) 13:23:06 executing program 6: socket$inet6_tcp(0xa, 0x1, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000500)) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f00000005c0), 0x80800) socket$inet6(0xa, 0x3, 0x80000001) 13:23:06 executing program 4: syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 13:23:13 executing program 2: syz_open_dev$vcsa(0x0, 0x800, 0x80080) syz_io_uring_complete(0x0) 13:23:13 executing program 0: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20, 0x7800, 0x99, 0x7fff}}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_TID={0xc}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x4) r2 = accept$packet(r1, 0x0, &(0x7f00000003c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000400)) r3 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r3, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) r4 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r4) 13:23:13 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000500)) accept4$inet6(r0, 0x0, 0x0, 0x80800) socket$inet6(0xa, 0x3, 0x80000001) 13:23:13 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) accept4$inet6(r0, 0x0, &(0x7f00000005c0), 0x80800) socket$inet6(0xa, 0x3, 0x80000001) 13:23:13 executing program 3: setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e20, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xea8}, {0xa, 0x4e23, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0xf021}, 0x7, [0x5, 0xc8f, 0x2, 0xc86, 0x40, 0x80000000, 0xfffffff8, 0x3]}, 0x5c) r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x1c) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0xff}, {0xa, 0x4e22, 0x4, @empty, 0x2}, 0x0, [0x9, 0x57, 0x4, 0xfffffff9, 0x401, 0x7, 0xc4e9, 0x4]}, 0x5c) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') socket$inet6(0xa, 0x4, 0x20) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs2/custom1\x00', 0x6, 0x0) 13:23:13 executing program 7: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20, 0x7800, 0x99, 0x7fff}}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_TID={0xc}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x4) r3 = accept$packet(r1, 0x0, &(0x7f00000003c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000440)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x7f, r4}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', r2, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) r5 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r5) 13:23:13 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=0x1, 0x4) syz_open_dev$vcsa(&(0x7f0000000440), 0x8, 0xd0000) syz_io_uring_complete(0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs2/custom1\x00', 0x6, 0x0) 13:23:13 executing program 4: syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 13:23:22 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000440), 0x8, 0xd0000) syz_io_uring_complete(0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs2/custom1\x00', 0x6, 0x0) 13:23:22 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000500)) accept4$inet6(r0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x80000001) 13:23:22 executing program 3: setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e20, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xea8}, {0xa, 0x4e23, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0xf021}, 0x7, [0x5, 0xc8f, 0x2, 0xc86, 0x40, 0x80000000, 0xfffffff8, 0x3]}, 0x5c) r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x1c) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0xff}, {0xa, 0x4e22, 0x4, @empty, 0x2}, 0x0, [0x9, 0x57, 0x4, 0xfffffff9, 0x401, 0x7, 0xc4e9, 0x4]}, 0x5c) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') socket$inet6(0xa, 0x4, 0x20) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs2/custom1\x00', 0x6, 0x0) 13:23:22 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) accept4$inet6(r0, 0x0, &(0x7f00000005c0), 0x80800) 13:23:22 executing program 2: syz_open_dev$vcsa(&(0x7f0000000400), 0x0, 0x80080) syz_io_uring_complete(0x0) 13:23:22 executing program 7: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20, 0x7800, 0x99, 0x7fff}}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_TID={0xc}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x4) r3 = accept$packet(r1, 0x0, &(0x7f00000003c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000440)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x7f, r4}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', r2, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) r5 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r5) 13:23:22 executing program 0: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20, 0x7800, 0x99, 0x7fff}}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_TID={0xc}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x4) accept$packet(r1, 0x0, &(0x7f00000003c0)) r2 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r2, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) r3 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r3) 13:23:22 executing program 4: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20, 0x7800, 0x99, 0x7fff}}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_TID={0xc}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x4) r3 = accept$packet(r1, 0x0, &(0x7f00000003c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000440)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x7f, r4}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', r2, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) r5 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r5) 13:23:23 executing program 2: syz_open_dev$vcsa(&(0x7f0000000400), 0x0, 0x0) syz_io_uring_complete(0x0) 13:23:23 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) 13:23:23 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000500)) accept4$inet6(r0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x80000001) 13:23:23 executing program 4: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20, 0x7800, 0x99, 0x7fff}}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_TID={0xc}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x4) r3 = accept$packet(r1, 0x0, &(0x7f00000003c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000440)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x7f, r4}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', r2, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) r5 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r5) 13:23:23 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0x8, 0xd0000) syz_io_uring_complete(0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs2/custom1\x00', 0x6, 0x0) 13:23:23 executing program 1: socketpair(0x0, 0x0, 0x0, 0x0) 13:23:23 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000440), 0x8, 0xd0000) syz_io_uring_complete(0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs2/custom1\x00', 0x6, 0x0) 13:23:23 executing program 3: setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e20, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xea8}, {0xa, 0x4e23, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0xf021}, 0x7, [0x5, 0xc8f, 0x2, 0xc86, 0x40, 0x80000000, 0xfffffff8, 0x3]}, 0x5c) accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x1c) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') socket$inet6(0xa, 0x4, 0x20) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs2/custom1\x00', 0x6, 0x0) 13:23:23 executing program 7: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20, 0x7800, 0x99, 0x7fff}}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_TID={0xc}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x4) r3 = accept$packet(r1, 0x0, &(0x7f00000003c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000440)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x7f, r4}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', r2, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) r5 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r5) 13:23:23 executing program 0: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20, 0x7800, 0x99, 0x7fff}}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_TID={0xc}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x4) r2 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r2, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) r3 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r3) 13:23:23 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000500)) accept4$inet6(r0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x80000001) 13:23:23 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000500)) accept4$inet6(r0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x80000001) 13:23:23 executing program 4: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20, 0x7800, 0x99, 0x7fff}}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_TID={0xc}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x4) r3 = accept$packet(r1, 0x0, &(0x7f00000003c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000440)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x7f, r4}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', r2, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) r5 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r5) 13:23:23 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000440), 0x8, 0xd0000) syz_io_uring_complete(0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs2/custom1\x00', 0x6, 0x0) 13:23:23 executing program 7: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20, 0x7800, 0x99, 0x7fff}}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_TID={0xc}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x4) r2 = accept$packet(r1, 0x0, &(0x7f00000003c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000440)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x7f, r3}) r4 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r4, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) r5 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r5) 13:23:23 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000500)) accept4$inet6(r0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x80000001) 13:23:23 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000500)) accept4$inet6(r0, 0x0, 0x0, 0x80800) socket$inet6(0xa, 0x0, 0x80000001) 13:23:23 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0x8, 0xd0000) syz_io_uring_complete(0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs2/custom1\x00', 0x6, 0x0) 13:23:24 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000500)) accept4$inet6(r0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x80000001) 13:23:32 executing program 0: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20, 0x7800, 0x99, 0x7fff}}) r2 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r2, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) r3 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r3) 13:23:32 executing program 3: setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e20, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xea8}, {0xa, 0x4e23, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0xf021}, 0x7, [0x5, 0xc8f, 0x2, 0xc86, 0x40, 0x80000000, 0xfffffff8, 0x3]}, 0x5c) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') socket$inet6(0xa, 0x4, 0x20) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs2/custom1\x00', 0x6, 0x0) 13:23:32 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000440), 0x8, 0xd0000) syz_io_uring_complete(0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs2/custom1\x00', 0x6, 0x0) 13:23:32 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000500)) socket$inet6(0xa, 0x3, 0x80000001) 13:23:32 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0x8, 0xd0000) syz_io_uring_complete(0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs2/custom1\x00', 0x6, 0x0) 13:23:32 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000500)) accept4$inet6(r0, 0x0, 0x0, 0x80800) socket$inet6(0xa, 0x0, 0x80000001) 13:23:32 executing program 4: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20, 0x7800, 0x99, 0x7fff}}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_TID={0xc}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x4) r3 = accept$packet(r1, 0x0, &(0x7f00000003c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000440)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x7f, r4}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', r2, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) fsmount(0xffffffffffffffff, 0x1, 0xf5) 13:23:32 executing program 7: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20, 0x7800, 0x99, 0x7fff}}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_TID={0xc}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x4) r2 = accept$packet(r1, 0x0, &(0x7f00000003c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000440)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x7f, r3}) r4 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r4, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) r5 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r5) 13:23:32 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000500)) accept4$inet6(r0, 0x0, 0x0, 0x80800) socket$inet6(0xa, 0x0, 0x0) 13:23:39 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x3, 0x80000001) 13:23:39 executing program 4: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20, 0x7800, 0x99, 0x7fff}}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_TID={0xc}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x4) r3 = accept$packet(r1, 0x0, &(0x7f00000003c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000440)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x7f, r4}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', r2, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) 13:23:39 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000440), 0x0, 0xd0000) syz_io_uring_complete(0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs2/custom1\x00', 0x6, 0x0) 13:23:39 executing program 7: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20, 0x7800, 0x99, 0x7fff}}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_TID={0xc}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x4) r2 = accept$packet(r1, 0x0, &(0x7f00000003c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000440)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x7f, r3}) r4 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r4, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) r5 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r5) 13:23:39 executing program 0: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20, 0x7800, 0x99, 0x7fff}}) r2 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r2, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) r3 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r3) 13:23:39 executing program 3: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') socket$inet6(0xa, 0x4, 0x20) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs2/custom1\x00', 0x6, 0x0) 13:23:39 executing program 6: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20, 0x7800, 0x99, 0x7fff}}) r2 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r2, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) r3 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r3) 13:23:39 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000440), 0x8, 0xd0000) syz_io_uring_complete(0x0) 13:23:39 executing program 1: socket$inet6(0xa, 0x3, 0x80000001) 13:23:39 executing program 1: socket$inet6(0xa, 0x0, 0x80000001) 13:23:39 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000440), 0x8, 0xd0000) 13:23:39 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000440), 0x0, 0xd0000) syz_io_uring_complete(0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs2/custom1\x00', 0x6, 0x0) 13:23:40 executing program 1: socket$inet6(0xa, 0x0, 0x0) 13:23:40 executing program 4: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20, 0x7800, 0x99, 0x7fff}}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_TID={0xc}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x4) r3 = accept$packet(r1, 0x0, &(0x7f00000003c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000440)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x7f, r4}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', r2, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) 13:23:40 executing program 0: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20, 0x7800, 0x99, 0x7fff}}) r2 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r2, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) r3 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r3) 13:23:40 executing program 3: syz_open_procfs$namespace(0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x4, 0x20) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs2/custom1\x00', 0x6, 0x0) 13:23:40 executing program 6: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20, 0x7800, 0x99, 0x7fff}}) r2 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r2, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) r3 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r3) 13:23:40 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000440), 0x8, 0xd0000) 13:23:40 executing program 1: socket$inet6(0xa, 0x0, 0x0) 13:23:40 executing program 7: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20, 0x7800, 0x99, 0x7fff}}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_TID={0xc}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x4) r3 = accept$packet(r1, 0x0, &(0x7f00000003c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000400)) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', r2, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) r4 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r4, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) r5 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r5) 13:23:40 executing program 0: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) r1 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) r2 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r2) 13:23:48 executing program 6: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20, 0x7800, 0x99, 0x7fff}}) r2 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r2, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) r3 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r3) 13:23:48 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000440), 0x0, 0xd0000) syz_io_uring_complete(0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs2/custom1\x00', 0x6, 0x0) 13:23:48 executing program 4: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20, 0x7800, 0x99, 0x7fff}}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_TID={0xc}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x4) r3 = accept$packet(r1, 0x0, &(0x7f00000003c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000440)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x7f, r4}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', r2, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) 13:23:48 executing program 7: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20, 0x7800, 0x99, 0x7fff}}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_TID={0xc}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x4) r3 = accept$packet(r1, 0x0, &(0x7f00000003c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000400)) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', r2, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) r4 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r4, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) r5 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r5) 13:23:48 executing program 1: socket$inet6(0xa, 0x0, 0x0) 13:23:48 executing program 3: syz_open_procfs$namespace(0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x20) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs2/custom1\x00', 0x6, 0x0) 13:23:48 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) 13:23:48 executing program 0: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) r1 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) r2 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r2) 13:23:48 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000440), 0x0, 0x0) syz_io_uring_complete(0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs2/custom1\x00', 0x6, 0x0) 13:23:48 executing program 6: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20, 0x7800, 0x99, 0x7fff}}) r2 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r2, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) fsmount(0xffffffffffffffff, 0x1, 0xf5) 13:23:48 executing program 4: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20, 0x7800, 0x99, 0x7fff}}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_TID={0xc}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x4) r3 = accept$packet(r1, 0x0, &(0x7f00000003c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000440)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x7f, r4}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', r2, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) 13:23:57 executing program 7: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20, 0x7800, 0x99, 0x7fff}}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_TID={0xc}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x4) r3 = accept$packet(r1, 0x0, &(0x7f00000003c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000400)) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', r2, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) r4 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r4, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) r5 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r5) 13:23:57 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000440), 0x0, 0x0) syz_io_uring_complete(0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x6, 0x0) 13:23:57 executing program 4: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20, 0x7800, 0x99, 0x7fff}}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_TID={0xc}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x4) r2 = accept$packet(r1, 0x0, &(0x7f00000003c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000440)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x7f, r3}) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) 13:23:57 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) 13:23:57 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000440), 0x0, 0xd0000) syz_io_uring_complete(0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs2/custom1\x00', 0x6, 0x0) 13:23:57 executing program 0: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) r1 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) r2 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r2) 13:23:57 executing program 6: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20, 0x7800, 0x99, 0x7fff}}) r2 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r2, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) fsmount(0xffffffffffffffff, 0x1, 0xf5) 13:23:57 executing program 3: syz_open_procfs$namespace(0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs2/custom1\x00', 0x6, 0x0) 13:23:57 executing program 0: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) r1 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) r2 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r2) 13:23:57 executing program 7: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20, 0x7800, 0x99, 0x7fff}}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_TID={0xc}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x4) accept$packet(r1, 0x0, &(0x7f00000003c0)) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000440)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x7f}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', r2, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) r3 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r3, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) r4 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r4) 13:23:57 executing program 4: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20, 0x7800, 0x99, 0x7fff}}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_TID={0xc}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x4) r2 = accept$packet(r1, 0x0, &(0x7f00000003c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000440)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x7f, r3}) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) 13:23:57 executing program 6: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20, 0x7800, 0x99, 0x7fff}}) r2 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r2, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) fsmount(0xffffffffffffffff, 0x1, 0xf5) 13:23:57 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') socket$inet6(0xa, 0x0, 0x0) 13:23:57 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000440), 0x0, 0x0) syz_io_uring_complete(0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x6, 0x0) 13:23:57 executing program 3: syz_open_procfs$namespace(0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x6, 0x0) 13:23:57 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000440), 0x0, 0xd0000) syz_io_uring_complete(0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs2/custom1\x00', 0x6, 0x0) 13:24:05 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000440), 0x0, 0xd0000) syz_io_uring_complete(0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs2/custom1\x00', 0x6, 0x0) 13:24:05 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') socket$inet6(0xa, 0x0, 0x0) 13:24:05 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000440), 0x0, 0x0) syz_io_uring_complete(0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x6, 0x0) 13:24:05 executing program 7: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20, 0x7800, 0x99, 0x7fff}}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_TID={0xc}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x4) accept$packet(r1, 0x0, &(0x7f00000003c0)) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000440)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x7f}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', r2, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) r3 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r3, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) r4 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r4) 13:24:05 executing program 6: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20, 0x7800, 0x99, 0x7fff}}) r2 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r2, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), 0xffffffffffffffff) 13:24:05 executing program 3: syz_open_procfs$namespace(0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 13:24:05 executing program 4: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20, 0x7800, 0x99, 0x7fff}}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_TID={0xc}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x4) r2 = accept$packet(r1, 0x0, &(0x7f00000003c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000440)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x7f, r3}) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) 13:24:05 executing program 0: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) r1 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) r2 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r2) 13:24:06 executing program 4: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20, 0x7800, 0x99, 0x7fff}}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_TID={0xc}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x4) r3 = accept$packet(r1, 0x0, &(0x7f00000003c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000400)) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', r2, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) 13:24:06 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000440), 0x0, 0xd0000) syz_io_uring_complete(0x0) 13:24:06 executing program 3: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') socket$inet6(0xa, 0x0, 0x0) 13:24:06 executing program 7: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20, 0x7800, 0x99, 0x7fff}}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_TID={0xc}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x4) accept$packet(r1, 0x0, &(0x7f00000003c0)) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000440)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x7f}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', r2, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) r3 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r3, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) r4 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r4) 13:24:06 executing program 4: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20, 0x7800, 0x99, 0x7fff}}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_TID={0xc}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x4) r3 = accept$packet(r1, 0x0, &(0x7f00000003c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000400)) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', r2, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) 13:24:06 executing program 0: sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) r0 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r0, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), 0xffffffffffffffff) r1 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r1) 13:24:06 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') 13:24:06 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, 0x0) 13:24:06 executing program 6: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20, 0x7800, 0x99, 0x7fff}}) r2 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r2, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), 0xffffffffffffffff) 13:24:06 executing program 4: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20, 0x7800, 0x99, 0x7fff}}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_TID={0xc}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x4) accept$packet(r1, 0x0, &(0x7f00000003c0)) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', r2, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) 13:24:06 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000440), 0x0, 0x0) syz_io_uring_complete(0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs2/custom1\x00', 0x0, 0x0) 13:24:06 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000440), 0x0, 0xd0000) syz_io_uring_complete(0x0) 13:24:14 executing program 7: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20, 0x7800, 0x99, 0x7fff}}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_TID={0xc}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x4) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000440)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x7f}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', r2, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) r3 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r3, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) r4 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r4) 13:24:14 executing program 0: sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) r0 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r0, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), 0xffffffffffffffff) r1 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r1) 13:24:14 executing program 3: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') socket$inet6(0xa, 0x0, 0x0) 13:24:14 executing program 6: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20, 0x7800, 0x99, 0x7fff}}) r2 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r2, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), 0xffffffffffffffff) 13:24:14 executing program 4: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20, 0x7800, 0x99, 0x7fff}}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_TID={0xc}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x4) accept$packet(r1, 0x0, &(0x7f00000003c0)) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', r2, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) 13:24:14 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000440), 0x0, 0xd0000) 13:24:14 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000440), 0x0, 0x0) syz_io_uring_complete(0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs2/custom1\x00', 0x0, 0x0) 13:24:14 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, 0x0) 13:24:23 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, 0x0) 13:24:23 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000440), 0x0, 0xd0000) 13:24:23 executing program 3: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') socket$inet6(0xa, 0x0, 0x0) 13:24:23 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000440), 0x0, 0x0) syz_io_uring_complete(0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs2/custom1\x00', 0x0, 0x0) 13:24:23 executing program 0: sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) r0 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r0, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), 0xffffffffffffffff) r1 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r1) 13:24:23 executing program 6: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20, 0x7800, 0x99, 0x7fff}}) r2 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r2, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) r3 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r3) 13:24:23 executing program 7: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20, 0x7800, 0x99, 0x7fff}}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000440)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x7f}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', r2, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) r3 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r3, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) r4 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r4) 13:24:23 executing program 4: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20, 0x7800, 0x99, 0x7fff}}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_TID={0xc}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x4) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', r2, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) 13:24:23 executing program 3: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') 13:24:23 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000440), 0x0, 0xd0000) 13:24:23 executing program 6: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20, 0x7800, 0x99, 0x7fff}}) r2 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r2, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) r3 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r3) 13:24:23 executing program 3: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') 13:24:23 executing program 7: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000440)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x7f}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', 0x0, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) r2 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r2, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) r3 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r3) 13:24:23 executing program 0: socketpair(0x0, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) r1 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) r2 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r2) 13:24:23 executing program 4: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20, 0x7800, 0x99, 0x7fff}}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_TID={0xc}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x4) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', r2, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) 13:24:23 executing program 6: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20, 0x7800, 0x99, 0x7fff}}) r2 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r2, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) r3 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r3) 13:24:24 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000440), 0x0, 0xd0000) 13:24:24 executing program 3: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') 13:24:24 executing program 5: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20, 0x7800, 0x99, 0x7fff}}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_TID={0xc}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x4) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', r2, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) 13:24:24 executing program 7: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000440)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x7f}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', 0x0, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) r2 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r2, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) r3 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r3) 13:24:24 executing program 3: syz_open_procfs$namespace(0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) 13:24:32 executing program 0: socketpair(0x0, 0x0, 0x1, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) r1 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) r2 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r2) 13:24:32 executing program 3: syz_open_procfs$namespace(0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) 13:24:32 executing program 6: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20, 0x7800, 0x99, 0x7fff}}) socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) r2 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r2) 13:24:32 executing program 7: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000440)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x7f}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', 0x0, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) r2 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r2, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) r3 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r3) 13:24:32 executing program 4: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20, 0x7800, 0x99, 0x7fff}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', r2, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) 13:24:32 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) 13:24:32 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000440), 0x0, 0xd0000) 13:24:32 executing program 5: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20, 0x7800, 0x99, 0x7fff}}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_TID={0xc}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x4) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', r2, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) 13:24:32 executing program 6: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20, 0x7800, 0x99, 0x7fff}}) socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) r2 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r2) 13:24:32 executing program 4: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20, 0x7800, 0x99, 0x7fff}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', r2, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) 13:24:32 executing program 7: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000440)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x7f}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', 0x0, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) r2 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r2, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) r3 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r3) 13:24:32 executing program 5: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20, 0x7800, 0x99, 0x7fff}}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_TID={0xc}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x4) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', r2, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) 13:24:32 executing program 0: socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) r1 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) r2 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r2) 13:24:32 executing program 3: syz_open_procfs$namespace(0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) 13:24:32 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000440), 0x0, 0xd0000) 13:24:32 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) 13:24:33 executing program 5: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20, 0x7800, 0x99, 0x7fff}}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_TID={0xc}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x4) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) 13:24:41 executing program 4: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20, 0x7800, 0x99, 0x7fff}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', r2, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) 13:24:41 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) 13:24:41 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) 13:24:41 executing program 7: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000440)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x7f}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', 0x0, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) r2 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r2, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) r3 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r3) 13:24:41 executing program 0: socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) r1 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) r2 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r2) 13:24:41 executing program 5: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20, 0x7800, 0x99, 0x7fff}}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_TID={0xc}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x4) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) 13:24:41 executing program 6: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20, 0x7800, 0x99, 0x7fff}}) socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) r2 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r2) 13:24:41 executing program 3: syz_open_procfs$namespace(0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) 13:24:41 executing program 3: syz_open_procfs$namespace(0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) 13:24:41 executing program 5: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20, 0x7800, 0x99, 0x7fff}}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_TID={0xc}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x4) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) 13:24:41 executing program 7: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000440)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x7f}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', 0x0, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) r2 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r2, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) r3 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r3) 13:24:41 executing program 4: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_TID={0xc}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x4) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', 0x0, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) 13:24:41 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') socket$inet6(0xa, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000440), 0x0, 0xd0000) 13:24:41 executing program 0: socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) r1 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) r2 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r2) 13:24:41 executing program 3: syz_open_procfs$namespace(0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) 13:24:41 executing program 6: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) r1 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) r2 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r2) 13:24:42 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') socket$inet6(0xa, 0x0, 0x0) 13:24:42 executing program 4: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_TID={0xc}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x4) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', 0x0, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) 13:24:50 executing program 4: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_TID={0xc}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x4) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', 0x0, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) 13:24:50 executing program 5: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20, 0x7800, 0x99, 0x7fff}}) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) 13:24:50 executing program 6: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) r1 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) r2 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r2) 13:24:50 executing program 3: socket$inet6(0xa, 0x0, 0x0) 13:24:50 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') socket$inet6(0xa, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000440), 0x0, 0xd0000) 13:24:50 executing program 7: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000440)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x7f}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', 0x0, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) r2 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r2, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) r3 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r3) 13:24:50 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') socket$inet6(0xa, 0x0, 0x0) 13:24:50 executing program 0: socketpair(0x0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) r0 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r0, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), 0xffffffffffffffff) r1 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r1) 13:24:50 executing program 4: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_TID={0xc}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x4) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', 0x0, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) 13:24:58 executing program 0: socketpair(0x0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) r0 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r0, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), 0xffffffffffffffff) r1 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r1) 13:24:58 executing program 3: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') socket$inet6(0xa, 0x0, 0x0) 13:24:58 executing program 5: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) 13:24:58 executing program 4: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_TID={0xc}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x4) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', 0x0, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) 13:24:58 executing program 6: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) r1 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) r2 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r2) 13:24:58 executing program 7: sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000440)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x7f}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', 0x0, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) r0 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r0, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), 0xffffffffffffffff) r1 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r1) 13:24:58 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') 13:24:58 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') socket$inet6(0xa, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000440), 0x0, 0xd0000) 13:24:59 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, 0x0) 13:24:59 executing program 7: sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000440)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x7f}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', 0x0, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) r0 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r0, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), 0xffffffffffffffff) r1 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r1) 13:24:59 executing program 5: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) 13:24:59 executing program 0: socketpair(0x0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) r0 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r0, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), 0xffffffffffffffff) r1 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r1) 13:24:59 executing program 6: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20, 0x7800, 0x99, 0x7fff}}) r2 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r2, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) r3 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r3) 13:24:59 executing program 3: socketpair(0x0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) r0 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r0, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), 0xffffffffffffffff) r1 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r1) 13:24:59 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, 0x0) 13:24:59 executing program 4: sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_TID={0xc}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x4) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', 0x0, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), 0xffffffffffffffff) 13:24:59 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000440), 0x0, 0xd0000) 13:25:07 executing program 5: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) 13:25:07 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, 0x0) 13:25:07 executing program 0: socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x40) r1 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) r2 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r2) 13:25:07 executing program 7: sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000440)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x7f}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', 0x0, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) r0 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r0, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), 0xffffffffffffffff) r1 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r1) 13:25:07 executing program 6: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20, 0x7800, 0x99, 0x7fff}}) r2 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r2, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) r3 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r3) 13:25:07 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000440), 0x0, 0xd0000) 13:25:07 executing program 4: sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_TID={0xc}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x4) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', 0x0, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), 0xffffffffffffffff) 13:25:07 executing program 3: socketpair(0x0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) r0 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r0, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), 0xffffffffffffffff) r1 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r1) 13:25:07 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000440), 0x0, 0xd0000) 13:25:07 executing program 7: socketpair(0x0, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000440)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x7f}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', 0x0, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) r2 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r2, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) r3 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r3) 13:25:07 executing program 5: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) 13:25:07 executing program 4: sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_TID={0xc}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x4) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', 0x0, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), 0xffffffffffffffff) 13:25:07 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000440), 0x0, 0xd0000) 13:25:07 executing program 3: socketpair(0x0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) r0 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r0, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), 0xffffffffffffffff) r1 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r1) 13:25:07 executing program 6: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20, 0x7800, 0x99, 0x7fff}}) r2 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r2, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) r3 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r3) 13:25:07 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000440), 0x0, 0xd0000) 13:25:07 executing program 0: socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x40) r1 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) r2 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r2) 13:25:07 executing program 4: socketpair(0x0, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_TID={0xc}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x4) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', 0x0, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) 13:25:07 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000440), 0x0, 0xd0000) 13:25:16 executing program 3: socketpair(0x0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) r0 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r0, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), 0xffffffffffffffff) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), 0xffffffffffffffff) 13:25:16 executing program 0: socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x40) r1 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) r2 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r2) 13:25:16 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000440), 0x0, 0xd0000) 13:25:16 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000440), 0x0, 0xd0000) 13:25:16 executing program 5: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff}) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) 13:25:16 executing program 7: socketpair(0x0, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000440)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x7f}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', 0x0, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) r2 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r2, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) r3 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r3) 13:25:16 executing program 6: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20, 0x7800, 0x99, 0x7fff}}) r2 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r2, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) r3 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r3) 13:25:16 executing program 4: socketpair(0x0, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_TID={0xc}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x4) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', 0x0, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) 13:25:16 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') syz_open_dev$vcsa(&(0x7f0000000440), 0x0, 0xd0000) 13:25:16 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000440), 0x0, 0xd0000) 13:25:16 executing program 3: socketpair(0x0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) r0 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r0, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), 0xffffffffffffffff) 13:25:16 executing program 4: socketpair(0x0, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_TID={0xc}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x4) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', 0x0, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) 13:25:16 executing program 5: syz_genetlink_get_family_id$gtp(&(0x7f0000000700), 0xffffffffffffffff) 13:25:16 executing program 6: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20, 0x7800, 0x99, 0x7fff}}) r2 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r2, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) r3 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r3) 13:25:16 executing program 7: socketpair(0x0, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000440)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x7f}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', 0x0, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) r2 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r2, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) r3 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r3) 13:25:16 executing program 0: socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) r2 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r2) 13:25:16 executing program 2: syz_open_dev$vcsa(&(0x7f0000000440), 0x0, 0xd0000) 13:25:17 executing program 2: syz_open_dev$vcsa(&(0x7f0000000440), 0x0, 0xd0000) 13:25:17 executing program 7: socketpair(0x29, 0x0, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000440)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x7f}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', 0x0, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) r2 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r2, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) r3 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r3) 13:25:17 executing program 0: socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) getpeername$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) r2 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r2) 13:25:17 executing program 2: syz_open_dev$vcsa(&(0x7f0000000440), 0x0, 0xd0000) 13:25:17 executing program 4: socketpair(0x0, 0x0, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_TID={0xc}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x4) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', 0x0, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) 13:25:17 executing program 5: syz_genetlink_get_family_id$gtp(&(0x7f0000000700), 0xffffffffffffffff) 13:25:25 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000440), 0x0, 0xd0000) 13:25:25 executing program 7: socketpair(0x29, 0x0, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000440)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x7f}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', 0x0, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) r2 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r2, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) r3 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r3) 13:25:25 executing program 0: socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) getpeername$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) r2 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r2) 13:25:25 executing program 6: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20, 0x7800, 0x99, 0x7fff}}) r2 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r2, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) r3 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r3) 13:25:25 executing program 5: syz_genetlink_get_family_id$gtp(&(0x7f0000000700), 0xffffffffffffffff) 13:25:25 executing program 4: socketpair(0x0, 0x0, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_TID={0xc}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x4) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', 0x0, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) 13:25:25 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0xd0000) 13:25:25 executing program 3: socketpair(0x0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) r0 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r0, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), 0xffffffffffffffff) 13:25:25 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000440), 0x0, 0xd0000) 13:25:25 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000440), 0x0, 0xd0000) 13:25:25 executing program 0: socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) getpeername$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) r2 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r2) 13:25:25 executing program 4: socketpair(0x0, 0x0, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_TID={0xc}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x4) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', 0x0, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) 13:25:34 executing program 5: socketpair(0x0, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff}) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) 13:25:34 executing program 0: socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) getpeername$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) r1 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r1) 13:25:34 executing program 6: getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20, 0x7800, 0x99, 0x7fff}}) r0 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r0, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), 0xffffffffffffffff) r1 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r1) 13:25:34 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') syz_open_dev$vcsa(0x0, 0x0, 0xd0000) 13:25:34 executing program 3: socketpair(0x0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) r0 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r0, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), 0xffffffffffffffff) 13:25:34 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0xd0000) 13:25:34 executing program 4: socketpair(0x0, 0x802, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_TID={0xc}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x4) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', 0x0, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) 13:25:34 executing program 7: socketpair(0x29, 0x0, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000440)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x7f}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', 0x0, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) r2 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r2, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) r3 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r3) 13:25:34 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') syz_open_dev$vcsa(0x0, 0x0, 0xd0000) 13:25:34 executing program 3: socketpair(0x0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), 0xffffffffffffffff) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), 0xffffffffffffffff) 13:25:35 executing program 5: socketpair(0x0, 0x0, 0x1, &(0x7f0000000000)={0xffffffffffffffff}) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) 13:25:35 executing program 4: socketpair(0x0, 0x802, 0x0, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_TID={0xc}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x4) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', 0x0, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), 0xffffffffffffffff) 13:25:35 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') syz_open_dev$vcsa(0x0, 0x0, 0xd0000) 13:25:35 executing program 6: getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20, 0x7800, 0x99, 0x7fff}}) r0 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r0, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), 0xffffffffffffffff) r1 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r1) 13:25:35 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0xd0000) 13:25:35 executing program 0: socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) getpeername$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) r1 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r1) 13:25:42 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000440), 0x0, 0x0) 13:25:42 executing program 6: getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20, 0x7800, 0x99, 0x7fff}}) r0 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r0, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), 0xffffffffffffffff) r1 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r1) 13:25:42 executing program 7: socketpair(0x29, 0x802, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000440)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x7f}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', 0x0, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) r2 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r2, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) r3 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r3) 13:25:42 executing program 3: socketpair(0x0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), 0xffffffffffffffff) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), 0xffffffffffffffff) 13:25:42 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') syz_open_dev$vcsa(&(0x7f0000000440), 0x0, 0x0) 13:25:42 executing program 5: socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) 13:25:42 executing program 4: socketpair(0x0, 0x802, 0x0, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_TID={0xc}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x4) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', 0x0, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), 0xffffffffffffffff) 13:25:42 executing program 0: socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) getpeername$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) r1 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r1) 13:25:43 executing program 5: socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) 13:25:43 executing program 6: socketpair(0x0, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20, 0x7800, 0x99, 0x7fff}}) r2 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r2, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) r3 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r3) 13:25:43 executing program 7: socketpair(0x29, 0x802, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000440)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x7f}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', 0x0, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) r2 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r2, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) r3 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r3) 13:25:43 executing program 2: socketpair(0x29, 0x0, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000440)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x7f}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', 0x0, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) r2 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r2, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) r3 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r3) 13:25:43 executing program 3: socketpair(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), 0xffffffffffffffff) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), 0xffffffffffffffff) 13:25:43 executing program 4: socketpair(0x0, 0x802, 0x0, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_TID={0xc}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x4) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', 0x0, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), 0xffffffffffffffff) 13:25:52 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000440), 0x0, 0x0) 13:25:52 executing program 0: socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r1, 0x0, &(0x7f0000000580)) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) r2 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r2) 13:25:52 executing program 4: socketpair(0x0, 0x802, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_TID={0xc}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x4) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', 0x0, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) 13:25:52 executing program 6: socketpair(0x0, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20, 0x7800, 0x99, 0x7fff}}) r2 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r2, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) r3 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r3) 13:25:52 executing program 7: socketpair(0x29, 0x802, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000440)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x7f}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', 0x0, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) r2 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r2, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) r3 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r3) 13:25:52 executing program 3: socketpair(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), 0xffffffffffffffff) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), 0xffffffffffffffff) 13:25:52 executing program 2: socketpair(0x29, 0x0, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000440)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x7f}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', 0x0, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) r2 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r2, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) r3 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r3) 13:25:52 executing program 5: socketpair(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), 0xffffffffffffffff) 13:25:52 executing program 5: socketpair(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), 0xffffffffffffffff) 13:25:52 executing program 7: socketpair(0x29, 0x802, 0x1, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000440)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x7f}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', 0x0, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) r0 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r0, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), 0xffffffffffffffff) r1 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r1) 13:25:52 executing program 4: socketpair(0x0, 0x802, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_TID={0xc}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x4) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', 0x0, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) 13:25:52 executing program 6: socketpair(0x0, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20, 0x7800, 0x99, 0x7fff}}) r2 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r2, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) r3 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r3) 13:25:52 executing program 2: socketpair(0x29, 0x0, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000440)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x7f}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', 0x0, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) r2 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r2, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) r3 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r3) 13:25:52 executing program 5: socketpair(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), 0xffffffffffffffff) 13:25:52 executing program 3: socketpair(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), 0xffffffffffffffff) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), 0xffffffffffffffff) 13:25:52 executing program 0: socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r1, 0x0, &(0x7f0000000580)) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) r2 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r2) 13:25:52 executing program 5: socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) syz_genetlink_get_family_id$gtp(0x0, r0) 13:25:52 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000440), 0x0, 0x0) 13:25:52 executing program 4: socketpair(0x0, 0x802, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, 0x0, 0x4) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', 0x0, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) 13:25:52 executing program 3: sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), 0xffffffffffffffff) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), 0xffffffffffffffff) 13:26:00 executing program 4: socketpair(0x0, 0x802, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, 0x0, 0x4) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', 0x0, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) 13:26:00 executing program 6: socketpair(0x29, 0x0, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20, 0x7800, 0x99, 0x7fff}}) r2 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r2, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) r3 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r3) 13:26:00 executing program 7: socketpair(0x29, 0x802, 0x1, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000440)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x7f}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', 0x0, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) r0 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r0, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), 0xffffffffffffffff) r1 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r1) 13:26:00 executing program 3: sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), 0xffffffffffffffff) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), 0xffffffffffffffff) 13:26:00 executing program 5: socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) syz_genetlink_get_family_id$gtp(0x0, r0) 13:26:00 executing program 2: socketpair(0x29, 0x0, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000440)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x7f}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', 0x0, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) r2 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r2, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) fsmount(0xffffffffffffffff, 0x1, 0xf5) 13:26:00 executing program 0: socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r1, 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) r2 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r2) 13:26:00 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000440), 0x0, 0x0) 13:26:00 executing program 5: socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) syz_genetlink_get_family_id$gtp(0x0, r0) 13:26:00 executing program 3: sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), 0xffffffffffffffff) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), 0xffffffffffffffff) 13:26:08 executing program 1: socketpair(0x29, 0x0, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20, 0x7800, 0x99, 0x7fff}}) r2 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r2, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) r3 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r3) 13:26:08 executing program 6: socketpair(0x29, 0x0, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20, 0x7800, 0x99, 0x7fff}}) r2 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r2, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) r3 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r3) 13:26:08 executing program 2: socketpair(0x29, 0x0, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000440)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x7f}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', 0x0, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) r2 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r2, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) fsmount(0xffffffffffffffff, 0x1, 0xf5) 13:26:08 executing program 4: socketpair(0x0, 0x802, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', 0x0, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) 13:26:08 executing program 5: socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), 0xffffffffffffffff) 13:26:08 executing program 0: socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r1, 0x0, 0x0) syz_genetlink_get_family_id$gtp(0x0, r0) r2 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r2) 13:26:08 executing program 3: socketpair(0x0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x40) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), 0xffffffffffffffff) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), 0xffffffffffffffff) 13:26:08 executing program 7: socketpair(0x29, 0x802, 0x1, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000440)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x7f}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', 0x0, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) r0 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r0, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), 0xffffffffffffffff) r1 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r1) 13:26:08 executing program 2: socketpair(0x29, 0x0, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000440)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x7f}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', 0x0, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) r2 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r2, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) fsmount(0xffffffffffffffff, 0x1, 0xf5) 13:26:08 executing program 7: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x40) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000440)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x7f}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', 0x0, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) r2 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r2, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) r3 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r3) 13:26:08 executing program 3: socketpair(0x0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x40) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), 0xffffffffffffffff) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), 0xffffffffffffffff) 13:26:08 executing program 5: socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), 0xffffffffffffffff) 13:26:08 executing program 4: socketpair(0x0, 0x802, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', 0x0, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) 13:26:08 executing program 0: socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r1, 0x0, 0x0) syz_genetlink_get_family_id$gtp(0x0, r0) r2 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r2) 13:26:08 executing program 1: socketpair(0x29, 0x0, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20, 0x7800, 0x99, 0x7fff}}) r2 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r2, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) r3 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r3) 13:26:08 executing program 6: socketpair(0x29, 0x0, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20, 0x7800, 0x99, 0x7fff}}) r2 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r2, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) r3 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r3) 13:26:16 executing program 0: socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r1, 0x0, 0x0) syz_genetlink_get_family_id$gtp(0x0, r0) r2 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r2) 13:26:16 executing program 6: socketpair(0x29, 0x802, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20, 0x7800, 0x99, 0x7fff}}) r2 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r2, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) r3 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r3) 13:26:16 executing program 7: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x40) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000440)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x7f}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', 0x0, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) r2 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r2, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) r3 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r3) 13:26:16 executing program 3: socketpair(0x0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x40) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), 0xffffffffffffffff) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), 0xffffffffffffffff) 13:26:16 executing program 2: socketpair(0x29, 0x0, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000440)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x7f}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', 0x0, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) r2 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r2, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), 0xffffffffffffffff) 13:26:16 executing program 1: socketpair(0x29, 0x0, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20, 0x7800, 0x99, 0x7fff}}) r2 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r2, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) r3 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r3) 13:26:16 executing program 4: socketpair(0x0, 0x802, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', 0x0, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) 13:26:16 executing program 5: socketpair(0x0, 0x802, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', 0x0, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) 13:26:16 executing program 5: socketpair(0x0, 0x802, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', 0x0, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) 13:26:16 executing program 2: socketpair(0x29, 0x0, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000440)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x7f}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', 0x0, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), 0xffffffffffffffff) 13:26:16 executing program 1: socketpair(0x29, 0x0, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20, 0x7800, 0x99, 0x7fff}}) r2 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r2, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) fsmount(0xffffffffffffffff, 0x1, 0xf5) 13:26:16 executing program 4: socketpair(0x0, 0x802, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, 0x0, 0x4) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', 0x0, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) 13:26:16 executing program 5: socketpair(0x0, 0x802, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', 0x0, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) 13:26:16 executing program 0: socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r0, 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), 0xffffffffffffffff) r1 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r1) 13:26:17 executing program 3: socketpair(0x0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), 0xffffffffffffffff) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), 0xffffffffffffffff) 13:26:17 executing program 7: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x40) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000440)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x7f}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', 0x0, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) r2 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r2, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) r3 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r3) 13:26:17 executing program 6: socketpair(0x29, 0x802, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20, 0x7800, 0x99, 0x7fff}}) r2 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r2, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) r3 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r3) 13:26:17 executing program 1: socketpair(0x29, 0x0, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20, 0x7800, 0x99, 0x7fff}}) r2 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r2, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) 13:26:17 executing program 5: socketpair(0x0, 0x802, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) 13:26:17 executing program 0: socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r0, 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), 0xffffffffffffffff) r1 = fsmount(0xffffffffffffffff, 0x0, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r1) 13:26:17 executing program 1: socketpair(0x29, 0x0, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20, 0x7800, 0x99, 0x7fff}}) r2 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r2, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) 13:26:17 executing program 7: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000440)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x7f}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', 0x0, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) r2 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r2, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) r3 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r3) 13:26:25 executing program 3: socketpair(0x0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), 0xffffffffffffffff) 13:26:25 executing program 7: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000440)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x7f}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', 0x0, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) r2 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r2, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) r3 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r3) 13:26:25 executing program 4: socketpair(0x0, 0x802, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, 0x0, 0x4) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) 13:26:25 executing program 0: socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r0, 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), 0xffffffffffffffff) r1 = fsmount(0xffffffffffffffff, 0x0, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r1) 13:26:25 executing program 6: socketpair(0x29, 0x802, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20, 0x7800, 0x99, 0x7fff}}) r2 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r2, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) r3 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r3) 13:26:25 executing program 1: socketpair(0x29, 0x0, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20, 0x7800, 0x99, 0x7fff}}) socket$packet(0x11, 0x2, 0x300) 13:26:25 executing program 5: socketpair(0x0, 0x802, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) 13:26:25 executing program 2: socketpair(0x29, 0x0, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000440)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x7f}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', 0x0, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), 0xffffffffffffffff) 13:26:25 executing program 2: socketpair(0x29, 0x0, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000440)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x7f}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', 0x0, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), 0xffffffffffffffff) 13:26:25 executing program 5: syz_genetlink_get_family_id$gtp(&(0x7f0000000700), 0xffffffffffffffff) 13:26:32 executing program 0: socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r0, 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), 0xffffffffffffffff) r1 = fsmount(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r1) 13:26:32 executing program 2: socketpair(0x29, 0x0, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000440)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x7f}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', 0x0, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), 0xffffffffffffffff) 13:26:32 executing program 5: syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) 13:26:32 executing program 6: socketpair(0x29, 0x802, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20, 0x7800, 0x99, 0x7fff}}) r0 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r0, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), 0xffffffffffffffff) r1 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r1) 13:26:32 executing program 4: socketpair(0x0, 0x802, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, 0x0, 0x4) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, 0x0) syz_genetlink_get_family_id$gtp(0x0, r0) 13:26:32 executing program 1: socketpair(0x29, 0x0, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20, 0x7800, 0x99, 0x7fff}}) 13:26:32 executing program 7: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000440)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x7f}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', 0x0, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) r2 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r2, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) r3 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r3) 13:26:32 executing program 3: socketpair(0x0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), 0xffffffffffffffff) 13:26:32 executing program 5: syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) 13:26:32 executing program 1: socketpair(0x29, 0x0, 0x1, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) 13:26:33 executing program 5: syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) 13:26:33 executing program 0: socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r0, 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), 0xffffffffffffffff) r1 = fsmount(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$gtp(0x0, r1) 13:26:33 executing program 4: socketpair(0x0, 0x802, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, 0x0, 0x4) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, 0x0) syz_genetlink_get_family_id$gtp(0x0, r0) 13:26:33 executing program 2: socketpair(0x29, 0x0, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000440)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x7f}) socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), 0xffffffffffffffff) 13:26:33 executing program 1: socketpair(0x29, 0x0, 0x1, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) 13:26:33 executing program 5: socketpair(0x0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), 0xffffffffffffffff) 13:26:33 executing program 3: socketpair(0x0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), 0xffffffffffffffff) 13:26:33 executing program 6: socketpair(0x29, 0x802, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20, 0x7800, 0x99, 0x7fff}}) r0 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r0, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), 0xffffffffffffffff) r1 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r1) 13:26:33 executing program 7: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000440)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x7f}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', 0x0, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) r2 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r2, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) r3 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r3) 13:26:33 executing program 5: socketpair(0x0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), 0xffffffffffffffff) 13:26:33 executing program 1: socketpair(0x29, 0x0, 0x1, &(0x7f0000000000)) 13:26:33 executing program 1: socketpair(0x0, 0x0, 0x1, &(0x7f0000000000)) 13:26:33 executing program 2: socketpair(0x29, 0x0, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000440)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x7f}) socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), 0xffffffffffffffff) 13:26:33 executing program 4: socketpair(0x0, 0x802, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, 0x0, 0x4) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, 0x0) syz_genetlink_get_family_id$gtp(0x0, r0) 13:26:41 executing program 2: socketpair(0x29, 0x0, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000440)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x7f}) socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), 0xffffffffffffffff) 13:26:41 executing program 6: socketpair(0x29, 0x802, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20, 0x7800, 0x99, 0x7fff}}) r0 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r0, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), 0xffffffffffffffff) r1 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r1) 13:26:41 executing program 0: socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r0, 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), 0xffffffffffffffff) r1 = fsmount(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$gtp(0x0, r1) 13:26:41 executing program 1: socketpair(0x0, 0x0, 0x1, &(0x7f0000000000)) 13:26:41 executing program 5: socketpair(0x0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), 0xffffffffffffffff) 13:26:41 executing program 3: socketpair(0x0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), 0xffffffffffffffff) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) 13:26:41 executing program 7: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000440)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x7f}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', 0x0, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) r2 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r2, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) r3 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r3) 13:26:41 executing program 4: socketpair(0x0, 0x802, 0x0, &(0x7f0000000000)) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, 0x0, 0x4) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), 0xffffffffffffffff) 13:26:48 executing program 3: socketpair(0x0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), 0xffffffffffffffff) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) 13:26:48 executing program 1: socketpair(0x0, 0x0, 0x1, &(0x7f0000000000)) 13:26:48 executing program 6: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20, 0x7800, 0x99, 0x7fff}}) r2 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r2, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) r3 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r3) 13:26:48 executing program 0: socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r0, 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), 0xffffffffffffffff) r1 = fsmount(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$gtp(0x0, r1) 13:26:48 executing program 7: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000440)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x7f}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', 0x0, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) r2 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r2, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) r3 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r3) 13:26:48 executing program 4: socketpair(0x0, 0x802, 0x0, &(0x7f0000000000)) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, 0x0, 0x4) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), 0xffffffffffffffff) 13:26:48 executing program 2: socketpair(0x29, 0x0, 0x1, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', 0x0, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), 0xffffffffffffffff) 13:26:48 executing program 5: socketpair(0x0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), 0xffffffffffffffff) 13:26:49 executing program 1: socketpair(0x29, 0x0, 0x0, &(0x7f0000000000)) 13:26:49 executing program 3: socketpair(0x0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), 0xffffffffffffffff) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) 13:26:49 executing program 5: socketpair(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), 0xffffffffffffffff) 13:26:49 executing program 7: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000440)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x7f}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', 0x0, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) r2 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r2, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) r3 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r3) 13:26:49 executing program 0: socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r0, 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), 0xffffffffffffffff) fsmount(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), 0xffffffffffffffff) 13:26:49 executing program 4: socketpair(0x0, 0x802, 0x0, &(0x7f0000000000)) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, 0x0, 0x4) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), 0xffffffffffffffff) 13:26:49 executing program 2: socketpair(0x29, 0x0, 0x1, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', 0x0, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), 0xffffffffffffffff) 13:26:49 executing program 6: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20, 0x7800, 0x99, 0x7fff}}) r2 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r2, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) r3 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r3) [ 487.134418] [ 487.134733] ===================================== [ 487.135429] WARNING: bad unlock balance detected! [ 487.136110] 6.19.0-rc5-next-20260115 #1 Not tainted [ 487.136829] ------------------------------------- [ 487.137511] syz-executor.0/7458 is trying to release lock (rcu_read_lock) at: [ 487.138540] [] __wait_on_freeing_inode+0x105/0x350 [ 487.139467] but there are no more locks to release! [ 487.140168] [ 487.140168] other info that might help us debug this: [ 487.141096] 4 locks held by syz-executor.0/7458: [ 487.141778] #0: ffff88800f83e3f8 (sb_writers#3){.+.+}-{0:0}, at: filename_create+0xf7/0x400 [ 487.143047] #1: ffff8880265b6cb8 (&type->i_mutex_dir_key#3/1){+.+.}-{4:4}, at: filename_create+0x1b1/0x400 [ 487.150129] #2: ffff88800f8d2950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xe32/0x12d0 [ 487.151443] #3: ffffffff85c16898 (inode_hash_lock){+.+.}-{3:3}, at: insert_inode_locked+0xf9/0x890 [ 487.152780] [ 487.152780] stack backtrace: [ 487.153428] CPU: 1 UID: 0 PID: 7458 Comm: syz-executor.0 Not tainted 6.19.0-rc5-next-20260115 #1 PREEMPT(lazy) [ 487.153454] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 487.153467] Call Trace: [ 487.153474] [ 487.153482] dump_stack_lvl+0xca/0x120 [ 487.153526] ? __wait_on_freeing_inode+0x105/0x350 [ 487.153552] print_unlock_imbalance_bug+0x118/0x130 [ 487.153578] ? __wait_on_freeing_inode+0x105/0x350 [ 487.153605] lock_release+0x1ee/0x270 [ 487.153631] __wait_on_freeing_inode+0x10a/0x350 [ 487.153658] ? __pfx___wait_on_freeing_inode+0x10/0x10 [ 487.153687] ? __pfx_var_wake_function+0x10/0x10 [ 487.153718] ? lock_is_held_type+0x9e/0x120 [ 487.153739] insert_inode_locked+0x25f/0x890 [ 487.153770] __ext4_new_inode+0x223d/0x4cd0 [ 487.153802] ? __pfx___ext4_new_inode+0x10/0x10 [ 487.153828] ? __pfx___dquot_initialize+0x10/0x10 [ 487.153860] ? __pfx_avc_has_perm+0x10/0x10 [ 487.153889] ext4_symlink+0x623/0xb40 [ 487.153922] ? __pfx_ext4_symlink+0x10/0x10 [ 487.153951] ? security_inode_permission+0x72/0xe0 [ 487.153974] vfs_symlink+0x44b/0x840 [ 487.154004] filename_symlinkat+0x158/0x440 [ 487.154030] ? __pfx_filename_symlinkat+0x10/0x10 [ 487.154055] ? strncpy_from_user+0x21b/0x2f0 [ 487.154085] __x64_sys_symlink+0x82/0x110 [ 487.154109] do_syscall_64+0xbf/0x420 [ 487.154133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.154155] RIP: 0033:0x7faf954ef427 [ 487.154171] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 487.154191] RSP: 002b:00007ffc4a0841f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000058 [ 487.154210] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007faf954ef427 [ 487.154224] RDX: ffffffffffffffbc RSI: 00007faf9554a00e RDI: 00007faf955491dd [ 487.154238] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffc4a083c70 [ 487.154251] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 487.154264] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffc4a0842c0 [ 487.154283] [ 487.184061] ------------[ cut here ]------------ [ 487.187225] WARNING: kernel/rcu/tree_plugin.h:443 at __rcu_read_unlock+0x25f/0x5c0, CPU#1: syz-executor.0/7458 [ 487.188877] Modules linked in: [ 487.189449] CPU: 1 UID: 0 PID: 7458 Comm: syz-executor.0 Not tainted 6.19.0-rc5-next-20260115 #1 PREEMPT(lazy) [ 487.190954] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 487.192217] RIP: 0010:__rcu_read_unlock+0x25f/0x5c0 [ 487.193164] Code: f2 02 00 00 c7 43 58 01 00 00 00 bf 09 00 00 00 e8 d6 b7 de ff 4d 85 f6 0f 84 73 fe ff ff e8 38 8a 20 00 fb e9 68 fe ff ff 90 <0f> 0b 90 5b 5d 41 5c 41 5d 41 5e e9 81 4d 74 03 e8 2c 5d 56 00 e9 [ 487.195815] RSP: 0018:ffff88800a81f9a0 EFLAGS: 00010286 [ 487.196667] RAX: 00000000ffffffff RBX: ffff8880465eb700 RCX: ffffffff815660f7 [ 487.197774] RDX: 0000000000000000 RSI: ffffffff81566100 RDI: ffff8880465ebafc [ 487.198864] RBP: ffff8880465eb700 R08: 0000000000000000 R09: fffffbfff0ba7040 [ 487.199956] R10: 0000000000000000 R11: 0000000000000001 R12: ffff8880465eb700 [ 487.201075] R13: 0000000000000001 R14: ffffffff85c106c0 R15: ffff88801bd03c48 [ 487.202252] FS: 0000555592f43400(0000) GS:ffff8880e5442000(0000) knlGS:0000000000000000 [ 487.203474] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 487.204406] CR2: 00007f9f4967c4a1 CR3: 000000000c535000 CR4: 0000000000350ef0 [ 487.205526] Call Trace: [ 487.205964] [ 487.207359] __wait_on_freeing_inode+0x10f/0x350 [ 487.208655] ? __pfx___wait_on_freeing_inode+0x10/0x10 [ 487.210699] ? __pfx_var_wake_function+0x10/0x10 [ 487.213012] ? lock_is_held_type+0x9e/0x120 [ 487.215164] insert_inode_locked+0x25f/0x890 [ 487.218265] __ext4_new_inode+0x223d/0x4cd0 [ 487.222946] ? __pfx___ext4_new_inode+0x10/0x10 [ 487.225382] ? __pfx___dquot_initialize+0x10/0x10 [ 487.226807] ? __pfx_avc_has_perm+0x10/0x10 [ 487.230364] ext4_symlink+0x623/0xb40 [ 487.234644] ? __pfx_ext4_symlink+0x10/0x10 [ 487.236568] ? security_inode_permission+0x72/0xe0 [ 487.239650] vfs_symlink+0x44b/0x840 [ 487.242198] filename_symlinkat+0x158/0x440 [ 487.244357] ? __pfx_filename_symlinkat+0x10/0x10 [ 487.245904] ? strncpy_from_user+0x21b/0x2f0 [ 487.255325] __x64_sys_symlink+0x82/0x110 [ 487.256736] do_syscall_64+0xbf/0x420 [ 487.258330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.259333] RIP: 0033:0x7faf954ef427 [ 487.260026] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 487.262731] RSP: 002b:00007ffc4a0841f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000058 [ 487.263897] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007faf954ef427 [ 487.265043] RDX: ffffffffffffffbc RSI: 00007faf9554a00e RDI: 00007faf955491dd [ 487.266194] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffc4a083c70 [ 487.267289] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 487.268467] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffc4a0842c0 [ 487.273469] [ 487.273840] irq event stamp: 707 [ 487.274433] hardirqs last enabled at (707): [] _raw_spin_unlock_irqrestore+0x2c/0x50 [ 487.275964] hardirqs last disabled at (706): [] _raw_spin_lock_irqsave+0x53/0x60 [ 487.277573] softirqs last enabled at (702): [] kernel_fpu_end+0x59/0x70 [ 487.279000] softirqs last disabled at (700): [] kernel_fpu_begin_mask+0x1bb/0x300 [ 487.280577] ---[ end trace 0000000000000000 ]--- 13:26:49 executing program 5: socketpair(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), 0xffffffffffffffff) 13:26:49 executing program 1: socketpair(0x29, 0x0, 0x0, &(0x7f0000000000)) 13:26:49 executing program 3: socketpair(0x29, 0x0, 0x0, &(0x7f0000000000)) 13:26:57 executing program 1: socketpair(0x29, 0x0, 0x0, &(0x7f0000000000)) 13:26:57 executing program 7: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000440)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x7f}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', 0x0, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) r2 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r2, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) r3 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r3) 13:26:57 executing program 2: socketpair(0x29, 0x0, 0x1, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', 0x0, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), 0xffffffffffffffff) 13:26:57 executing program 0: socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r0, 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), 0xffffffffffffffff) fsmount(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), 0xffffffffffffffff) 13:26:57 executing program 4: socketpair(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), 0xffffffffffffffff) 13:26:57 executing program 3: socketpair(0x29, 0x0, 0x0, &(0x7f0000000000)) 13:26:57 executing program 6: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f, 0x2, 0x2, 0x0, 0x6, 0x100}, &(0x7f0000000080)=0x20) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20, 0x7800, 0x99, 0x7fff}}) r2 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r2, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) r3 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r3) 13:26:57 executing program 5: socketpair(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), 0xffffffffffffffff) 13:26:57 executing program 4: socketpair(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), 0xffffffffffffffff) 13:26:57 executing program 7: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x0, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000440)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x7f}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', 0x0, 0x4, 0x7d, 0x8, 0x10001, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x7, 0x5}}) r2 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r2, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) r3 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r3) 13:26:57 executing program 6: socketpair(0x29, 0x802, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, &(0x7f0000000080)) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44854}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x20, 0x7800, 0x99, 0x7fff}}) r2 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r2, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r0) r3 = fsmount(0xffffffffffffffff, 0x1, 0xf5) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r3) 13:26:57 executing program 1: socketpair(0x29, 0x0, 0x1, 0x0) VM DIAGNOSIS: 13:26:49 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=ffff88806cf3d280 RCX=ffffffff8169dc2a RDX=ffff888013bed280 RSI=ffffffff8169dc04 RDI=0000000000000005 RBP=0000000000000003 RSP=ffff8880194d76e0 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffffed100d9e7a51 R13=ffff88806cf3d288 R14=0000000000000001 R15=dffffc0000000000 RIP=ffffffff8169dc06 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fbf0c6d38c0 00000000 00000000 GS =0000 ffff8880e5342000 00000000 00000000 LDT=0000 fffffe1600000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f15aebdf4a1 CR3=000000000e4d7000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ff00000000ff000000000000000000ff XMM01=25252525252525252525252525252525 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000061 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff82975135 RDI=ffffffff889c19e0 RBP=ffffffff889c19a0 RSP=ffff88800a81f488 R8 =0000000000000000 R9 =ffffed1001753046 R10=0000000000000061 R11=666666203a312320 R12=0000000000000061 R13=0000000000000010 R14=ffffffff889c19a0 R15=ffffffff82975120 RIP=ffffffff8297518d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555592f43400 00000000 00000000 GS =0000 ffff8880e5442000 00000000 00000000 LDT=0000 fffffe4300000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f9f4967c4a1 CR3=000000000c535000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000a60ce07b00000000cec3662e XMM01=000000000000000003515b82db34ca11 XMM02=0000000000000000333bebdfd0a6a21d XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000