0x4, 0x7}, {0x1, 0x4}, {0x7, 0x4}, {0x6, 0x1}, {0x6, 0xa}, {0x6, 0x2}, {0x6, 0x4}, {0x1, 0x7}, {0x4, 0x9}, {0x5, 0x7}, {0x1, 0x6}, {0x5, 0x9}, {0x5, 0x5}]}]}, @NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0x1, 0x898, 0x8, 0x41, 0x7, 0xcebf, 0x5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x1b, 0x1, 0x18, 0x16, 0x12, 0xb, 0x3, 0x4, 0x4, 0x60, 0x5, 0x30, 0x4, 0x18, 0xe, 0x9, 0x48, 0x36, 0x5, 0x9, 0x3, 0x9, 0xc, 0x5, 0x1b, 0x30, 0x12, 0x16, 0x32, 0x60, 0x6, 0x12]}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x0, 0xa}, {0x1, 0x1}, {0x0, 0x8}, {0x0, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf801, 0xff, 0x6, 0x101, 0xf4d, 0x8, 0x3, 0x8]}}]}, @NL80211_BAND_2GHZ={0x88, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x12, 0x2, [{0x5, 0x9}, {0x2, 0x6}, {0x6, 0x7}, {0x5}, {0x2, 0x2}, {0x3, 0x3}, {0x7, 0x7}, {}, {0x1, 0x8}, {0x0, 0x2}, {0x2, 0x2}, {0x4, 0x2}, {0x4, 0x9}, {0x4, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x4, 0x0, 0x2, 0x0, 0x7f, 0x1, 0x80]}}, @NL80211_TXRATE_HT={0x1a, 0x2, [{0x0, 0x4}, {0x2}, {0x7, 0x6}, {0x0, 0x3}, {0x4, 0x1}, {0x2, 0x5}, {0x4, 0x8}, {0x2, 0x3}, {0x5, 0x8}, {0x6, 0xa}, {0x1, 0x7}, {0x2, 0x5}, {0x1, 0x4}, {0x1, 0x8}, {0x2, 0x4}, {0x3, 0x3}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x5}, {0x5, 0x8}, {0x7}, {0x1, 0x7}]}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x6, 0x3}, {0x4, 0x4}, {0x6, 0x1}, {0x0, 0x4}, {0x4, 0x4}, {0x1}, {0x5}, {0x0, 0x2}, {}, {0x3, 0x9}, {0x2, 0x1}, {0x1, 0x3}, {0x5, 0x7}, {0x1, 0x1}, {0x4}, {0x4, 0x2}, {0x0, 0x6}, {0x1, 0x4}, {0x5, 0x2}, {0x2, 0x6}, {}, {0x0, 0x7}, {0x6, 0x4}, {0x4, 0xa}, {0x3, 0x9}, {0x2, 0x9}, {0x5, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x860, 0x6fbf, 0x3ff, 0xff, 0x4, 0x4, 0x47]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0xc, 0x1, 0x48, 0x30, 0x2, 0x4, 0x18]}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x5f4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x20}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x5c0, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x15, 0x6c, 0x6c, 0x2, 0x1, 0x7d, 0x12, 0x1b, 0x36, 0x16, 0x2, 0x9, 0x36, 0x48, 0x5, 0x6, 0x16, 0x12, 0x5, 0x5, 0x48]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0xdc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1a, 0x2, [{0x7}, {0x5, 0x8}, {0x3, 0x3}, {0x4, 0x8}, {0x2, 0xa}, {0x0, 0x2}, {0x4, 0x5}, {0x1, 0x7}, {0x2, 0x3}, {0x6, 0x2}, {0x6, 0x3}, {0x6, 0x7}, {0x3, 0x7}, {0x7, 0x7}, {0x2, 0x4}, {0x2, 0x2}, {0x1, 0xa}, {0x0, 0x3}, {0x4, 0x5}, {0x5, 0x8}, {0x1, 0x3}, {0x3, 0x9}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0x8, 0x9, 0x8000, 0x2, 0x1f, 0x81]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7ff, 0x8, 0x23e, 0x8, 0x1d, 0x3, 0x80, 0x9ff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x1c, 0x60, 0xb, 0xb, 0x12, 0x16, 0x5, 0x1, 0x16, 0x18, 0xc, 0x2, 0xc, 0x3, 0x5, 0x3, 0x36, 0x5, 0xfba9ea00e63a64e2, 0x30]}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x6, 0x8}, {0x5, 0x6}, {0x2, 0x1}, {0x2}, {0x3, 0x9}, {0x3, 0x1}, {0x3}, {0x6, 0x6}, {0x6, 0x4}, {0x4, 0x8}, {0x3, 0x7}, {0x5, 0x5}, {0x7, 0xa}, {0x1, 0x3}, {0x7, 0x1}, {0x4, 0x1}, {0x0, 0x5}, {0x0, 0x9}, {0x5, 0x4}, {0x6, 0x1}, {0x1}, {0x0, 0xa}, {0x1}, {}, {0x7, 0x6}, {0x1, 0x7}, {0x3, 0x7}, {0x0, 0x7}, {0x2, 0x3}, {0x0, 0x2}, {0x1, 0x4}, {0x4, 0xa}, {0x3, 0x8}, {0x5, 0x3}, {0x7, 0x6}, {0x1, 0x1}, {0x1, 0x3}, {0x5, 0x7}, {0x0, 0x7}, {0x1}, {0x2, 0x7}, {0x0, 0x8}, {0x5, 0x4}, {0x3, 0x3}, {0x6, 0x1}, {0x6}, {0x1}, {0x7, 0x6}, {0x2, 0x9}, {0x5, 0x8}, {0x5, 0x1}, {0x0, 0x2}, {0x3, 0x6}, {0x1, 0x6}, {0x4, 0x1}, {0x0, 0x2}, {0x1, 0xa}, {0x1, 0xa}, {0x5, 0x1}, {0x1, 0x7}, {0x1, 0xa}, {0x0, 0x5}, {0x2, 0x4}, {0x1}, {0x2, 0x8}, {0x2, 0x1}, {0x6, 0xa}, {}, {0x3, 0x1}, {0x5, 0x3}, {0x5, 0x5}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x6, 0x6, 0x6c, 0x48, 0x9, 0x12, 0x36, 0x3, 0x12, 0x4, 0xb, 0x1, 0xce, 0x24, 0x58, 0x18, 0xb, 0x5, 0x60, 0x36, 0x3, 0x48, 0x48, 0x5, 0xb, 0x60]}]}, @NL80211_BAND_6GHZ={0xbc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0xb, 0x12, 0x5, 0x4, 0x48, 0x16, 0x24, 0x36, 0xc, 0x30, 0x18, 0x24, 0xb, 0x5, 0x18, 0x16, 0x6c, 0x30, 0x60, 0x30, 0x1b, 0x2, 0x30, 0x3, 0x24, 0x1b, 0x24]}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x0, 0x6}, {0x5, 0x2}, {0x1}, {0x6, 0x2}, {0x7, 0x7}, {0x5, 0x1d}, {0x6, 0x9}, {0x6, 0x6}, {0x1, 0x9}, {0x6, 0x7}, {0x0, 0x6}, {0x0, 0x8}, {0x1}, {0x2, 0x2}, {0x2, 0x1}, {0x7, 0x2}, {0x3}, {0x4, 0x2}, {0x7, 0x4}, {0x6, 0x8}, {0x1, 0x7}, {0x5, 0x5}, {0x6, 0x9}, {0x2}, {0x7, 0x2}, {0x3, 0x2}, {0x6, 0x9}, {0x0, 0x3}, {0x2, 0x9}, {0x7, 0xa}, {0x2, 0x2}, {0x6, 0x8}, {0x6, 0x4}, {0x1, 0x7}, {0x3}, {0x5}, {0x0, 0x4}, {0x7}, {0x1, 0x8}, {0x4, 0x4}, {0x4, 0xa}, {0x5, 0x8}, {0x0, 0x2}, {0x3, 0x4}, {0x3, 0x9}, {0x6, 0x8}, {0x6, 0x4}, {0x0, 0x1}, {0x0, 0x6}, {0x5}, {0x3, 0x9}, {0x0, 0x1}]}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x7, 0xa}, {0x5, 0x7}, {0x6, 0x8}, {0x0, 0x6}, {0x1}, {0x0, 0x3}, {0x4, 0x6}, {0x3, 0x3}, {0x1, 0x2}, {}, {0x4, 0xa}, {0x2, 0x5}, {0x2, 0xa}, {0x4, 0x3}, {0x0, 0x6}, {0x4, 0x3}, {0x4, 0x5}, {0x1, 0x2}, {0x4, 0x3}, {0x6, 0x9}, {0x5, 0x5}, {0x1, 0x4}, {0x4}, {0x0, 0x8}, {0x6, 0x9}, {0x0, 0x6}, {0x7, 0x8}, {0x5, 0x3}, {0x7, 0x5}, {0x2, 0xa}, {0x1, 0x2}, {0x6, 0x8}, {0x2, 0xa}, {0x4, 0x2}, {0x3}, {0x0, 0x7}, {0x6, 0x9}, {0x5, 0x9}, {0x5}, {0x4, 0x6}, {0x5, 0x6}, {0x0, 0x2}, {0x6, 0x7}, {0x3, 0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x7}, {0x3, 0x2}, {0x0, 0xa}, {0x5, 0x3}]}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x6, 0xb, 0xb, 0x18, 0x16, 0x6, 0x4, 0x6c, 0x6c, 0x5, 0x60]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x134, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x46, 0x2, [{0x4}, {0x7, 0x6}, {0x6, 0x5}, {0x0, 0x1}, {0x3, 0x6}, {0x4}, {0x6, 0x1}, {0x5, 0x6}, {0x1, 0x3}, {0x3, 0xa}, {0x0, 0xa}, {0x5, 0x6}, {0x3}, {0x3, 0xa}, {0x2, 0x8}, {0x3, 0x3}, {0x0, 0x3}, {0x2, 0x2}, {0x3, 0x8}, {0x6, 0x4}, {0x1, 0x9}, {0x7, 0x9}, {0x7, 0x4}, {}, {}, {0x1, 0x1}, {0x7, 0x8}, {0x4}, {0x5, 0x8}, {0x5, 0x4}, {0x7, 0x4}, {0x0, 0xa}, {0x7, 0x9}, {0x7, 0xa}, {0x1, 0xa}, {0x1, 0xa}, {0x7, 0x1}, {0x6, 0x4}, {0x0, 0x7}, {0x4, 0x9}, {0x7}, {0x2, 0x8}, {0x2, 0x6}, {0x5, 0x6}, {0x7, 0x1}, {0x7, 0x8}, {0x2, 0xa}, {0x0, 0x8}, {0x7, 0x3}, {0x2, 0x9}, {0x7, 0x1}, {0x2, 0x1}, {0x6, 0x9}, {0x3, 0x9}, {0x0, 0x9}, {0x7, 0x8}, {0x1, 0x9}, {0x1, 0x2}, {0x4, 0x8}, {0x4, 0x2}, {0x5, 0x4}, {0x7, 0x3}, {0x5, 0x5}, {0x3, 0x5}, {0x1, 0x7}, {0x0, 0x9}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff7, 0x2, 0xfff, 0x81, 0x8001, 0x5, 0xfffb, 0x9860]}}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x1, 0x7}, {0x3, 0x6}, {0x4, 0x2}, {0x7, 0x4}, {0x4, 0x9}, {}, {0x3, 0x6}, {0x6, 0x6}, {0x4, 0x7}, {0x1, 0x2}, {0x7, 0x4}, {0x7, 0x4}, {0x6, 0x5}, {0x1, 0x4}, {0x0, 0x8}, {0x4, 0x5}, {0x7, 0x2}, {0x5, 0x6}, {0x4, 0xa}, {0x0, 0x1b}, {0x0, 0x4}, {0x1, 0xa}, {0x2, 0x9}, {0x0, 0x2}, {0x6, 0x2}, {0x4, 0x8}, {0x4, 0xa}, {0x0, 0xa}, {0x6, 0x2}, {0x0, 0x7}, {0x5, 0xa}, {0x2, 0x7}, {0x2, 0x4}, {0x5, 0x1}, {0x1, 0x6}, {0x5, 0x7}, {0x1, 0x9}, {0x7, 0x5}, {0x0, 0x4}, {0x3, 0x8}, {0x1, 0x6}, {0x2, 0xa}, {0x1, 0xa}, {0x1, 0x2}, {0x4, 0x3}, {0x1, 0x8}, {0x2}, {0x2, 0x5}, {0x0, 0x2}, {0x1, 0x3}, {0x1, 0x3}, {0x1, 0x7}, {0x5, 0x3}, {0x3, 0x6}, {0x0, 0x8}, {0x1, 0x3}, {0x3, 0x9}, {0x3, 0x5}, {0x7, 0x1}, {0x5, 0x2}, {0x4, 0x6}, {0x1, 0x1}, {0x3, 0x2}, {0x2, 0x8}, {0x1, 0x4}, {0x0, 0x4}, {0x0, 0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x7fff, 0x9, 0x1, 0x0, 0x9, 0x9, 0x2c45]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x1, 0xfff8, 0x9, 0x9, 0xad5b, 0x0, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x82e, 0xfffb, 0x2, 0x0, 0x9, 0x6, 0x3]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x1b, 0x48, 0x48, 0x18, 0x6c, 0x1c, 0x2]}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x4, 0x5}, {0x7, 0x1}, {0x0, 0xa}, {0x5}, {0x0, 0x6}, {0x4, 0x6}, {0x4, 0x8}, {0x2, 0x8}, {0x3, 0x9}, {0x2}, {0x6, 0x9}, {0x6, 0x8}, {0x0, 0x2}, {0x3, 0x1}, {0x0, 0x5}, {0x6, 0x1}, {0x1, 0x3}, {0x1, 0x9}, {0x0, 0x8}, {0x0, 0x7}, {0x1}, {0x3, 0x9}, {0x2, 0x4}, {0x4, 0x5}, {0x2}, {0x7, 0x2}, {0x4, 0x6}, {0x7}, {0x0, 0xa}, {0x5, 0x8}, {0x6, 0x3}, {0x0, 0x7}, {0x3, 0x1}, {0x4, 0x2}, {0x5, 0x6}, {0x1, 0x6}, {0x0, 0x9}, {0x7, 0x4}, {0x4, 0x3}, {0x3, 0x4}, {0x7, 0x9}, {0x2, 0xa}, {0x5, 0xa}, {0x5, 0x2}, {0x0, 0x8}]}]}, @NL80211_BAND_60GHZ={0x90, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x12, 0x1, [0x2, 0x9, 0x0, 0x5, 0x2, 0x1, 0x24, 0x22, 0x48, 0x9, 0x18, 0x1, 0x5, 0x1b]}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x30, 0x30, 0x18, 0x0, 0x24, 0x24, 0x18, 0x6c, 0x50, 0x60, 0x3, 0x2, 0x16, 0x30, 0x18, 0x1, 0x24, 0x24, 0x12, 0x30]}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0xc, 0x18, 0x12, 0x0, 0x3, 0x3, 0x30, 0x30, 0x4, 0x4, 0x30]}, @NL80211_TXRATE_HT={0x2c, 0x2, [{0x4, 0x6}, {0x6, 0x4}, {0x7, 0xa}, {0x5, 0x6}, {0x7, 0x1}, {0x3, 0x1}, {0x3, 0x4}, {0x7, 0x8}, {0x6, 0x1}, {0x4, 0x6}, {0x5, 0x9}, {0x7, 0x7}, {0x0, 0xa}, {0x3, 0x6}, {0x1, 0x7}, {0x0, 0xa}, {0x1, 0x11}, {0x1, 0xa}, {0x2, 0x3}, {0x7, 0x8}, {0x3, 0xa}, {0x1}, {0x1, 0x6}, {0x4, 0x1}, {0x2, 0x8}, {0x4, 0x7}, {0x7}, {0x4, 0x5}, {0x2, 0x8}, {0x5, 0x6}, {0x0, 0x5}, {0x4}, {0x5, 0x9}, {0x1, 0x1}, {0x0, 0x8}, {0x6, 0x9}, {0x7, 0x5}, {0x4, 0xa}, {0x0, 0xa}, {0x7, 0x2}]}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x12, 0xc, 0x4, 0x1, 0x5, 0xc, 0x3, 0x3]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0xc, 0x36, 0x36, 0x4, 0x1b, 0x36, 0x1, 0x6c, 0x36]}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0xa8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x9, 0x48, 0x36, 0x4, 0x60, 0x60, 0x18, 0x5, 0x5, 0x24, 0x6, 0x12, 0x5, 0x4, 0x24, 0x16, 0x2, 0x4, 0x6, 0xc, 0x6, 0x1b, 0x4, 0x36]}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x1, 0x5}, {0x7, 0x2}, {0x5}, {0x0, 0x1}, {0x5}, {0x4}, {0x4, 0x5}, {0x2, 0x6}, {0x4}, {0x7, 0x8}, {0x6, 0xa}, {0x1, 0x1}, {0x7, 0x9}, {0x2, 0x7}, {0x6}, {0x7, 0x3}, {0x0, 0xa}, {0x5}, {0x1}, {0x4, 0x5}, {0x1, 0x4}, {0x4, 0x2}, {0x0, 0x5}, {0x4, 0x3}, {0x6}, {0x1, 0x5}, {0x7, 0xa}, {0x1, 0x4}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x4}, {0x7, 0x5}, {0x7, 0xa}, {0x6, 0x7}, {0x1, 0x4}, {0x6, 0x2}, {0x3, 0x3}, {0x2, 0x8}, {0x7, 0x2}, {0x7, 0x3}, {0x4, 0x5}, {0x2, 0x5}, {0x0, 0x5}, {0x3, 0x8}, {0x0, 0x1}, {0x4, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1f, 0x8, 0xfff, 0xfffa, 0x0, 0x1, 0x401, 0x3ff]}}, @NL80211_TXRATE_HT={0x30, 0x2, [{0x2, 0x8}, {0x6, 0x8}, {0x0, 0x1}, {}, {0x0, 0x4}, {0x0, 0x4}, {0x0, 0x8}, {0x1, 0x9}, {0x5, 0x1}, {0x4, 0xa}, {0x1, 0x7}, {0x7, 0x5}, {0x7, 0x6}, {0x1, 0x8}, {0x5, 0xa}, {0x5, 0x6}, {0x6, 0x6}, {0x4, 0x4}, {0x6, 0x3}, {0x5, 0x8}, {0x7, 0x7}, {0x0, 0xa}, {0x2, 0x3}, {}, {0x2, 0x9}, {0x0, 0x6}, {0x1, 0x5}, {0x2, 0x8}, {}, {0x2}, {0x1, 0x8}, {0x7, 0x3}, {0x1, 0x7}, {}, {0x4, 0x2}, {0x1, 0xa}, {0x7, 0x9}, {0x1, 0x4}, {0x7, 0x1}, {0x7, 0x8}, {0x0, 0x4}, {0x4, 0x7}, {0x5, 0x1}, {0x4, 0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0xec, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x9d, 0x8, 0x81, 0x9, 0x8, 0x8000, 0x1]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x4, 0x60]}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x6, 0x1b, 0x16, 0x6, 0x3, 0x6c, 0x2, 0x5, 0x4, 0x13, 0x2, 0x6c, 0xf]}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x3, 0xa}, {0x4, 0x6}, {0x3, 0x2}, {0x6, 0x8}, {0x2, 0x6}, {0x0, 0x7}, {0x3, 0x9}, {0x1, 0x5}, {0x4, 0x4}, {0x5, 0x8}, {0x1, 0x2}, {0x0, 0x6}, {0x7, 0x9}, {0x4, 0xa}, {0x1, 0xa}, {0x0, 0x7}, {0x7, 0x4}, {0x6, 0x9}, {0x1, 0xa}, {0x7, 0x6}, {0x4, 0x6}, {0x1, 0x3}, {0x7, 0x7}, {0x4, 0x2}, {0x5, 0x4}, {0x5, 0x9}, {0x0, 0x2}, {0x2, 0x5}, {0x2, 0x5}, {0x0, 0x2}, {0x7, 0x7}, {0x2, 0xa}, {0x1, 0x4}, {0x1, 0x9}, {0x3, 0x2}, {0x1, 0x7}, {0x0, 0x1}, {}, {0x5, 0x3}, {0x4, 0x9}, {0x5, 0x7}, {0x0, 0x1}, {0x4, 0x2}, {0x0, 0xa}, {0x7, 0x4}, {0x4, 0x9}, {0x0, 0x3}, {0x0, 0x1}, {0x3, 0x9}, {0x5, 0x1}, {0x5, 0x3}, {0x4, 0x9}, {0x0, 0x1}, {0x5}, {0x2, 0x2}, {0x4, 0x4}, {0x2, 0x3}, {0x5}, {0x1, 0x9}, {0x1, 0x5}, {0x6, 0x7}, {0x2, 0x6}, {0x1, 0x9}, {0x6, 0x3}, {0x6}, {0x0, 0x9}, {0x4, 0x1}, {0x1, 0xa}, {0x1, 0x7}, {0x4, 0x5}, {0x5, 0x7}, {0x6, 0x4}, {0x6, 0x7}, {0x1, 0x2}]}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x1, 0x3}, {0x5, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x40, 0x80, 0x0, 0x4, 0x9, 0x2, 0x5]}}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x60, 0x60, 0x18, 0x16, 0x9, 0x48, 0x48, 0x9, 0x30, 0x5, 0x60, 0x2]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x1, 0x4, 0x0, 0x5, 0x1, 0x800, 0x1]}}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x48, 0x18, 0x60, 0x5, 0x30, 0x48, 0x30, 0x12, 0x2, 0x36, 0x18, 0x3, 0x1, 0x36, 0x30, 0x36, 0x12, 0x60, 0x48, 0x1b, 0x36, 0x2, 0x3, 0x16, 0x36]}]}, @NL80211_BAND_6GHZ={0x80, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x40, 0x2, [{0x5, 0x2}, {0x2, 0x9}, {0x7, 0x5}, {0x0, 0x7}, {0x4, 0x2}, {0x6, 0x5}, {0x0, 0x9}, {}, {0x1}, {0x7}, {0x7, 0x9}, {0x6}, {0x7, 0x8}, {0x1, 0xa}, {0x7, 0x8}, {0x1, 0x2}, {0x2, 0x4}, {0x4, 0x1}, {0x1, 0x8}, {0x4, 0x7}, {0x7, 0x9}, {0x5, 0x5}, {0x1, 0x7}, {0x6, 0x3}, {0x3, 0x3}, {0x4, 0x7}, {0x7, 0x8}, {0x0, 0x5}, {0x4, 0x6}, {0x2, 0x5}, {0x4, 0x4}, {0x4, 0x8}, {0x4, 0x9}, {0x3, 0x1}, {0x2, 0x5}, {0x5}, {0x0, 0x1}, {0x3, 0xa}, {0x1, 0x8}, {0x1, 0x3}, {}, {0x7, 0x1}, {0x1, 0x9}, {0x6, 0x1}, {0x1, 0x1}, {0x3, 0x7}, {0x1, 0x7}, {0x4, 0x1}, {0x1, 0x6}, {0x6, 0x7}, {0x4, 0x8}, {0x1, 0x1}, {0x1, 0x7}, {0x2, 0x5}, {0x7, 0x2}, {0x3, 0x6}, {0x5, 0x6}, {0x5, 0x5}, {0x3, 0x5}, {0x2, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x3, 0x6, 0x66, 0x2c, 0x1, 0x1f, 0xbb]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x6, 0x76bb, 0x0, 0x0, 0x100, 0x814, 0x20]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x2, 0xae7, 0x1, 0x7f, 0xd0, 0x4edd, 0x8000]}}]}]}]}]}, @NL80211_ATTR_TID_CONFIG={0x17c, 0x11d, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8000}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3f}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa7}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x100000000}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x120, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x94, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x7, 0x8, 0x0, 0x3f, 0x3, 0x6, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x2, 0x2, 0x4, 0x58c7, 0x0, 0x2, 0x6]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x36, 0x5, 0x5, 0xb, 0x6c, 0x60, 0x1, 0x24, 0x0, 0x1b, 0x9, 0x9, 0x60, 0xb, 0x24, 0x60, 0x0, 0x4, 0x6, 0x65, 0x60, 0x9, 0x2, 0x12, 0x0, 0x16]}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x3, 0x6}, {0x5, 0x4}, {0x2, 0x2}, {0x6, 0x2}, {}, {0x1, 0x5}, {0x6, 0xa}, {0x5, 0x5}, {0x0, 0x3}, {0x4, 0x8}, {0x6, 0x8}, {0x5, 0x8}, {0x5, 0x3}, {0x3, 0x6}, {0x2, 0x2}, {0x3, 0x6}, {0x4, 0x6}, {0x7, 0x9}, {0x4, 0x7}, {0x1, 0xa}, {0x7, 0x5}, {0x1, 0x1}, {0x7, 0x5}, {0x4, 0x9}, {0x5, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x5, 0x8}, {0x5, 0x8}, {0x5, 0x2}, {0x0, 0x2}, {0x5, 0x2}, {0x1, 0x3}, {0x4, 0x7}, {0x2, 0x1}, {0x7, 0x7}, {0x5, 0x3}, {0x0, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x200, 0x8, 0x0, 0x8000, 0x2, 0x4, 0x1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x26, 0x2, [{0x6, 0x2}, {0x7, 0x3}, {0x2, 0x7}, {0x3, 0x1}, {0x1, 0x6}, {0x5, 0x3}, {0x0, 0x5}, {0x5, 0x8}, {0x3}, {0x0, 0x8}, {0x3, 0x3}, {0x7, 0x3}, {0x6, 0x4}, {0x2, 0x4}, {0x6, 0x9}, {0x7, 0x4}, {0x1, 0x9}, {0x3, 0x7}, {}, {0x0, 0x7}, {0x6, 0x9}, {0x5, 0x6}, {0x0, 0x7}, {0x3, 0x2}, {0x4, 0x8}, {0x0, 0x9}, {0x7, 0xa}, {0x5}, {0x2, 0x6}, {0x1, 0x7}, {0x5, 0x6}, {0x1, 0x8}, {0x4, 0x7}, {0x4, 0x3}]}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x0, 0x16, 0x1, 0x6, 0x18, 0x16, 0x6]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x400, 0x0, 0x9, 0x2, 0xfffc, 0xb3, 0x4, 0x1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1f, 0x3, 0x6, 0x7, 0x2, 0x0, 0x401]}}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x18, 0x6c, 0x2, 0x4, 0x30, 0x5, 0xb, 0x82f6cf91c46539c9, 0xb, 0x16, 0x18, 0x2]}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x2, 0xa}, {0x4, 0x6}, {0x0, 0xa}, {0x1, 0x1}, {0x4, 0x4}, {0x5, 0x5}]}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x4}, @NL80211_ATTR_TID_CONFIG={0x1c, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x7b8, 0x11d, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x2c, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x101, 0x0, 0x4b2, 0xff, 0x219, 0x3ff, 0x8001, 0x1867]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x56}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}]}, {0x1c0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x81}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x9a}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x17c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x74, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0xd, 0x2, [{0x0, 0x7}, {0x7, 0x9}, {0x0, 0x9}, {0x7, 0x9}, {0x3, 0x7}, {0x6, 0x4}, {0x3, 0x2}, {0x1, 0x7}, {0x6, 0x2}]}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x9, 0x3, 0x12, 0x5]}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x3, 0x8}, {0x0, 0x3}, {0x0, 0x1}, {0x1, 0x6}, {0x5, 0x6}, {0x0, 0x3}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x8}, {0x5, 0x7}, {0x5, 0x5}, {0x4, 0x4}, {0x5, 0x6}, {0x6, 0x6}, {0x1, 0x3}, {0x4, 0x4}, {0x1, 0x2}, {0x4, 0x5}, {0x2, 0x5}, {0x5, 0x2}, {0x1, 0x9}, {0x2, 0x9}, {0x1, 0x7}, {0x5, 0x8}, {0x3, 0x9}, {0x0, 0x7}, {0x3, 0x2}, {0x1, 0x2}, {0x3, 0x7}, {0x4, 0x2}, {0x4, 0x6}, {0x6, 0x6}, {0x1, 0x5}, {0x0, 0x6}, {0x3, 0x6}, {0x4, 0x8}, {0x2, 0x4}, {0x1, 0x5}, {0x4, 0x6}, {0x1, 0xa}, {0x2, 0x7}, {0x4, 0x7}, {0x2, 0x2}, {0x2, 0xa}, {0x2, 0x9}, {0x7, 0x9}, {0x0, 0x4}, {0x5, 0xa}, {0x3, 0x2}, {0x2, 0x7}, {0x3, 0x1}, {0x5, 0x9}, {0x2, 0x1}, {0x6, 0x9}, {0x2, 0xa}, {0x1, 0x6}, {0x1, 0x1}, {0x6, 0x5}, {0x0, 0xa}, {0x2, 0x2}, {0x6, 0xa}, {0x4}, {0x1, 0x3}, {0x0, 0x4}, {0x3, 0xa}, {0x1, 0xa}, {0x1, 0x1}, {0x3, 0x2}, {0x0, 0x3}]}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x24, 0x9, 0x48, 0x48, 0x18, 0x5, 0x12, 0x60]}]}, @NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0xb, 0x12, 0x9]}]}, @NL80211_BAND_2GHZ={0x88, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x8, 0x1, [0x1b, 0x48, 0x0, 0x6]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x3f, 0x8, 0x3, 0x5, 0x0, 0x484, 0x401]}}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x16, 0xb, 0x3, 0x1b, 0xc, 0x6c, 0x16, 0x36, 0x6, 0x9, 0x18, 0x24, 0x6, 0x9, 0x19, 0x2, 0x6, 0x48, 0x12, 0x12]}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x5, 0x2}, {0x2, 0x1}, {}, {0x3, 0xa}, {0x1, 0x6}, {0x2, 0x8}, {0x3}, {0x4, 0x2}, {0x2, 0x8}, {0x1}, {0x7, 0x2}, {0x7, 0x7}, {0x1, 0x6}, {0x7, 0x7}, {0x4, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x6, 0x401, 0x81, 0x4, 0x2, 0x0, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8001, 0xfff, 0xaf, 0x791, 0x81, 0x8, 0x400]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9af, 0xcd45, 0x8, 0x20, 0x401, 0x79a7, 0x4bce, 0x530]}}]}, @NL80211_BAND_6GHZ={0x50, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x28, 0x2, [{0x7, 0x1}, {0x1, 0x5}, {0x7, 0x5}, {0x1, 0x6}, {0x2, 0x7}, {0x0, 0x1}, {0x4, 0x7}, {0x0, 0x5}, {0x0, 0x2}, {0x1, 0x9}, {0x3}, {0x7, 0x9}, {0x6, 0xa}, {0x6, 0x7}, {0x1, 0x4}, {0x1, 0x2}, {0x0, 0x6}, {0x4, 0x5}, {0x6, 0x1}, {0x7, 0x6}, {0x2}, {0x2, 0x8}, {0x1, 0x4}, {0x1, 0xa}, {0x1, 0x2}, {0x0, 0x5}, {0x0, 0x9}, {0x3, 0x2}, {0x4, 0x4}, {0x6}, {0x1}, {0x5, 0x8}, {0x3, 0x1}, {0x4}, {0x6, 0x1}, {0x2, 0x5}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x50, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x1b}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x6b}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x41}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x280, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb6}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x75}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x24c, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x80, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x8000, 0xff, 0x8000, 0x5, 0x9, 0xffff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x4, 0x6c, 0x3, 0x6, 0x5a2f199264a6421d, 0x4, 0x4]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xd2b, 0xc619, 0x2, 0x6d15, 0x1, 0x0, 0x1f]}}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x12, 0x1b, 0x3, 0x48, 0x6c, 0x1b, 0xb, 0x1b, 0x1, 0x9, 0x16, 0xc, 0xc, 0x6, 0x24, 0x1b, 0x16, 0x5, 0xb, 0x3, 0x1b, 0x3, 0x48, 0x24, 0x4, 0x24, 0x2, 0x18, 0x3, 0x0, 0x6]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x2, 0x18, 0x9, 0x6, 0x6c, 0x16, 0xc, 0x24, 0x1b, 0x5, 0x36, 0x1, 0x1b, 0x9]}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0xffff, 0x3, 0x200, 0x8, 0x4, 0x3, 0x1]}}]}, @NL80211_BAND_5GHZ={0x70, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x5, 0x6}, {0x3, 0x6}, {0x0, 0x4}, {0x1, 0x8}, {0x5, 0x4}, {0x6, 0x7}, {0x0, 0x7}, {0x6, 0x3}, {0x5, 0x9}, {0x6, 0x8}, {0x7, 0x2}, {0x4, 0x5}, {0x5, 0x5}, {0x4, 0x1}, {0x0, 0xa}, {0x3, 0xa}, {0x5, 0x8}, {0x1, 0x2}, {0x0, 0x5}, {0x2, 0x1}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x1}, {0x2, 0x6}, {0x0, 0x1}, {0x7, 0x7}, {0x7}, {0x7, 0x6}, {0x0, 0x4}, {0x0, 0x2}, {0x5, 0x8}, {0x1, 0x1}, {0x2, 0x2}, {0x7, 0x2}, {}, {0x6, 0x4}, {0x1, 0x9}, {0x6, 0x7}, {0x6, 0x9}, {0x2, 0x9}, {0x5, 0xa}, {0x3}, {0x6, 0x2}, {0x6, 0x5}, {0x1, 0xa}, {0x6, 0x7}, {0x7, 0x7}, {0x3, 0x6}, {0x1, 0x8}, {0x4, 0x9}, {0x5, 0x9}, {0x7, 0x2}, {0x3, 0x8}, {0x7, 0x2}, {0x0, 0x7}, {0x4, 0x2}, {0x1, 0x2}, {0x0, 0x3}, {0x4}, {0x7, 0x2}, {0x7, 0x8}, {0x5, 0x6}, {0x2, 0x9}, {0x3, 0xa}, {0x2, 0x8}, {0x2, 0x2}, {0x7, 0x7}, {0x2, 0x1}, {0x5, 0xa}, {0x2, 0x9}, {0x7, 0x3}, {0x2}, {0x3, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x8, 0x5, 0xf000, 0x5, 0x5, 0xfbff, 0x2]}}]}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x4, 0x80, 0xfff, 0x0, 0x9, 0x7, 0xfff]}}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x0, 0x9}, {0x5, 0x2}, {0x4, 0x7}, {0x0, 0x6}, {0x2, 0x3}, {0x0, 0xa}, {0x6, 0x6}, {0x1, 0x8}, {0x5, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0xe43, 0x0, 0x200, 0x80, 0x7, 0x8eec, 0x1f]}}]}, @NL80211_BAND_6GHZ={0x40, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0xe, 0x2, [{0x5}, {0x7, 0x7}, {0x7, 0x7}, {0x7, 0x4}, {0x6, 0x2}, {0x2, 0x6}, {0x4}, {0x2, 0x2}, {0x6, 0x9}, {0x0, 0x7}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x5, 0x30, 0x18, 0x9, 0x2, 0xa5, 0x16, 0x2, 0x3, 0x5, 0x1, 0x5d, 0x12, 0x1b, 0x4, 0x1b, 0x1, 0x4, 0x3, 0x4, 0x3, 0x5, 0x30, 0x4, 0x9, 0xb, 0x60, 0x60, 0x1]}]}, @NL80211_BAND_6GHZ={0x58, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x0, 0x8}, {0x0, 0x3}, {0x0, 0x5}, {0x1, 0x2}, {0x4, 0x3}, {0x0, 0x8}, {0x2, 0x3}, {0x3}, {0x0, 0xa}, {0x3, 0x7}, {0x0, 0x3}, {0x0, 0x6}, {0x2, 0x9}, {0x2, 0x1}, {0x0, 0x8}, {0x2, 0x5}, {0x5, 0x1}, {0x6, 0x7}, {0x1, 0x9}, {0x4, 0x9}, {0x6, 0x1}, {0x4, 0x5}, {0x0, 0x8}, {0x1, 0x5}, {0x2, 0x2}, {0x2, 0x7}, {0x1, 0xa}, {0x3, 0x7}, {0x7, 0x4}, {0x0, 0x3}, {0x6, 0x1}, {0x1, 0xa}, {0x6, 0x2}, {0x1, 0x4}, {0x0, 0xa}, {0x6, 0xa}, {0x3, 0xa}, {0x2, 0x5}, {0x0, 0x9}, {0x4, 0xa}, {0x5, 0x4}, {0x6, 0x8}, {0x2, 0x2}, {0x3, 0x8}, {0x1, 0x5}, {0x7, 0xa}, {0x3, 0xa}, {0x1, 0x4}, {0x1, 0x6}, {0x0, 0x3}, {0x5, 0x1}, {0x6, 0x1}, {0x2, 0x7}, {0x0, 0x9}, {0x1, 0x5}, {0x1, 0x3}, {0x2, 0x8}, {0x7}, {0x7, 0x9}, {0x4, 0x5}, {0x6, 0x3}, {0x6, 0xa}, {0x5, 0x9}, {0x4, 0x5}, {0x3, 0x9}, {0x2, 0x4}, {0x1, 0x7}, {0x4, 0x7}, {0x2, 0x7}, {0x0, 0x7}, {0x3, 0x7}]}]}, @NL80211_BAND_6GHZ={0x68, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x16, 0x1, [0x18, 0x36, 0x30, 0x30, 0xc, 0x6, 0x24, 0x48, 0x9, 0x6, 0x3, 0x3, 0x6c, 0xc, 0x9, 0xb, 0xb, 0x24]}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x0, 0x4, 0x60, 0x18, 0x0, 0xb, 0x6, 0x18, 0x6c, 0xcb, 0x12, 0x24, 0x30, 0x4, 0xc, 0x4, 0x6c, 0x18, 0x30, 0x12, 0x16, 0x30, 0xb, 0x18, 0x30, 0x6, 0x74, 0x60, 0x1d, 0x48, 0x16, 0x30]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7ff, 0x5, 0xffff, 0x8000, 0x7, 0x800, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x5, 0x9, 0x1, 0x4d5f, 0x9, 0x6, 0x6e3]}}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x284, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x19}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x8c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x401, 0x7, 0x4, 0x2, 0xfffe, 0x2, 0x4]}}]}, @NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_2GHZ={0x6c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7ff, 0x0, 0x4ff, 0x1, 0x8, 0x40, 0x2, 0x9]}}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x3, 0x3, 0x1, 0x1b, 0x6c, 0x16, 0x12, 0x48, 0x1b, 0x6c, 0x5, 0x18, 0x4, 0x4, 0x48, 0x16, 0x3, 0x1b, 0x6c, 0x5, 0x2, 0x1, 0x1]}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x3, 0x36, 0x9, 0x6c, 0x1b, 0x3, 0x6, 0x6, 0x60, 0x30, 0x24, 0x30, 0x9, 0x16, 0x24, 0x6c, 0x6c, 0x18, 0x2, 0x5, 0x24, 0x5, 0x1b, 0x24, 0x1b, 0x6c]}, @NL80211_TXRATE_HT={0x16, 0x2, [{0x1}, {0x4, 0x5}, {0x4, 0x9}, {0x7, 0x4}, {0x2, 0x4}, {0x0, 0x4}, {0x6, 0x1}, {0x0, 0x6}, {0x3, 0x1}, {}, {0x4, 0x6}, {0x0, 0x4}, {0x3, 0x9}, {0x5, 0x1}, {0x4, 0x8}, {0x3, 0x1}, {0x3, 0x2}, {0x4, 0x8}]}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1d8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x30, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x15, 0x2, [{0x3}, {0x4, 0x4}, {0x4, 0x2}, {0x7, 0x8}, {0x6, 0x5}, {0x2, 0x5}, {0x1, 0x5}, {0x6, 0x1}, {0x0, 0xa}, {0x1, 0x7}, {0x5, 0x5}, {0x1, 0x8}, {0x0, 0x2}, {0x1, 0x5}, {0x2, 0x3}, {0x5, 0x5}, {0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x800, 0x15, 0xa2, 0x2, 0x2, 0x2, 0xac2d]}}]}, @NL80211_BAND_2GHZ={0x88, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xe, 0x1, [0xb, 0x60, 0x1, 0x6c, 0x30, 0x36, 0x18, 0x9, 0x6, 0x3]}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x2, 0x2}, {0x5, 0x4}, {0x3, 0x1}, {0x4, 0x4}, {0x3, 0x6}, {0x0, 0x8}, {0x0, 0x2}, {0x2, 0x4}, {0x6, 0x3}, {0x1, 0x6}, {0x7, 0x8}, {0x1, 0x4}, {0x5, 0x8}, {0x5, 0x5}, {0x7, 0x9}, {0x7, 0x1}, {0x5, 0x3}, {0x7, 0x3}, {0x1, 0x3}, {0x1, 0x6}, {0x1, 0xa}, {0x5}, {0x7, 0x7}, {0x2, 0xa}, {0x5, 0x8}, {0x0, 0x2}, {0x0, 0x2}, {0x1, 0xa}, {0x2, 0x9}, {0x1, 0x6}, {0x5, 0x1}, {0x4, 0x6}, {0x4, 0xa}, {0x5, 0xa}, {0x7, 0x2}, {0x1, 0x6}, {0x1, 0x9}, {0x5, 0x3}, {0x1, 0x7}, {0x5, 0x4}, {0x7, 0x3}, {0x2, 0x5}, {0x4, 0x3}, {0x4, 0x7}, {0x5, 0x7}, {0x0, 0x8}, {0x0, 0x2}, {0x1, 0x7}, {0x6, 0x6}]}, @NL80211_TXRATE_HT={0x20, 0x2, [{0x2, 0xa}, {0x3, 0x6}, {0x1, 0x2}, {0x4, 0x1}, {0x6, 0x5}, {0x0, 0x7}, {0x1, 0x1}, {}, {0x6, 0x1}, {0x6, 0x4}, {0x0, 0x1}, {0x1, 0x1}, {0x7, 0x4}, {0x4, 0x3}, {0x1, 0x2}, {0x3, 0x9}, {0x6, 0x9}, {0x5, 0x8}, {0x0, 0x5}, {0x5, 0x6}, {0x2, 0x2}, {0x6, 0x3}, {0x4, 0x5}, {}, {0x7, 0x4}, {0x1, 0x9}, {}, {}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc596, 0x958, 0x81, 0x5, 0x9, 0x9, 0xc49, 0x5]}}]}, @NL80211_BAND_60GHZ={0x90, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xffff, 0x3, 0x9, 0xffff, 0x3, 0x2, 0x1]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x3, 0x5}, {0x1, 0x7}, {0x0, 0x7}, {0x2, 0x1}, {0x4, 0x6}, {0x1, 0xa}, {0x1, 0x6}, {0x2, 0x1}, {0x2, 0x3}, {0x3, 0x2}, {0x7, 0x6}, {0x5, 0x5}, {0x7, 0x9}, {0x1, 0x5}, {0x4, 0x9}, {0x1, 0x4}, {0x4, 0x5}, {0x2, 0x3}, {0x2, 0x4}, {0x0, 0x8}, {0x4, 0x1}, {0x5, 0xa}, {0x6, 0x8}, {0x0, 0xa}, {0x6}, {0x1, 0x5}, {0x0, 0x4}, {0x3, 0x6}, {0x0, 0x5}, {0x5, 0x2}, {0x5, 0xa}, {0x3, 0x9}, {0x7, 0x8}, {0x4, 0x4}, {0x5, 0x1}, {0x1, 0x1}, {0x0, 0x6}, {0x6}, {}, {0x1, 0x1}, {0x5, 0x9}, {0x3}, {0x6}, {}, {0x1, 0x1}, {0x4}, {0x5, 0x6}, {0x2, 0x1}, {0x1, 0x9}, {0x0, 0x2}, {0x6, 0x6}, {0x3}, {0x1, 0x4}, {0x1, 0x3}, {0x1, 0x3}, {}, {0x5, 0x8}, {0x3, 0x1}, {0x2, 0x2}, {0x2, 0x9}, {0x2, 0xa}, {0x0, 0x8}, {0x7}, {0x2}]}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x7, 0x7}, {0x3, 0x9}, {0x3, 0x3}, {0x6, 0x5}, {0x7, 0x2}, {0x3, 0x6}, {0x6, 0x7}, {0x3, 0x5}, {0x6, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0xfff7, 0x3, 0x1, 0x18, 0x9, 0x8, 0x20]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x8c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7f, 0x7, 0x3, 0x3, 0x174, 0x7, 0xf800]}}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x30, 0x6, 0x60, 0x9, 0x48, 0x9, 0x6c, 0x18, 0xb, 0x30, 0x0, 0xb, 0x9, 0x30, 0x24, 0xc, 0x69, 0x1b, 0x60]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff7, 0x9c00, 0xfff, 0x50, 0x1000, 0x1, 0x9, 0x7]}}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x1b, 0x0, 0x30, 0xb, 0xc, 0x36, 0x12, 0x36, 0x5, 0x16, 0x12, 0x30, 0x0, 0x12, 0x16, 0x3, 0x6, 0x18, 0x5f, 0x6, 0x6, 0x2, 0x1b, 0x1b, 0x12, 0x2, 0x1, 0x4, 0x2, 0x2, 0x4, 0x18]}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x5, 0x6c, 0x16, 0x60, 0xc, 0x17, 0xb, 0x36, 0xc, 0xb, 0x0, 0x2, 0x16, 0x24, 0x24, 0xd, 0x18, 0x4, 0x6c, 0x36, 0xc, 0x16, 0x4, 0x4, 0x5, 0x48, 0xb, 0x37, 0x1, 0xb, 0x4a, 0x16]}]}]}]}]}]}, 0x1d4c}}, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000003d80), r4)

04:08:02 executing program 1:
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x5c84, 0x6, 0x7f, 0x1, 0x10001, 0x401})
sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, &(0x7f0000000180)=""/18, &(0x7f00000001c0)=0x12)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x78, 0x0, 0x8, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x36}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x54}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xc}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xad7e}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x9}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x401}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1a48920a}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1000}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}]]}, 0x78}}, 0xa909e4503b522b4e)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x64, 0x0, 0x800, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x4}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x3}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x2}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x4}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0xf7}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x2}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x3}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x7}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004}, 0x200080c0)

04:08:02 executing program 7:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x80, 0x10681)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000040)={"ee09c72669f74e6004e77adaee05230e", 0x0, <r1=>0x0, {0x3f, 0x3}, {0x9}, 0x1, [0x6, 0x20, 0x3, 0x3, 0x2, 0x2, 0xff, 0x6, 0x800000000000000, 0x81, 0x5, 0x7fffffff, 0x8, 0x1, 0x7f, 0x7ff]})
clone3(&(0x7f00000003c0)={0x28120800, &(0x7f0000000140)=<r2=>0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0), {0x34}, &(0x7f0000000200)=""/81, 0x51, &(0x7f0000000280)=""/200, &(0x7f0000000380)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x7}, 0x58)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000440)={"20fed1877cf737e4bc2dbf86a35b7a17", 0x0, r1, {0x8, 0x3}, {0x3, 0x5}, 0x2, [0x7, 0x3, 0x10000, 0x5, 0x10000, 0x20, 0x7, 0xd3a, 0xbaa4, 0x8, 0x5, 0xf9b2, 0x8, 0x7, 0x152d, 0x1]})
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000540)=0x8000)
ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000580)=0x3f, &(0x7f00000005c0)=0x4)
sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x2c, 0x0, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000055}, 0x4040)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000700)='./cgroup.net/syz1\x00', 0x200002, 0x0)
pidfd_getfd(r2, 0xffffffffffffffff, 0x0)

04:08:02 executing program 4:
sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7, 0x65}}}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x3}, @NL80211_ATTR_PMK={0x14, 0xfe, "6afeab35b40d1672a8248cd8354a7199"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x7d4e}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x5}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x43}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000080}, 0x8000)
sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xc4, 0x0, 0x800, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x26}}}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_SEQ={0x13, 0xa, "c939319abd3da64f7e9c3201943f42"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_SEQ={0x4}, @NL80211_ATTR_KEY={0x60, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "9df9d47afc"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "8f099f6cbf"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_MODE={0x5}]}, @NL80211_ATTR_KEY_SEQ={0xd, 0xa, "7b445db0f11e7b952a"}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20000014}, 0x40081)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x26f}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xffffffff}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffff9}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}]}, 0x58}}, 0x4000000)
arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000900))

04:08:11 executing program 4:
sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7, 0x65}}}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x3}, @NL80211_ATTR_PMK={0x14, 0xfe, "6afeab35b40d1672a8248cd8354a7199"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x7d4e}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x5}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x43}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000080}, 0x8000)
sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xc4, 0x0, 0x800, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x26}}}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_SEQ={0x13, 0xa, "c939319abd3da64f7e9c3201943f42"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_SEQ={0x4}, @NL80211_ATTR_KEY={0x60, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "9df9d47afc"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "8f099f6cbf"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_MODE={0x5}]}, @NL80211_ATTR_KEY_SEQ={0xd, 0xa, "7b445db0f11e7b952a"}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20000014}, 0x40081)
arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000900))

04:08:11 executing program 2:
clone3(&(0x7f0000001200)={0x2020a00, &(0x7f0000000000)=<r0=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=<r1=>0x0, {0x1}, &(0x7f00000000c0)=""/232, 0xe8, &(0x7f00000001c0)=""/4096, &(0x7f00000011c0)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0], 0x9}, 0x58)
r2 = syz_open_procfs$namespace(r1, &(0x7f0000001280)='ns/time_for_children\x00')
sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x120000}, 0xc, &(0x7f0000001380)={&(0x7f0000001300)={0x6c, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@GTPA_VERSION={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010100}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x4000)
sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001440)={0x58, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x2a}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x20880)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001580), 0xffffffffffffffff)
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001640)={&(0x7f00000015c0)={0x58, r3, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xff, 0x40}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x42}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x48}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3a}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000010}, 0x1)
sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000001780)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x1c, r3, 0x10, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c084}, 0x800)
sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000001880)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001840)={&(0x7f0000001800)={0x3c, r3, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x9}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x42}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x81}, 0x4)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x34, 0x0, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x80008c0)
sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000001a80)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001a40)={&(0x7f0000001a00)={0x2c, 0x0, 0x8, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7f}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0)
r4 = pidfd_getfd(r0, r2, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000001b00), 0xffffffffffffffff)
syz_genetlink_get_family_id$nl80211(&(0x7f0000003d80), r4)

04:08:11 executing program 7:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x80, 0x10681)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000040)={"ee09c72669f74e6004e77adaee05230e", 0x0, <r1=>0x0, {0x3f, 0x3}, {0x9}, 0x1, [0x6, 0x20, 0x3, 0x3, 0x2, 0x2, 0xff, 0x6, 0x800000000000000, 0x81, 0x5, 0x7fffffff, 0x8, 0x1, 0x7f, 0x7ff]})
clone3(&(0x7f00000003c0)={0x28120800, &(0x7f0000000140)=<r2=>0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0), {0x34}, &(0x7f0000000200)=""/81, 0x51, &(0x7f0000000280)=""/200, &(0x7f0000000380)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x7}, 0x58)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000440)={"20fed1877cf737e4bc2dbf86a35b7a17", 0x0, r1, {0x8, 0x3}, {0x3, 0x5}, 0x2, [0x7, 0x3, 0x10000, 0x5, 0x10000, 0x20, 0x7, 0xd3a, 0xbaa4, 0x8, 0x5, 0xf9b2, 0x8, 0x7, 0x152d, 0x1]})
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000540)=0x8000)
ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000580)=0x3f, &(0x7f00000005c0)=0x4)
sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x2c, 0x0, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000055}, 0x4040)
pidfd_getfd(r2, 0xffffffffffffffff, 0x0)

04:08:11 executing program 6:
ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f0000000000)={0x5a, 0x1, 0x0, [{0x100000000000000, 0x1, 0x3, 0x3, 0x3, 0x9, 0x1}]})
ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f0000000080)={0x7, 0x88a3})
ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f00000000c0)={0x9, 0x3, 0x0, [{0x2, 0x6, 0xa9d, 0x6, 0xff, 0x8, 0x2}, {0x101, 0x7, 0x7f, 0x1, 0x57, 0x1b, 0x3}, {0x4, 0x2, 0x7, 0x4, 0x81, 0x5, 0xe0}]})
ioctl$BLKALIGNOFF(0xffffffffffffffff, 0x127a, &(0x7f00000001c0))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan0\x00', <r0=>0x0})
sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x0, 0x10, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x4, 0x15}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0xf}]}, 0x30}, 0x1, 0x0, 0x0, 0x41}, 0x4000)
ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000340)=0x1ff)
r1 = syz_open_dev$loop(&(0x7f0000000380), 0x7, 0x400201)
ioctl$IOC_PR_REGISTER(r1, 0x401870c8, &(0x7f00000003c0)={0x2, 0x80})
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000008c0)='ns/pid_for_children\x00')
syz_open_dev$loop(&(0x7f0000000b80), 0x5, 0x0)

04:08:11 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000040)={'ip_vti0\x00', <r1=>0x0, 0x20, 0x0, 0x3, 0x101, {{0xd, 0x4, 0x0, 0x0, 0x34, 0x64, 0x0, 0x6, 0x4, 0x0, @local, @local, {[@end, @noop, @timestamp_addr={0x44, 0x1c, 0x2d, 0x1, 0x5, [{@broadcast, 0x3f}, {@private=0xa010102, 0x405}, {@private=0xa010102, 0x4}]}]}}}}})
sendmsg$GTP_CMD_DELPDP(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010100}, @GTPA_VERSION={0x8}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_LINK={0x8, 0x1, r1}]}, 0x48}, 0x1, 0x0, 0x0, 0x400000c0}, 0x80)
openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000007d40)={&(0x7f0000007c40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000007d00)={&(0x7f0000007cc0)={0x2c, 0x0, 0x8, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x35}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x68}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x2d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4011}, 0xfb86cd92800204df)

04:08:11 executing program 5:
r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x420840, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000040))
r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000240), 0x8400, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x74, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x24}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x33}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5df}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
process_mrelease(0xffffffffffffffff, 0x0)
r2 = syz_open_dev$loop(&(0x7f00000003c0), 0x8, 0x100)
ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000400)=<r3=>0x0)
ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000440)=<r4=>0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000480)={"30a64fc6824809bf19d020ed58ceb551", r3, r4, {0x6, 0x3}, {0x8, 0x4}, 0x6e4, [0x100, 0x100, 0x10000, 0x100000000, 0x80000000, 0x0, 0xffffffff, 0x1, 0x25, 0x1d0b, 0xffffffff, 0x25b, 0xb35, 0x400, 0x6, 0x9]})
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_ADMITTED_TIME={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008080}, 0x40)
openat$zero(0xffffffffffffff9c, &(0x7f00000006c0), 0x401, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r2)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001d00)={<r6=>0xffffffffffffffff})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r6, 0xc0c89425, &(0x7f0000001f40)={"8e4fd7b5e4a605843a57f12f3e418c87", r4, 0x0, {0x3, 0x207}, {0x81, 0xfff}, 0x2, [0xa139, 0x365fe8f0, 0x20, 0x5, 0x3, 0x2, 0x3, 0x6, 0x401, 0xfffffffffffffff7, 0x28000, 0x7, 0x7fffffff, 0x9, 0x92, 0x7ff]})

04:08:11 executing program 3:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000)=<r1=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=<r2=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r2, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
r4 = pidfd_getfd(r3, r1, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r6 = pidfd_getfd(r3, r5, 0x0)
r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r6, 0x10000000)
r8 = ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0)
syz_io_uring_submit(0x0, r7, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd=r8, 0xff, {0x0, r6}, 0x9, 0x0, 0x1, {0x0, 0x0, r6}}, 0x3f)
sendmsg$NL80211_CMD_SET_BEACON(r4, &(0x7f0000002480)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002440)={&(0x7f0000002040)={0x3f8, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x59}}}}, [@NL80211_ATTR_FTM_RESPONDER={0x8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x4}]}, @NL80211_ATTR_IE_ASSOC_RESP={0xe9, 0x80, [@ssid={0x0, 0x6, @default_ibss_ssid}, @perr={0x84, 0xdb, {0xb1, 0xd, [@ext={{}, @device_b, 0x4, @device_b, 0x31}, @ext={{}, @broadcast, 0x71, @broadcast}, @ext={{}, @device_a, 0x800, @broadcast}, @ext={{}, @device_a, 0x0, @device_a, 0x4}, @ext={{}, @device_b, 0xfb7, @device_b, 0x1f}, @ext={{}, @device_a, 0x5c, @device_a, 0x13}, @ext={{}, @broadcast, 0x6b6, @device_a, 0x2}, @not_ext={{}, @device_a, 0xfffffffb, "", 0x3b}, @ext={{}, @broadcast, 0x8, @device_a, 0x35}, @not_ext={{}, @device_a, 0x1ff, "", 0x3b}, @not_ext={{}, @broadcast, 0xfffffffc, "", 0x1a}, @not_ext={{}, @device_b, 0x2, "", 0x29}, @not_ext={{}, @device_a, 0x4d7, "", 0x1}]}}]}, @NL80211_ATTR_BEACON_HEAD={0x2d7, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x1}, {0x7}, @device_a, @device_b, @initial, {0xa}}, 0x5, @default, 0x20, @void, @val={0x1, 0x1, [{0x30}]}, @val={0x3, 0x1, 0x1}, @val={0x4, 0x6, {0xe0, 0xcf, 0x3f, 0x200}}, @val={0x6, 0x2, 0x8001}, @val={0x5, 0x76, {0x6, 0x38, 0x2, "10b21220a7e17aa7ade37268e0e81fe95de79339ad2467b8a5eef9108e9a09fa753d7597bf11c12ace1aebd79b53daeb6bbbb75da52fb38ca3541142197e944d0e26b3c46a3bea62a5c61d1bbc9912d6ed1ca9d0e8f19f02decab5549c686d6212899af23e29a43e525dfa585550da4983ca0b"}}, @void, @void, @val={0x3c, 0x4, {0x0, 0x81, 0xa5, 0x4}}, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7f, 0x40}}, @void, [{0xdd, 0x6b, "0b36c576f84ac6cffe786ff88ffe68c0ea02d0510952894a24ab08bd8c483fee3c7a6f27179f6359866c88189592d429529710e4e201521b9a593149cea9c7b740ec30c73d276e7d7c095648904da89a2fc366fcbaaad052d8800ef7d40e057d20dc237469b86915482e31"}, {0xdd, 0x5b, "a0b26066bb5c06a90294a802b7cfd3a31e825b935b9a34e5710c6edfd16407a3a175635e7dd0ca8865f85a0ff0e59c940b60a1196cc007341922dd719663526c0f62994072644a26bc1221c8f7b70b532958e8594c13d8bf04044c"}, {0xdd, 0x50, "1b7fb12db25b28a1e8bf44b4a0ec7038eac299b18da885e9406df21d13ac898acdc2b7015db1eb07b07a0f4600b5a0d6a21288991d54441c8984184fd070e89e1207c3e5752495eb146e473ae978dbcd"}, {0xdd, 0xf0, "590123abe3a12ee381bceedcca542b203ece57faf5c1e1cbdf7b00084fc099ce8f0f6df1ffd2adbb9c5481e74b91841557e335a10da8d97d06cc3e192372d958756b2f5728c9ebf67a9474543288c1009130dcd0ce2a3f1b055b30f7ad603a7c9470ed3bc34a8ccfcc08b287401dc3b4d0947b3b3c15db92547ed6c0b983f10089089c0ca237822d53f16b9e8bef970a49d638d87d813103340eb50dea3e3dd8ca19f6e6a218d6ca102363e2754b58614f0cacc488fe3a65ca2268f684ebf26cced683431940ea9e0f69f489d9a64dd5224b7fe6ae8e7ebf4f186b02da651746810d239f97dfa7a27befaeb408bc2759"}]}}, @NL80211_ATTR_IE={0xb, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x1}, @supported_rates={0x1, 0x2, [{0x3}, {0x9, 0x1}]}]}]}, 0x3f8}, 0x1, 0x0, 0x0, 0x8040}, 0x40)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(r6, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:08:11 executing program 1:
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x5c84, 0x6, 0x7f, 0x1, 0x10001, 0x401})
sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, &(0x7f0000000180)=""/18, &(0x7f00000001c0)=0x12)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x78, 0x0, 0x8, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x36}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x54}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xc}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xad7e}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x9}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x401}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1a48920a}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1000}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}]]}, 0x78}}, 0xa909e4503b522b4e)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x64, 0x0, 0x800, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x4}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x3}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x2}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x4}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0xf7}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x2}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x3}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x7}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004}, 0x200080c0)

04:08:11 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000040)={'ip_vti0\x00', <r1=>0x0, 0x20, 0x0, 0x3, 0x101, {{0xd, 0x4, 0x0, 0x0, 0x34, 0x64, 0x0, 0x6, 0x4, 0x0, @local, @local, {[@end, @noop, @timestamp_addr={0x44, 0x1c, 0x2d, 0x1, 0x5, [{@broadcast, 0x3f}, {@private=0xa010102, 0x405}, {@private=0xa010102, 0x4}]}]}}}}})
sendmsg$GTP_CMD_DELPDP(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010100}, @GTPA_VERSION={0x8}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_LINK={0x8, 0x1, r1}]}, 0x48}, 0x1, 0x0, 0x0, 0x400000c0}, 0x80)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000007d40)={&(0x7f0000007c40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000007d00)={&(0x7f0000007cc0)={0x2c, 0x0, 0x8, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x35}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x68}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x2d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4011}, 0xfb86cd92800204df)

04:08:11 executing program 4:
sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7, 0x65}}}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x3}, @NL80211_ATTR_PMK={0x14, 0xfe, "6afeab35b40d1672a8248cd8354a7199"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x7d4e}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x5}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x43}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000080}, 0x8000)
arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000900))

04:08:11 executing program 7:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x80, 0x10681)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000040)={"ee09c72669f74e6004e77adaee05230e", 0x0, <r1=>0x0, {0x3f, 0x3}, {0x9}, 0x1, [0x6, 0x20, 0x3, 0x3, 0x2, 0x2, 0xff, 0x6, 0x800000000000000, 0x81, 0x5, 0x7fffffff, 0x8, 0x1, 0x7f, 0x7ff]})
clone3(&(0x7f00000003c0)={0x28120800, &(0x7f0000000140)=<r2=>0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0), {0x34}, &(0x7f0000000200)=""/81, 0x51, &(0x7f0000000280)=""/200, &(0x7f0000000380)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x7}, 0x58)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000440)={"20fed1877cf737e4bc2dbf86a35b7a17", 0x0, r1, {0x8, 0x3}, {0x3, 0x5}, 0x2, [0x7, 0x3, 0x10000, 0x5, 0x10000, 0x20, 0x7, 0xd3a, 0xbaa4, 0x8, 0x5, 0xf9b2, 0x8, 0x7, 0x152d, 0x1]})
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000540)=0x8000)
ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000580)=0x3f, &(0x7f00000005c0)=0x4)
pidfd_getfd(r2, 0xffffffffffffffff, 0x0)

04:08:11 executing program 2:
clone3(&(0x7f0000001200)={0x2020a00, &(0x7f0000000000)=<r0=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=<r1=>0x0, {0x1}, &(0x7f00000000c0)=""/232, 0xe8, &(0x7f00000001c0)=""/4096, &(0x7f00000011c0)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0], 0x9}, 0x58)
r2 = syz_open_procfs$namespace(r1, &(0x7f0000001280)='ns/time_for_children\x00')
sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x120000}, 0xc, &(0x7f0000001380)={&(0x7f0000001300)={0x6c, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@GTPA_VERSION={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010100}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x4000)
sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001440)={0x58, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x2a}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x20880)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001580), 0xffffffffffffffff)
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001640)={&(0x7f00000015c0)={0x58, r3, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xff, 0x40}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x42}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x48}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3a}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000010}, 0x1)
sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000001780)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x1c, r3, 0x10, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c084}, 0x800)
sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000001880)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001840)={&(0x7f0000001800)={0x3c, r3, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x9}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x42}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x81}, 0x4)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x34, 0x0, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x80008c0)
sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000001a80)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001a40)={&(0x7f0000001a00)={0x2c, 0x0, 0x8, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7f}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0)
r4 = pidfd_getfd(r0, r2, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000003d80), r4)

04:08:11 executing program 1:
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x5c84, 0x6, 0x7f, 0x1, 0x10001, 0x401})
sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, &(0x7f0000000180)=""/18, &(0x7f00000001c0)=0x12)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x64, 0x0, 0x800, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x4}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x3}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x2}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x4}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0xf7}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x2}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x3}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x7}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004}, 0x200080c0)

04:08:11 executing program 6:
ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f0000000000)={0x5a, 0x1, 0x0, [{0x100000000000000, 0x1, 0x3, 0x3, 0x3, 0x9, 0x1}]})
ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f0000000080)={0x7, 0x88a3})
ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f00000000c0)={0x9, 0x3, 0x0, [{0x2, 0x6, 0xa9d, 0x6, 0xff, 0x8, 0x2}, {0x101, 0x7, 0x7f, 0x1, 0x57, 0x1b, 0x3}, {0x4, 0x2, 0x7, 0x4, 0x81, 0x5, 0xe0}]})
ioctl$BLKALIGNOFF(0xffffffffffffffff, 0x127a, &(0x7f00000001c0))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan0\x00', <r0=>0x0})
sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x0, 0x10, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x4, 0x15}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0xf}]}, 0x30}, 0x1, 0x0, 0x0, 0x41}, 0x4000)
ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000340)=0x1ff)
r1 = syz_open_dev$loop(&(0x7f0000000380), 0x7, 0x400201)
ioctl$IOC_PR_REGISTER(r1, 0x401870c8, &(0x7f00000003c0)={0x2, 0x80})
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000008c0)='ns/pid_for_children\x00')
syz_open_dev$loop(&(0x7f0000000b80), 0x5, 0x0)

04:08:11 executing program 5:
r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x420840, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000040))
r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000240), 0x8400, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x74, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x24}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x33}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5df}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
process_mrelease(0xffffffffffffffff, 0x0)
syz_open_dev$loop(&(0x7f00000003c0), 0x8, 0x100)
ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000400)=<r2=>0x0)
ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000440)=<r3=>0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000480)={"30a64fc6824809bf19d020ed58ceb551", r2, r3, {0x6, 0x3}, {0x8, 0x4}, 0x6e4, [0x100, 0x100, 0x10000, 0x100000000, 0x80000000, 0x0, 0xffffffff, 0x1, 0x25, 0x1d0b, 0xffffffff, 0x25b, 0xb35, 0x400, 0x6, 0x9]})
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_ADMITTED_TIME={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008080}, 0x40)
openat$zero(0xffffffffffffff9c, &(0x7f00000006c0), 0x401, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001d00)={<r5=>0xffffffffffffffff})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f0000001f40)={"8e4fd7b5e4a605843a57f12f3e418c87", r3, 0x0, {0x3, 0x207}, {0x81, 0xfff}, 0x2, [0xa139, 0x365fe8f0, 0x20, 0x5, 0x3, 0x2, 0x3, 0x6, 0x401, 0xfffffffffffffff7, 0x28000, 0x7, 0x7fffffff, 0x9, 0x92, 0x7ff]})

04:08:11 executing program 4:
arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000900))

04:08:11 executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000040)={'ip_vti0\x00', 0x0, 0x20, 0x0, 0x3, 0x101, {{0xd, 0x4, 0x0, 0x0, 0x34, 0x64, 0x0, 0x6, 0x4, 0x0, @local, @local, {[@end, @noop, @timestamp_addr={0x44, 0x1c, 0x2d, 0x1, 0x5, [{@broadcast, 0x3f}, {@private=0xa010102, 0x405}, {@private=0xa010102, 0x4}]}]}}}}})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000007d40)={&(0x7f0000007c40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000007d00)={&(0x7f0000007cc0)={0x2c, 0x0, 0x8, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x35}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x68}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x2d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4011}, 0xfb86cd92800204df)

04:08:18 executing program 1:
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x5c84, 0x6, 0x7f, 0x1, 0x10001, 0x401})
sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, &(0x7f0000000180)=""/18, &(0x7f00000001c0)=0x12)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x64, 0x0, 0x800, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x4}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x3}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x2}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x4}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0xf7}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x2}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x3}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x7}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004}, 0x200080c0)

04:08:18 executing program 2:
clone3(&(0x7f0000001200)={0x2020a00, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r0=>0x0, {0x1}, &(0x7f00000000c0)=""/232, 0xe8, &(0x7f00000001c0)=""/4096, &(0x7f00000011c0)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0], 0x9}, 0x58)
r1 = syz_open_procfs$namespace(r0, &(0x7f0000001280)='ns/time_for_children\x00')
sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x120000}, 0xc, &(0x7f0000001380)={&(0x7f0000001300)={0x6c, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@GTPA_VERSION={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010100}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x4000)
sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001440)={0x58, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x2a}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x20880)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001580), 0xffffffffffffffff)
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001640)={&(0x7f00000015c0)={0x58, r2, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xff, 0x40}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x42}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x48}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3a}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000010}, 0x1)
sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000001780)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x1c, r2, 0x10, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c084}, 0x800)
sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000001880)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001840)={&(0x7f0000001800)={0x3c, r2, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x9}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x42}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x81}, 0x4)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x34, 0x0, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x80008c0)
sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000001a80)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001a40)={&(0x7f0000001a00)={0x2c, 0x0, 0x8, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7f}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000003d80), 0xffffffffffffffff)

04:08:18 executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000007d40)={&(0x7f0000007c40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000007d00)={&(0x7f0000007cc0)={0x2c, 0x0, 0x8, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x35}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x68}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x2d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4011}, 0xfb86cd92800204df)

04:08:18 executing program 6:
ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f0000000000)={0x5a, 0x1, 0x0, [{0x100000000000000, 0x1, 0x3, 0x3, 0x3, 0x9, 0x1}]})
ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f0000000080)={0x7, 0x88a3})
ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f00000000c0)={0x9, 0x3, 0x0, [{0x2, 0x6, 0xa9d, 0x6, 0xff, 0x8, 0x2}, {0x101, 0x7, 0x7f, 0x1, 0x57, 0x1b, 0x3}, {0x4, 0x2, 0x7, 0x4, 0x81, 0x5, 0xe0}]})
ioctl$BLKALIGNOFF(0xffffffffffffffff, 0x127a, &(0x7f00000001c0))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan0\x00', <r0=>0x0})
sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x0, 0x10, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x4, 0x15}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0xf}]}, 0x30}, 0x1, 0x0, 0x0, 0x41}, 0x4000)
ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000340)=0x1ff)
r1 = syz_open_dev$loop(&(0x7f0000000380), 0x7, 0x400201)
ioctl$IOC_PR_REGISTER(r1, 0x401870c8, &(0x7f00000003c0)={0x2, 0x80})
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000008c0)='ns/pid_for_children\x00')
syz_open_dev$loop(&(0x7f0000000b80), 0x5, 0x0)

04:08:18 executing program 7:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x80, 0x10681)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000040)={"ee09c72669f74e6004e77adaee05230e", 0x0, <r1=>0x0, {0x3f, 0x3}, {0x9}, 0x1, [0x6, 0x20, 0x3, 0x3, 0x2, 0x2, 0xff, 0x6, 0x800000000000000, 0x81, 0x5, 0x7fffffff, 0x8, 0x1, 0x7f, 0x7ff]})
clone3(&(0x7f00000003c0)={0x28120800, &(0x7f0000000140)=<r2=>0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0), {0x34}, &(0x7f0000000200)=""/81, 0x51, &(0x7f0000000280)=""/200, &(0x7f0000000380)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x7}, 0x58)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000440)={"20fed1877cf737e4bc2dbf86a35b7a17", 0x0, r1, {0x8, 0x3}, {0x3, 0x5}, 0x2, [0x7, 0x3, 0x10000, 0x5, 0x10000, 0x20, 0x7, 0xd3a, 0xbaa4, 0x8, 0x5, 0xf9b2, 0x8, 0x7, 0x152d, 0x1]})
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000540)=0x8000)
ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
pidfd_getfd(r2, 0xffffffffffffffff, 0x0)

04:08:18 executing program 5:
r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x420840, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000040))
r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000240), 0x8400, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x74, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x24}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x33}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5df}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
process_mrelease(0xffffffffffffffff, 0x0)
syz_open_dev$loop(&(0x7f00000003c0), 0x8, 0x100)
ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000400)=<r2=>0x0)
ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000440)=<r3=>0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000480)={"30a64fc6824809bf19d020ed58ceb551", r2, r3, {0x6, 0x3}, {0x8, 0x4}, 0x6e4, [0x100, 0x100, 0x10000, 0x100000000, 0x80000000, 0x0, 0xffffffff, 0x1, 0x25, 0x1d0b, 0xffffffff, 0x25b, 0xb35, 0x400, 0x6, 0x9]})
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_ADMITTED_TIME={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008080}, 0x40)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001d00)={<r5=>0xffffffffffffffff})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f0000001f40)={"8e4fd7b5e4a605843a57f12f3e418c87", r3, 0x0, {0x3, 0x207}, {0x81, 0xfff}, 0x2, [0xa139, 0x365fe8f0, 0x20, 0x5, 0x3, 0x2, 0x3, 0x6, 0x401, 0xfffffffffffffff7, 0x28000, 0x7, 0x7fffffff, 0x9, 0x92, 0x7ff]})

04:08:18 executing program 4:
arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000900))

04:08:18 executing program 3:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000)=<r1=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=<r2=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r2, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
r4 = pidfd_getfd(r3, r1, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r6 = pidfd_getfd(r3, r5, 0x0)
r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r6, 0x10000000)
r8 = ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0)
syz_io_uring_submit(0x0, r7, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd=r8, 0xff, {0x0, r6}, 0x9, 0x0, 0x1, {0x0, 0x0, r6}}, 0x3f)
sendmsg$NL80211_CMD_SET_BEACON(r4, &(0x7f0000002480)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002440)={&(0x7f0000002040)={0x3f8, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x59}}}}, [@NL80211_ATTR_FTM_RESPONDER={0x8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x4}]}, @NL80211_ATTR_IE_ASSOC_RESP={0xe9, 0x80, [@ssid={0x0, 0x6, @default_ibss_ssid}, @perr={0x84, 0xdb, {0xb1, 0xd, [@ext={{}, @device_b, 0x4, @device_b, 0x31}, @ext={{}, @broadcast, 0x71, @broadcast}, @ext={{}, @device_a, 0x800, @broadcast}, @ext={{}, @device_a, 0x0, @device_a, 0x4}, @ext={{}, @device_b, 0xfb7, @device_b, 0x1f}, @ext={{}, @device_a, 0x5c, @device_a, 0x13}, @ext={{}, @broadcast, 0x6b6, @device_a, 0x2}, @not_ext={{}, @device_a, 0xfffffffb, "", 0x3b}, @ext={{}, @broadcast, 0x8, @device_a, 0x35}, @not_ext={{}, @device_a, 0x1ff, "", 0x3b}, @not_ext={{}, @broadcast, 0xfffffffc, "", 0x1a}, @not_ext={{}, @device_b, 0x2, "", 0x29}, @not_ext={{}, @device_a, 0x4d7, "", 0x1}]}}]}, @NL80211_ATTR_BEACON_HEAD={0x2d7, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x1}, {0x7}, @device_a, @device_b, @initial, {0xa}}, 0x5, @default, 0x20, @void, @val={0x1, 0x1, [{0x30}]}, @val={0x3, 0x1, 0x1}, @val={0x4, 0x6, {0xe0, 0xcf, 0x3f, 0x200}}, @val={0x6, 0x2, 0x8001}, @val={0x5, 0x76, {0x6, 0x38, 0x2, "10b21220a7e17aa7ade37268e0e81fe95de79339ad2467b8a5eef9108e9a09fa753d7597bf11c12ace1aebd79b53daeb6bbbb75da52fb38ca3541142197e944d0e26b3c46a3bea62a5c61d1bbc9912d6ed1ca9d0e8f19f02decab5549c686d6212899af23e29a43e525dfa585550da4983ca0b"}}, @void, @void, @val={0x3c, 0x4, {0x0, 0x81, 0xa5, 0x4}}, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7f, 0x40}}, @void, [{0xdd, 0x6b, "0b36c576f84ac6cffe786ff88ffe68c0ea02d0510952894a24ab08bd8c483fee3c7a6f27179f6359866c88189592d429529710e4e201521b9a593149cea9c7b740ec30c73d276e7d7c095648904da89a2fc366fcbaaad052d8800ef7d40e057d20dc237469b86915482e31"}, {0xdd, 0x5b, "a0b26066bb5c06a90294a802b7cfd3a31e825b935b9a34e5710c6edfd16407a3a175635e7dd0ca8865f85a0ff0e59c940b60a1196cc007341922dd719663526c0f62994072644a26bc1221c8f7b70b532958e8594c13d8bf04044c"}, {0xdd, 0x50, "1b7fb12db25b28a1e8bf44b4a0ec7038eac299b18da885e9406df21d13ac898acdc2b7015db1eb07b07a0f4600b5a0d6a21288991d54441c8984184fd070e89e1207c3e5752495eb146e473ae978dbcd"}, {0xdd, 0xf0, "590123abe3a12ee381bceedcca542b203ece57faf5c1e1cbdf7b00084fc099ce8f0f6df1ffd2adbb9c5481e74b91841557e335a10da8d97d06cc3e192372d958756b2f5728c9ebf67a9474543288c1009130dcd0ce2a3f1b055b30f7ad603a7c9470ed3bc34a8ccfcc08b287401dc3b4d0947b3b3c15db92547ed6c0b983f10089089c0ca237822d53f16b9e8bef970a49d638d87d813103340eb50dea3e3dd8ca19f6e6a218d6ca102363e2754b58614f0cacc488fe3a65ca2268f684ebf26cced683431940ea9e0f69f489d9a64dd5224b7fe6ae8e7ebf4f186b02da651746810d239f97dfa7a27befaeb408bc2759"}]}}, @NL80211_ATTR_IE={0xb, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x1}, @supported_rates={0x1, 0x2, [{0x3}, {0x9, 0x1}]}]}]}, 0x3f8}, 0x1, 0x0, 0x0, 0x8040}, 0x40)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(r6, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:08:18 executing program 6:
ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f0000000000)={0x5a, 0x1, 0x0, [{0x100000000000000, 0x1, 0x3, 0x3, 0x3, 0x9, 0x1}]})
ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f0000000080)={0x7, 0x88a3})
ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f00000000c0)={0x9, 0x3, 0x0, [{0x2, 0x6, 0xa9d, 0x6, 0xff, 0x8, 0x2}, {0x101, 0x7, 0x7f, 0x1, 0x57, 0x1b, 0x3}, {0x4, 0x2, 0x7, 0x4, 0x81, 0x5, 0xe0}]})
ioctl$BLKALIGNOFF(0xffffffffffffffff, 0x127a, &(0x7f00000001c0))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan0\x00', <r0=>0x0})
sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x0, 0x10, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x4, 0x15}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0xf}]}, 0x30}, 0x1, 0x0, 0x0, 0x41}, 0x4000)
ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000340)=0x1ff)
syz_open_dev$loop(&(0x7f0000000380), 0x7, 0x400201)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000008c0)='ns/pid_for_children\x00')
syz_open_dev$loop(&(0x7f0000000b80), 0x5, 0x0)

04:08:18 executing program 5:
r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x420840, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000040))
r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000240), 0x8400, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x74, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x24}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x33}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5df}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
process_mrelease(0xffffffffffffffff, 0x0)
syz_open_dev$loop(&(0x7f00000003c0), 0x8, 0x100)
ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000400)=<r2=>0x0)
ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000440)=<r3=>0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000480)={"30a64fc6824809bf19d020ed58ceb551", r2, r3, {0x6, 0x3}, {0x8, 0x4}, 0x6e4, [0x100, 0x100, 0x10000, 0x100000000, 0x80000000, 0x0, 0xffffffff, 0x1, 0x25, 0x1d0b, 0xffffffff, 0x25b, 0xb35, 0x400, 0x6, 0x9]})
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'wlan0\x00'})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001d00)={<r4=>0xffffffffffffffff})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f0000001f40)={"8e4fd7b5e4a605843a57f12f3e418c87", r3, 0x0, {0x3, 0x207}, {0x81, 0xfff}, 0x2, [0xa139, 0x365fe8f0, 0x20, 0x5, 0x3, 0x2, 0x3, 0x6, 0x401, 0xfffffffffffffff7, 0x28000, 0x7, 0x7fffffff, 0x9, 0x92, 0x7ff]})

04:08:18 executing program 4:
arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000900))

04:08:18 executing program 1:
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x5c84, 0x6, 0x7f, 0x1, 0x10001, 0x401})
sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x64, 0x0, 0x800, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x4}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x3}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x2}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x4}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0xf7}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x2}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x3}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x7}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004}, 0x200080c0)

04:08:18 executing program 0:
sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000007d40)={&(0x7f0000007c40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000007d00)={&(0x7f0000007cc0)={0x2c, 0x0, 0x8, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x35}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x68}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x2d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4011}, 0xfb86cd92800204df)

04:08:18 executing program 2:
clone3(&(0x7f0000001200)={0x2020a00, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r0=>0x0, {0x1}, &(0x7f00000000c0)=""/232, 0xe8, &(0x7f00000001c0)=""/4096, &(0x7f00000011c0)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0], 0x9}, 0x58)
r1 = syz_open_procfs$namespace(r0, &(0x7f0000001280)='ns/time_for_children\x00')
sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x120000}, 0xc, &(0x7f0000001380)={&(0x7f0000001300)={0x6c, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@GTPA_VERSION={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010100}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x4000)
sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001440)={0x58, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x2a}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x20880)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001580), 0xffffffffffffffff)
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001640)={&(0x7f00000015c0)={0x58, r2, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xff, 0x40}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x42}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x48}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3a}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000010}, 0x1)
sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000001780)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x1c, r2, 0x10, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c084}, 0x800)
sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000001880)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001840)={&(0x7f0000001800)={0x3c, r2, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x9}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x42}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x81}, 0x4)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x34, 0x0, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x80008c0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000003d80), 0xffffffffffffffff)

[  179.585834] Bluetooth: hci5: command 0x0406 tx timeout
[  179.587725] Bluetooth: hci2: command 0x0406 tx timeout
[  179.590853] Bluetooth: hci4: command 0x0406 tx timeout
[  179.591692] Bluetooth: hci3: command 0x0406 tx timeout
[  179.592579] Bluetooth: hci0: command 0x0406 tx timeout
[  179.593387] Bluetooth: hci1: command 0x0406 tx timeout
[  179.594445] Bluetooth: hci7: command 0x0406 tx timeout
[  179.595258] Bluetooth: hci6: command 0x0406 tx timeout
04:08:27 executing program 5:
r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x420840, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000040))
r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000240), 0x8400, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x74, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x24}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x33}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5df}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
process_mrelease(0xffffffffffffffff, 0x0)
syz_open_dev$loop(&(0x7f00000003c0), 0x8, 0x100)
ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000400)=<r2=>0x0)
ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000440)=<r3=>0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000480)={"30a64fc6824809bf19d020ed58ceb551", r2, r3, {0x6, 0x3}, {0x8, 0x4}, 0x6e4, [0x100, 0x100, 0x10000, 0x100000000, 0x80000000, 0x0, 0xffffffff, 0x1, 0x25, 0x1d0b, 0xffffffff, 0x25b, 0xb35, 0x400, 0x6, 0x9]})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001d00)={<r4=>0xffffffffffffffff})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f0000001f40)={"8e4fd7b5e4a605843a57f12f3e418c87", r3, 0x0, {0x3, 0x207}, {0x81, 0xfff}, 0x2, [0xa139, 0x365fe8f0, 0x20, 0x5, 0x3, 0x2, 0x3, 0x6, 0x401, 0xfffffffffffffff7, 0x28000, 0x7, 0x7fffffff, 0x9, 0x92, 0x7ff]})

04:08:27 executing program 7:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x80, 0x10681)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000040)={"ee09c72669f74e6004e77adaee05230e", 0x0, <r1=>0x0, {0x3f, 0x3}, {0x9}, 0x1, [0x6, 0x20, 0x3, 0x3, 0x2, 0x2, 0xff, 0x6, 0x800000000000000, 0x81, 0x5, 0x7fffffff, 0x8, 0x1, 0x7f, 0x7ff]})
clone3(&(0x7f00000003c0)={0x28120800, &(0x7f0000000140)=<r2=>0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0), {0x34}, &(0x7f0000000200)=""/81, 0x51, &(0x7f0000000280)=""/200, &(0x7f0000000380)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x7}, 0x58)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000440)={"20fed1877cf737e4bc2dbf86a35b7a17", 0x0, r1, {0x8, 0x3}, {0x3, 0x5}, 0x2, [0x7, 0x3, 0x10000, 0x5, 0x10000, 0x20, 0x7, 0xd3a, 0xbaa4, 0x8, 0x5, 0xf9b2, 0x8, 0x7, 0x152d, 0x1]})
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000540)=0x8000)
pidfd_getfd(r2, 0xffffffffffffffff, 0x0)

04:08:27 executing program 3:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000)=<r1=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=<r2=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r2, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
r4 = pidfd_getfd(r3, r1, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r6 = pidfd_getfd(r3, r5, 0x0)
r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r6, 0x10000000)
r8 = ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0)
syz_io_uring_submit(0x0, r7, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd=r8, 0xff, {0x0, r6}, 0x9, 0x0, 0x1, {0x0, 0x0, r6}}, 0x3f)
sendmsg$NL80211_CMD_SET_BEACON(r4, &(0x7f0000002480)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002440)={&(0x7f0000002040)={0x3f8, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x59}}}}, [@NL80211_ATTR_FTM_RESPONDER={0x8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x4}]}, @NL80211_ATTR_IE_ASSOC_RESP={0xe9, 0x80, [@ssid={0x0, 0x6, @default_ibss_ssid}, @perr={0x84, 0xdb, {0xb1, 0xd, [@ext={{}, @device_b, 0x4, @device_b, 0x31}, @ext={{}, @broadcast, 0x71, @broadcast}, @ext={{}, @device_a, 0x800, @broadcast}, @ext={{}, @device_a, 0x0, @device_a, 0x4}, @ext={{}, @device_b, 0xfb7, @device_b, 0x1f}, @ext={{}, @device_a, 0x5c, @device_a, 0x13}, @ext={{}, @broadcast, 0x6b6, @device_a, 0x2}, @not_ext={{}, @device_a, 0xfffffffb, "", 0x3b}, @ext={{}, @broadcast, 0x8, @device_a, 0x35}, @not_ext={{}, @device_a, 0x1ff, "", 0x3b}, @not_ext={{}, @broadcast, 0xfffffffc, "", 0x1a}, @not_ext={{}, @device_b, 0x2, "", 0x29}, @not_ext={{}, @device_a, 0x4d7, "", 0x1}]}}]}, @NL80211_ATTR_BEACON_HEAD={0x2d7, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x1}, {0x7}, @device_a, @device_b, @initial, {0xa}}, 0x5, @default, 0x20, @void, @val={0x1, 0x1, [{0x30}]}, @val={0x3, 0x1, 0x1}, @val={0x4, 0x6, {0xe0, 0xcf, 0x3f, 0x200}}, @val={0x6, 0x2, 0x8001}, @val={0x5, 0x76, {0x6, 0x38, 0x2, "10b21220a7e17aa7ade37268e0e81fe95de79339ad2467b8a5eef9108e9a09fa753d7597bf11c12ace1aebd79b53daeb6bbbb75da52fb38ca3541142197e944d0e26b3c46a3bea62a5c61d1bbc9912d6ed1ca9d0e8f19f02decab5549c686d6212899af23e29a43e525dfa585550da4983ca0b"}}, @void, @void, @val={0x3c, 0x4, {0x0, 0x81, 0xa5, 0x4}}, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7f, 0x40}}, @void, [{0xdd, 0x6b, "0b36c576f84ac6cffe786ff88ffe68c0ea02d0510952894a24ab08bd8c483fee3c7a6f27179f6359866c88189592d429529710e4e201521b9a593149cea9c7b740ec30c73d276e7d7c095648904da89a2fc366fcbaaad052d8800ef7d40e057d20dc237469b86915482e31"}, {0xdd, 0x5b, "a0b26066bb5c06a90294a802b7cfd3a31e825b935b9a34e5710c6edfd16407a3a175635e7dd0ca8865f85a0ff0e59c940b60a1196cc007341922dd719663526c0f62994072644a26bc1221c8f7b70b532958e8594c13d8bf04044c"}, {0xdd, 0x50, "1b7fb12db25b28a1e8bf44b4a0ec7038eac299b18da885e9406df21d13ac898acdc2b7015db1eb07b07a0f4600b5a0d6a21288991d54441c8984184fd070e89e1207c3e5752495eb146e473ae978dbcd"}, {0xdd, 0xf0, "590123abe3a12ee381bceedcca542b203ece57faf5c1e1cbdf7b00084fc099ce8f0f6df1ffd2adbb9c5481e74b91841557e335a10da8d97d06cc3e192372d958756b2f5728c9ebf67a9474543288c1009130dcd0ce2a3f1b055b30f7ad603a7c9470ed3bc34a8ccfcc08b287401dc3b4d0947b3b3c15db92547ed6c0b983f10089089c0ca237822d53f16b9e8bef970a49d638d87d813103340eb50dea3e3dd8ca19f6e6a218d6ca102363e2754b58614f0cacc488fe3a65ca2268f684ebf26cced683431940ea9e0f69f489d9a64dd5224b7fe6ae8e7ebf4f186b02da651746810d239f97dfa7a27befaeb408bc2759"}]}}, @NL80211_ATTR_IE={0xb, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x1}, @supported_rates={0x1, 0x2, [{0x3}, {0x9, 0x1}]}]}]}, 0x3f8}, 0x1, 0x0, 0x0, 0x8040}, 0x40)
ioctl$TUNGETSNDBUF(r6, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:08:27 executing program 4:
sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x8000)
arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000900))

04:08:27 executing program 0:
sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, 0x0, 0xfb86cd92800204df)

04:08:27 executing program 2:
clone3(&(0x7f0000001200)={0x2020a00, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r0=>0x0, {0x1}, &(0x7f00000000c0)=""/232, 0xe8, &(0x7f00000001c0)=""/4096, &(0x7f00000011c0)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0], 0x9}, 0x58)
r1 = syz_open_procfs$namespace(r0, &(0x7f0000001280)='ns/time_for_children\x00')
sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x120000}, 0xc, &(0x7f0000001380)={&(0x7f0000001300)={0x6c, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@GTPA_VERSION={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010100}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x4000)
sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001440)={0x58, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x2a}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x20880)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001580), 0xffffffffffffffff)
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001640)={&(0x7f00000015c0)={0x58, r2, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xff, 0x40}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x42}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x48}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3a}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000010}, 0x1)
sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000001780)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x1c, r2, 0x10, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c084}, 0x800)
sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000001880)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001840)={&(0x7f0000001800)={0x3c, r2, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x9}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x42}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x81}, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000003d80), 0xffffffffffffffff)

04:08:27 executing program 1:
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x5c84, 0x6, 0x7f, 0x1, 0x10001, 0x401})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x64, 0x0, 0x800, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x4}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x3}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x2}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x4}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0xf7}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x2}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x3}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x7}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004}, 0x200080c0)

04:08:27 executing program 6:
ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f0000000000)={0x5a, 0x1, 0x0, [{0x100000000000000, 0x1, 0x3, 0x3, 0x3, 0x9, 0x1}]})
ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f0000000080)={0x7, 0x88a3})
ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f00000000c0)={0x9, 0x3, 0x0, [{0x2, 0x6, 0xa9d, 0x6, 0xff, 0x8, 0x2}, {0x101, 0x7, 0x7f, 0x1, 0x57, 0x1b, 0x3}, {0x4, 0x2, 0x7, 0x4, 0x81, 0x5, 0xe0}]})
ioctl$BLKALIGNOFF(0xffffffffffffffff, 0x127a, &(0x7f00000001c0))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan0\x00', <r0=>0x0})
sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x0, 0x10, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x4, 0x15}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0xf}]}, 0x30}, 0x1, 0x0, 0x0, 0x41}, 0x4000)
ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000340)=0x1ff)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000008c0)='ns/pid_for_children\x00')
syz_open_dev$loop(&(0x7f0000000b80), 0x5, 0x0)

04:08:27 executing program 0:
sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, 0x0, 0x0)

04:08:27 executing program 6:
ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f0000000000)={0x5a, 0x1, 0x0, [{0x100000000000000, 0x1, 0x3, 0x3, 0x3, 0x9, 0x1}]})
ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f0000000080)={0x7, 0x88a3})
ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f00000000c0)={0x9, 0x3, 0x0, [{0x2, 0x6, 0xa9d, 0x6, 0xff, 0x8, 0x2}, {0x101, 0x7, 0x7f, 0x1, 0x57, 0x1b, 0x3}, {0x4, 0x2, 0x7, 0x4, 0x81, 0x5, 0xe0}]})
ioctl$BLKALIGNOFF(0xffffffffffffffff, 0x127a, &(0x7f00000001c0))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan0\x00', <r0=>0x0})
sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x0, 0x10, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x4, 0x15}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0xf}]}, 0x30}, 0x1, 0x0, 0x0, 0x41}, 0x4000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000008c0)='ns/pid_for_children\x00')
syz_open_dev$loop(&(0x7f0000000b80), 0x5, 0x0)

04:08:27 executing program 7:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x80, 0x10681)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000040)={"ee09c72669f74e6004e77adaee05230e", 0x0, <r1=>0x0, {0x3f, 0x3}, {0x9}, 0x1, [0x6, 0x20, 0x3, 0x3, 0x2, 0x2, 0xff, 0x6, 0x800000000000000, 0x81, 0x5, 0x7fffffff, 0x8, 0x1, 0x7f, 0x7ff]})
clone3(&(0x7f00000003c0)={0x28120800, &(0x7f0000000140)=<r2=>0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0), {0x34}, &(0x7f0000000200)=""/81, 0x51, &(0x7f0000000280)=""/200, &(0x7f0000000380)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x7}, 0x58)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000440)={"20fed1877cf737e4bc2dbf86a35b7a17", 0x0, r1, {0x8, 0x3}, {0x3, 0x5}, 0x2, [0x7, 0x3, 0x10000, 0x5, 0x10000, 0x20, 0x7, 0xd3a, 0xbaa4, 0x8, 0x5, 0xf9b2, 0x8, 0x7, 0x152d, 0x1]})
pidfd_getfd(r2, 0xffffffffffffffff, 0x0)

04:08:27 executing program 4:
sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x8000)
arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000900))

04:08:27 executing program 5:
r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x420840, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000040))
r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000240), 0x8400, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x74, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x24}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x33}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5df}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
process_mrelease(0xffffffffffffffff, 0x0)
syz_open_dev$loop(&(0x7f00000003c0), 0x8, 0x100)
ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000400))
ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000440)=<r2=>0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001d00)={<r3=>0xffffffffffffffff})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f0000001f40)={"8e4fd7b5e4a605843a57f12f3e418c87", r2, 0x0, {0x3, 0x207}, {0x81, 0xfff}, 0x2, [0xa139, 0x365fe8f0, 0x20, 0x5, 0x3, 0x2, 0x3, 0x6, 0x401, 0xfffffffffffffff7, 0x28000, 0x7, 0x7fffffff, 0x9, 0x92, 0x7ff]})

04:08:27 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x64, 0x0, 0x800, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x4}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x3}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x2}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x4}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0xf7}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x2}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x3}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x7}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004}, 0x200080c0)

04:08:27 executing program 2:
clone3(&(0x7f0000001200)={0x2020a00, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r0=>0x0, {0x1}, &(0x7f00000000c0)=""/232, 0xe8, &(0x7f00000001c0)=""/4096, &(0x7f00000011c0)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0], 0x9}, 0x58)
r1 = syz_open_procfs$namespace(r0, &(0x7f0000001280)='ns/time_for_children\x00')
sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x120000}, 0xc, &(0x7f0000001380)={&(0x7f0000001300)={0x6c, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@GTPA_VERSION={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010100}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x4000)
sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001440)={0x58, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x2a}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x20880)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001580), 0xffffffffffffffff)
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001640)={&(0x7f00000015c0)={0x58, r2, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xff, 0x40}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x42}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x48}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3a}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000010}, 0x1)
sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000001780)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x1c, r2, 0x10, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c084}, 0x800)
syz_genetlink_get_family_id$nl80211(&(0x7f0000003d80), 0xffffffffffffffff)

04:08:27 executing program 0:
sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, 0x0, 0x0)

04:08:27 executing program 3:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000)=<r1=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=<r2=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r2, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
r4 = pidfd_getfd(r3, r1, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r6 = pidfd_getfd(r3, r5, 0x0)
r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r6, 0x10000000)
r8 = ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0)
syz_io_uring_submit(0x0, r7, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd=r8, 0xff, {0x0, r6}, 0x9, 0x0, 0x1, {0x0, 0x0, r6}}, 0x3f)
sendmsg$NL80211_CMD_SET_BEACON(r4, &(0x7f0000002480)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002440)={&(0x7f0000002040)={0x3f8, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x59}}}}, [@NL80211_ATTR_FTM_RESPONDER={0x8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x4}]}, @NL80211_ATTR_IE_ASSOC_RESP={0xe9, 0x80, [@ssid={0x0, 0x6, @default_ibss_ssid}, @perr={0x84, 0xdb, {0xb1, 0xd, [@ext={{}, @device_b, 0x4, @device_b, 0x31}, @ext={{}, @broadcast, 0x71, @broadcast}, @ext={{}, @device_a, 0x800, @broadcast}, @ext={{}, @device_a, 0x0, @device_a, 0x4}, @ext={{}, @device_b, 0xfb7, @device_b, 0x1f}, @ext={{}, @device_a, 0x5c, @device_a, 0x13}, @ext={{}, @broadcast, 0x6b6, @device_a, 0x2}, @not_ext={{}, @device_a, 0xfffffffb, "", 0x3b}, @ext={{}, @broadcast, 0x8, @device_a, 0x35}, @not_ext={{}, @device_a, 0x1ff, "", 0x3b}, @not_ext={{}, @broadcast, 0xfffffffc, "", 0x1a}, @not_ext={{}, @device_b, 0x2, "", 0x29}, @not_ext={{}, @device_a, 0x4d7, "", 0x1}]}}]}, @NL80211_ATTR_BEACON_HEAD={0x2d7, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x1}, {0x7}, @device_a, @device_b, @initial, {0xa}}, 0x5, @default, 0x20, @void, @val={0x1, 0x1, [{0x30}]}, @val={0x3, 0x1, 0x1}, @val={0x4, 0x6, {0xe0, 0xcf, 0x3f, 0x200}}, @val={0x6, 0x2, 0x8001}, @val={0x5, 0x76, {0x6, 0x38, 0x2, "10b21220a7e17aa7ade37268e0e81fe95de79339ad2467b8a5eef9108e9a09fa753d7597bf11c12ace1aebd79b53daeb6bbbb75da52fb38ca3541142197e944d0e26b3c46a3bea62a5c61d1bbc9912d6ed1ca9d0e8f19f02decab5549c686d6212899af23e29a43e525dfa585550da4983ca0b"}}, @void, @void, @val={0x3c, 0x4, {0x0, 0x81, 0xa5, 0x4}}, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7f, 0x40}}, @void, [{0xdd, 0x6b, "0b36c576f84ac6cffe786ff88ffe68c0ea02d0510952894a24ab08bd8c483fee3c7a6f27179f6359866c88189592d429529710e4e201521b9a593149cea9c7b740ec30c73d276e7d7c095648904da89a2fc366fcbaaad052d8800ef7d40e057d20dc237469b86915482e31"}, {0xdd, 0x5b, "a0b26066bb5c06a90294a802b7cfd3a31e825b935b9a34e5710c6edfd16407a3a175635e7dd0ca8865f85a0ff0e59c940b60a1196cc007341922dd719663526c0f62994072644a26bc1221c8f7b70b532958e8594c13d8bf04044c"}, {0xdd, 0x50, "1b7fb12db25b28a1e8bf44b4a0ec7038eac299b18da885e9406df21d13ac898acdc2b7015db1eb07b07a0f4600b5a0d6a21288991d54441c8984184fd070e89e1207c3e5752495eb146e473ae978dbcd"}, {0xdd, 0xf0, "590123abe3a12ee381bceedcca542b203ece57faf5c1e1cbdf7b00084fc099ce8f0f6df1ffd2adbb9c5481e74b91841557e335a10da8d97d06cc3e192372d958756b2f5728c9ebf67a9474543288c1009130dcd0ce2a3f1b055b30f7ad603a7c9470ed3bc34a8ccfcc08b287401dc3b4d0947b3b3c15db92547ed6c0b983f10089089c0ca237822d53f16b9e8bef970a49d638d87d813103340eb50dea3e3dd8ca19f6e6a218d6ca102363e2754b58614f0cacc488fe3a65ca2268f684ebf26cced683431940ea9e0f69f489d9a64dd5224b7fe6ae8e7ebf4f186b02da651746810d239f97dfa7a27befaeb408bc2759"}]}}, @NL80211_ATTR_IE={0xb, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x1}, @supported_rates={0x1, 0x2, [{0x3}, {0x9, 0x1}]}]}]}, 0x3f8}, 0x1, 0x0, 0x0, 0x8040}, 0x40)
ioctl$TUNGETSNDBUF(r6, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:08:27 executing program 7:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x80, 0x10681)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000040)={"ee09c72669f74e6004e77adaee05230e", 0x0, 0x0, {0x3f, 0x3}, {0x9}, 0x1, [0x6, 0x20, 0x3, 0x3, 0x2, 0x2, 0xff, 0x6, 0x800000000000000, 0x81, 0x5, 0x7fffffff, 0x8, 0x1, 0x7f, 0x7ff]})
clone3(&(0x7f00000003c0)={0x28120800, &(0x7f0000000140)=<r1=>0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0), {0x34}, &(0x7f0000000200)=""/81, 0x51, &(0x7f0000000280)=""/200, &(0x7f0000000380)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x7}, 0x58)
pidfd_getfd(r1, 0xffffffffffffffff, 0x0)

04:08:27 executing program 1:
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x64, 0x0, 0x800, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x4}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x3}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x2}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x4}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0xf7}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x2}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x3}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x7}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004}, 0x200080c0)

04:08:35 executing program 3:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000)=<r1=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=<r2=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r2, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
r4 = pidfd_getfd(r3, r1, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r6 = pidfd_getfd(r3, r5, 0x0)
r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r6, 0x10000000)
r8 = ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0)
syz_io_uring_submit(0x0, r7, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd=r8, 0xff, {0x0, r6}, 0x9, 0x0, 0x1, {0x0, 0x0, r6}}, 0x3f)
sendmsg$NL80211_CMD_SET_BEACON(r4, &(0x7f0000002480)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002440)={&(0x7f0000002040)={0x3f8, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x59}}}}, [@NL80211_ATTR_FTM_RESPONDER={0x8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x4}]}, @NL80211_ATTR_IE_ASSOC_RESP={0xe9, 0x80, [@ssid={0x0, 0x6, @default_ibss_ssid}, @perr={0x84, 0xdb, {0xb1, 0xd, [@ext={{}, @device_b, 0x4, @device_b, 0x31}, @ext={{}, @broadcast, 0x71, @broadcast}, @ext={{}, @device_a, 0x800, @broadcast}, @ext={{}, @device_a, 0x0, @device_a, 0x4}, @ext={{}, @device_b, 0xfb7, @device_b, 0x1f}, @ext={{}, @device_a, 0x5c, @device_a, 0x13}, @ext={{}, @broadcast, 0x6b6, @device_a, 0x2}, @not_ext={{}, @device_a, 0xfffffffb, "", 0x3b}, @ext={{}, @broadcast, 0x8, @device_a, 0x35}, @not_ext={{}, @device_a, 0x1ff, "", 0x3b}, @not_ext={{}, @broadcast, 0xfffffffc, "", 0x1a}, @not_ext={{}, @device_b, 0x2, "", 0x29}, @not_ext={{}, @device_a, 0x4d7, "", 0x1}]}}]}, @NL80211_ATTR_BEACON_HEAD={0x2d7, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x1}, {0x7}, @device_a, @device_b, @initial, {0xa}}, 0x5, @default, 0x20, @void, @val={0x1, 0x1, [{0x30}]}, @val={0x3, 0x1, 0x1}, @val={0x4, 0x6, {0xe0, 0xcf, 0x3f, 0x200}}, @val={0x6, 0x2, 0x8001}, @val={0x5, 0x76, {0x6, 0x38, 0x2, "10b21220a7e17aa7ade37268e0e81fe95de79339ad2467b8a5eef9108e9a09fa753d7597bf11c12ace1aebd79b53daeb6bbbb75da52fb38ca3541142197e944d0e26b3c46a3bea62a5c61d1bbc9912d6ed1ca9d0e8f19f02decab5549c686d6212899af23e29a43e525dfa585550da4983ca0b"}}, @void, @void, @val={0x3c, 0x4, {0x0, 0x81, 0xa5, 0x4}}, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7f, 0x40}}, @void, [{0xdd, 0x6b, "0b36c576f84ac6cffe786ff88ffe68c0ea02d0510952894a24ab08bd8c483fee3c7a6f27179f6359866c88189592d429529710e4e201521b9a593149cea9c7b740ec30c73d276e7d7c095648904da89a2fc366fcbaaad052d8800ef7d40e057d20dc237469b86915482e31"}, {0xdd, 0x5b, "a0b26066bb5c06a90294a802b7cfd3a31e825b935b9a34e5710c6edfd16407a3a175635e7dd0ca8865f85a0ff0e59c940b60a1196cc007341922dd719663526c0f62994072644a26bc1221c8f7b70b532958e8594c13d8bf04044c"}, {0xdd, 0x50, "1b7fb12db25b28a1e8bf44b4a0ec7038eac299b18da885e9406df21d13ac898acdc2b7015db1eb07b07a0f4600b5a0d6a21288991d54441c8984184fd070e89e1207c3e5752495eb146e473ae978dbcd"}, {0xdd, 0xf0, "590123abe3a12ee381bceedcca542b203ece57faf5c1e1cbdf7b00084fc099ce8f0f6df1ffd2adbb9c5481e74b91841557e335a10da8d97d06cc3e192372d958756b2f5728c9ebf67a9474543288c1009130dcd0ce2a3f1b055b30f7ad603a7c9470ed3bc34a8ccfcc08b287401dc3b4d0947b3b3c15db92547ed6c0b983f10089089c0ca237822d53f16b9e8bef970a49d638d87d813103340eb50dea3e3dd8ca19f6e6a218d6ca102363e2754b58614f0cacc488fe3a65ca2268f684ebf26cced683431940ea9e0f69f489d9a64dd5224b7fe6ae8e7ebf4f186b02da651746810d239f97dfa7a27befaeb408bc2759"}]}}, @NL80211_ATTR_IE={0xb, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x1}, @supported_rates={0x1, 0x2, [{0x3}, {0x9, 0x1}]}]}]}, 0x3f8}, 0x1, 0x0, 0x0, 0x8040}, 0x40)
ioctl$TUNGETSNDBUF(r6, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:08:35 executing program 4:
sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x8000)
arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000900))

04:08:35 executing program 7:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x80, 0x10681)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000040)={"ee09c72669f74e6004e77adaee05230e", 0x0, 0x0, {0x3f, 0x3}, {0x9}, 0x1, [0x6, 0x20, 0x3, 0x3, 0x2, 0x2, 0xff, 0x6, 0x800000000000000, 0x81, 0x5, 0x7fffffff, 0x8, 0x1, 0x7f, 0x7ff]})
pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

04:08:35 executing program 5:
r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x420840, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000040))
r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000240), 0x8400, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x74, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x24}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x33}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5df}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
process_mrelease(0xffffffffffffffff, 0x0)
syz_open_dev$loop(&(0x7f00000003c0), 0x8, 0x100)
ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000400))
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001d00)={<r2=>0xffffffffffffffff})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000001f40)={"8e4fd7b5e4a605843a57f12f3e418c87", 0x0, 0x0, {0x3, 0x207}, {0x81, 0xfff}, 0x2, [0xa139, 0x365fe8f0, 0x20, 0x5, 0x3, 0x2, 0x3, 0x6, 0x401, 0xfffffffffffffff7, 0x28000, 0x7, 0x7fffffff, 0x9, 0x92, 0x7ff]})

04:08:35 executing program 6:
ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f0000000000)={0x5a, 0x1, 0x0, [{0x100000000000000, 0x1, 0x3, 0x3, 0x3, 0x9, 0x1}]})
ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f0000000080)={0x7, 0x88a3})
ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f00000000c0)={0x9, 0x3, 0x0, [{0x2, 0x6, 0xa9d, 0x6, 0xff, 0x8, 0x2}, {0x101, 0x7, 0x7f, 0x1, 0x57, 0x1b, 0x3}, {0x4, 0x2, 0x7, 0x4, 0x81, 0x5, 0xe0}]})
ioctl$BLKALIGNOFF(0xffffffffffffffff, 0x127a, &(0x7f00000001c0))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000008c0)='ns/pid_for_children\x00')
syz_open_dev$loop(&(0x7f0000000b80), 0x5, 0x0)

04:08:35 executing program 0:
sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, 0x0, 0x0)

04:08:35 executing program 2:
clone3(&(0x7f0000001200)={0x2020a00, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r0=>0x0, {0x1}, &(0x7f00000000c0)=""/232, 0xe8, &(0x7f00000001c0)=""/4096, &(0x7f00000011c0)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0], 0x9}, 0x58)
r1 = syz_open_procfs$namespace(r0, &(0x7f0000001280)='ns/time_for_children\x00')
sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x120000}, 0xc, &(0x7f0000001380)={&(0x7f0000001300)={0x6c, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@GTPA_VERSION={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010100}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x4000)
sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001440)={0x58, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x2a}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x20880)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001580), 0xffffffffffffffff)
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001640)={&(0x7f00000015c0)={0x58, r2, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xff, 0x40}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x42}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x48}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3a}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000010}, 0x1)
sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000001780)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x1c, r2, 0x10, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c084}, 0x800)
syz_genetlink_get_family_id$nl80211(&(0x7f0000003d80), 0xffffffffffffffff)

04:08:35 executing program 1:
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x64, 0x0, 0x800, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x4}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x3}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x2}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x4}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0xf7}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x2}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x3}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x7}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004}, 0x200080c0)

04:08:36 executing program 7:
syz_open_dev$loop(&(0x7f0000000000), 0x80, 0x10681)
pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

04:08:36 executing program 1:
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x64, 0x0, 0x800, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x4}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x3}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x2}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x4}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0xf7}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x2}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x3}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x7}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004}, 0x200080c0)

04:08:36 executing program 5:
r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x420840, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000040))
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000240), 0x8400, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x74, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x24}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x33}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5df}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
process_mrelease(0xffffffffffffffff, 0x0)
syz_open_dev$loop(&(0x7f00000003c0), 0x8, 0x100)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001d00)={<r1=>0xffffffffffffffff})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000001f40)={"8e4fd7b5e4a605843a57f12f3e418c87", 0x0, 0x0, {0x3, 0x207}, {0x81, 0xfff}, 0x2, [0xa139, 0x365fe8f0, 0x20, 0x5, 0x3, 0x2, 0x3, 0x6, 0x401, 0xfffffffffffffff7, 0x28000, 0x7, 0x7fffffff, 0x9, 0x92, 0x7ff]})

04:08:36 executing program 6:
ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f0000000000)={0x5a, 0x1, 0x0, [{0x100000000000000, 0x1, 0x3, 0x3, 0x3, 0x9, 0x1}]})
ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f0000000080)={0x7, 0x88a3})
ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f00000000c0)={0x9, 0x3, 0x0, [{0x2, 0x6, 0xa9d, 0x6, 0xff, 0x8, 0x2}, {0x101, 0x7, 0x7f, 0x1, 0x57, 0x1b, 0x3}, {0x4, 0x2, 0x7, 0x4, 0x81, 0x5, 0xe0}]})
ioctl$BLKALIGNOFF(0xffffffffffffffff, 0x127a, &(0x7f00000001c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000008c0)='ns/pid_for_children\x00')
syz_open_dev$loop(&(0x7f0000000b80), 0x5, 0x0)

04:08:36 executing program 4:
sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7, 0x65}}}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x3}, @NL80211_ATTR_PMK={0x14, 0xfe, "6afeab35b40d1672a8248cd8354a7199"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x7d4e}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x5}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x43}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000080}, 0x8000)
arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000900))

04:08:36 executing program 2:
clone3(&(0x7f0000001200)={0x2020a00, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r0=>0x0, {0x1}, &(0x7f00000000c0)=""/232, 0xe8, &(0x7f00000001c0)=""/4096, &(0x7f00000011c0)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0], 0x9}, 0x58)
r1 = syz_open_procfs$namespace(r0, &(0x7f0000001280)='ns/time_for_children\x00')
sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x120000}, 0xc, &(0x7f0000001380)={&(0x7f0000001300)={0x6c, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@GTPA_VERSION={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010100}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x4000)
sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001440)={0x58, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x2a}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x20880)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001580), 0xffffffffffffffff)
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001640)={&(0x7f00000015c0)={0x58, r2, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xff, 0x40}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x42}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x48}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3a}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000010}, 0x1)
syz_genetlink_get_family_id$nl80211(&(0x7f0000003d80), 0xffffffffffffffff)

04:08:36 executing program 6:
ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f0000000000)={0x5a, 0x1, 0x0, [{0x100000000000000, 0x1, 0x3, 0x3, 0x3, 0x9, 0x1}]})
ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f0000000080)={0x7, 0x88a3})
ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f00000000c0)={0x9, 0x3, 0x0, [{0x2, 0x6, 0xa9d, 0x6, 0xff, 0x8, 0x2}, {0x101, 0x7, 0x7f, 0x1, 0x57, 0x1b, 0x3}, {0x4, 0x2, 0x7, 0x4, 0x81, 0x5, 0xe0}]})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000008c0)='ns/pid_for_children\x00')
syz_open_dev$loop(&(0x7f0000000b80), 0x5, 0x0)

04:08:36 executing program 4:
sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000080}, 0x8000)
arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000900))

04:08:44 executing program 7:
pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

04:08:44 executing program 3:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000)=<r1=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=<r2=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r2, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
pidfd_getfd(r3, r1, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r5 = pidfd_getfd(r3, r4, 0x0)
r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r5, 0x10000000)
r7 = ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0)
syz_io_uring_submit(0x0, r6, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd=r7, 0xff, {0x0, r5}, 0x9, 0x0, 0x1, {0x0, 0x0, r5}}, 0x3f)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(r5, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:08:44 executing program 2:
clone3(&(0x7f0000001200)={0x2020a00, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r0=>0x0, {0x1}, &(0x7f00000000c0)=""/232, 0xe8, &(0x7f00000001c0)=""/4096, &(0x7f00000011c0)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0], 0x9}, 0x58)
r1 = syz_open_procfs$namespace(r0, &(0x7f0000001280)='ns/time_for_children\x00')
sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x120000}, 0xc, &(0x7f0000001380)={&(0x7f0000001300)={0x6c, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@GTPA_VERSION={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010100}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x4000)
sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001440)={0x58, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x2a}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x20880)
syz_genetlink_get_family_id$nl80211(&(0x7f0000001580), 0xffffffffffffffff)
syz_genetlink_get_family_id$nl80211(&(0x7f0000003d80), 0xffffffffffffffff)

04:08:44 executing program 5:
r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x420840, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000040))
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000240), 0x8400, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x74, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x24}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x33}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5df}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
process_mrelease(0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001d00)={<r1=>0xffffffffffffffff})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000001f40)={"8e4fd7b5e4a605843a57f12f3e418c87", 0x0, 0x0, {0x3, 0x207}, {0x81, 0xfff}, 0x2, [0xa139, 0x365fe8f0, 0x20, 0x5, 0x3, 0x2, 0x3, 0x6, 0x401, 0xfffffffffffffff7, 0x28000, 0x7, 0x7fffffff, 0x9, 0x92, 0x7ff]})

04:08:44 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_BSS(r0, 0x0, 0x200080c0)

04:08:44 executing program 4:
sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x8000)
arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000900))

04:08:44 executing program 6:
ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f0000000000)={0x5a, 0x1, 0x0, [{0x100000000000000, 0x1, 0x3, 0x3, 0x3, 0x9, 0x1}]})
ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f0000000080)={0x7, 0x88a3})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000008c0)='ns/pid_for_children\x00')
syz_open_dev$loop(&(0x7f0000000b80), 0x5, 0x0)

04:08:44 executing program 0:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000)=<r1=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=<r2=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r2, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
r4 = pidfd_getfd(r3, r1, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r6 = pidfd_getfd(r3, r5, 0x0)
r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r6, 0x10000000)
r8 = ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0)
syz_io_uring_submit(0x0, r7, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd=r8, 0xff, {0x0, r6}, 0x9, 0x0, 0x1, {0x0, 0x0, r6}}, 0x3f)
sendmsg$NL80211_CMD_SET_BEACON(r4, &(0x7f0000002480)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002440)={&(0x7f0000002040)={0x3f8, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x59}}}}, [@NL80211_ATTR_FTM_RESPONDER={0x8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x4}]}, @NL80211_ATTR_IE_ASSOC_RESP={0xe9, 0x80, [@ssid={0x0, 0x6, @default_ibss_ssid}, @perr={0x84, 0xdb, {0xb1, 0xd, [@ext={{}, @device_b, 0x4, @device_b, 0x31}, @ext={{}, @broadcast, 0x71, @broadcast}, @ext={{}, @device_a, 0x800, @broadcast}, @ext={{}, @device_a, 0x0, @device_a, 0x4}, @ext={{}, @device_b, 0xfb7, @device_b, 0x1f}, @ext={{}, @device_a, 0x5c, @device_a, 0x13}, @ext={{}, @broadcast, 0x6b6, @device_a, 0x2}, @not_ext={{}, @device_a, 0xfffffffb, "", 0x3b}, @ext={{}, @broadcast, 0x8, @device_a, 0x35}, @not_ext={{}, @device_a, 0x1ff, "", 0x3b}, @not_ext={{}, @broadcast, 0xfffffffc, "", 0x1a}, @not_ext={{}, @device_b, 0x2, "", 0x29}, @not_ext={{}, @device_a, 0x4d7, "", 0x1}]}}]}, @NL80211_ATTR_BEACON_HEAD={0x2d7, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x1}, {0x7}, @device_a, @device_b, @initial, {0xa}}, 0x5, @default, 0x20, @void, @val={0x1, 0x1, [{0x30}]}, @val={0x3, 0x1, 0x1}, @val={0x4, 0x6, {0xe0, 0xcf, 0x3f, 0x200}}, @val={0x6, 0x2, 0x8001}, @val={0x5, 0x76, {0x6, 0x38, 0x2, "10b21220a7e17aa7ade37268e0e81fe95de79339ad2467b8a5eef9108e9a09fa753d7597bf11c12ace1aebd79b53daeb6bbbb75da52fb38ca3541142197e944d0e26b3c46a3bea62a5c61d1bbc9912d6ed1ca9d0e8f19f02decab5549c686d6212899af23e29a43e525dfa585550da4983ca0b"}}, @void, @void, @val={0x3c, 0x4, {0x0, 0x81, 0xa5, 0x4}}, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7f, 0x40}}, @void, [{0xdd, 0x6b, "0b36c576f84ac6cffe786ff88ffe68c0ea02d0510952894a24ab08bd8c483fee3c7a6f27179f6359866c88189592d429529710e4e201521b9a593149cea9c7b740ec30c73d276e7d7c095648904da89a2fc366fcbaaad052d8800ef7d40e057d20dc237469b86915482e31"}, {0xdd, 0x5b, "a0b26066bb5c06a90294a802b7cfd3a31e825b935b9a34e5710c6edfd16407a3a175635e7dd0ca8865f85a0ff0e59c940b60a1196cc007341922dd719663526c0f62994072644a26bc1221c8f7b70b532958e8594c13d8bf04044c"}, {0xdd, 0x50, "1b7fb12db25b28a1e8bf44b4a0ec7038eac299b18da885e9406df21d13ac898acdc2b7015db1eb07b07a0f4600b5a0d6a21288991d54441c8984184fd070e89e1207c3e5752495eb146e473ae978dbcd"}, {0xdd, 0xf0, "590123abe3a12ee381bceedcca542b203ece57faf5c1e1cbdf7b00084fc099ce8f0f6df1ffd2adbb9c5481e74b91841557e335a10da8d97d06cc3e192372d958756b2f5728c9ebf67a9474543288c1009130dcd0ce2a3f1b055b30f7ad603a7c9470ed3bc34a8ccfcc08b287401dc3b4d0947b3b3c15db92547ed6c0b983f10089089c0ca237822d53f16b9e8bef970a49d638d87d813103340eb50dea3e3dd8ca19f6e6a218d6ca102363e2754b58614f0cacc488fe3a65ca2268f684ebf26cced683431940ea9e0f69f489d9a64dd5224b7fe6ae8e7ebf4f186b02da651746810d239f97dfa7a27befaeb408bc2759"}]}}, @NL80211_ATTR_IE={0xb, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x1}, @supported_rates={0x1, 0x2, [{0x3}, {0x9, 0x1}]}]}]}, 0x3f8}, 0x1, 0x0, 0x0, 0x8040}, 0x40)
ioctl$TUNGETSNDBUF(r6, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:08:44 executing program 7:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000)=<r1=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=<r2=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r2, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
r4 = pidfd_getfd(r3, r1, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r6 = pidfd_getfd(r3, r5, 0x0)
r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r6, 0x10000000)
r8 = ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0)
syz_io_uring_submit(0x0, r7, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd=r8, 0xff, {0x0, r6}, 0x9, 0x0, 0x1, {0x0, 0x0, r6}}, 0x3f)
sendmsg$NL80211_CMD_SET_BEACON(r4, &(0x7f0000002480)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002440)={&(0x7f0000002040)={0x3f8, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x59}}}}, [@NL80211_ATTR_FTM_RESPONDER={0x8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x4}]}, @NL80211_ATTR_IE_ASSOC_RESP={0xe9, 0x80, [@ssid={0x0, 0x6, @default_ibss_ssid}, @perr={0x84, 0xdb, {0xb1, 0xd, [@ext={{}, @device_b, 0x4, @device_b, 0x31}, @ext={{}, @broadcast, 0x71, @broadcast}, @ext={{}, @device_a, 0x800, @broadcast}, @ext={{}, @device_a, 0x0, @device_a, 0x4}, @ext={{}, @device_b, 0xfb7, @device_b, 0x1f}, @ext={{}, @device_a, 0x5c, @device_a, 0x13}, @ext={{}, @broadcast, 0x6b6, @device_a, 0x2}, @not_ext={{}, @device_a, 0xfffffffb, "", 0x3b}, @ext={{}, @broadcast, 0x8, @device_a, 0x35}, @not_ext={{}, @device_a, 0x1ff, "", 0x3b}, @not_ext={{}, @broadcast, 0xfffffffc, "", 0x1a}, @not_ext={{}, @device_b, 0x2, "", 0x29}, @not_ext={{}, @device_a, 0x4d7, "", 0x1}]}}]}, @NL80211_ATTR_BEACON_HEAD={0x2d7, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x1}, {0x7}, @device_a, @device_b, @initial, {0xa}}, 0x5, @default, 0x20, @void, @val={0x1, 0x1, [{0x30}]}, @val={0x3, 0x1, 0x1}, @val={0x4, 0x6, {0xe0, 0xcf, 0x3f, 0x200}}, @val={0x6, 0x2, 0x8001}, @val={0x5, 0x76, {0x6, 0x38, 0x2, "10b21220a7e17aa7ade37268e0e81fe95de79339ad2467b8a5eef9108e9a09fa753d7597bf11c12ace1aebd79b53daeb6bbbb75da52fb38ca3541142197e944d0e26b3c46a3bea62a5c61d1bbc9912d6ed1ca9d0e8f19f02decab5549c686d6212899af23e29a43e525dfa585550da4983ca0b"}}, @void, @void, @val={0x3c, 0x4, {0x0, 0x81, 0xa5, 0x4}}, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7f, 0x40}}, @void, [{0xdd, 0x6b, "0b36c576f84ac6cffe786ff88ffe68c0ea02d0510952894a24ab08bd8c483fee3c7a6f27179f6359866c88189592d429529710e4e201521b9a593149cea9c7b740ec30c73d276e7d7c095648904da89a2fc366fcbaaad052d8800ef7d40e057d20dc237469b86915482e31"}, {0xdd, 0x5b, "a0b26066bb5c06a90294a802b7cfd3a31e825b935b9a34e5710c6edfd16407a3a175635e7dd0ca8865f85a0ff0e59c940b60a1196cc007341922dd719663526c0f62994072644a26bc1221c8f7b70b532958e8594c13d8bf04044c"}, {0xdd, 0x50, "1b7fb12db25b28a1e8bf44b4a0ec7038eac299b18da885e9406df21d13ac898acdc2b7015db1eb07b07a0f4600b5a0d6a21288991d54441c8984184fd070e89e1207c3e5752495eb146e473ae978dbcd"}, {0xdd, 0xf0, "590123abe3a12ee381bceedcca542b203ece57faf5c1e1cbdf7b00084fc099ce8f0f6df1ffd2adbb9c5481e74b91841557e335a10da8d97d06cc3e192372d958756b2f5728c9ebf67a9474543288c1009130dcd0ce2a3f1b055b30f7ad603a7c9470ed3bc34a8ccfcc08b287401dc3b4d0947b3b3c15db92547ed6c0b983f10089089c0ca237822d53f16b9e8bef970a49d638d87d813103340eb50dea3e3dd8ca19f6e6a218d6ca102363e2754b58614f0cacc488fe3a65ca2268f684ebf26cced683431940ea9e0f69f489d9a64dd5224b7fe6ae8e7ebf4f186b02da651746810d239f97dfa7a27befaeb408bc2759"}]}}, @NL80211_ATTR_IE={0xb, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x1}, @supported_rates={0x1, 0x2, [{0x3}, {0x9, 0x1}]}]}]}, 0x3f8}, 0x1, 0x0, 0x0, 0x8040}, 0x40)
ioctl$TUNGETSNDBUF(r6, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:08:44 executing program 4:
sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000900))

04:08:44 executing program 6:
ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f0000000000)={0x5a, 0x1, 0x0, [{0x100000000000000, 0x1, 0x3, 0x3, 0x3, 0x9, 0x1}]})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000008c0)='ns/pid_for_children\x00')
syz_open_dev$loop(&(0x7f0000000b80), 0x5, 0x0)

04:08:44 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_BSS(r0, 0x0, 0x200080c0)

04:08:44 executing program 2:
clone3(&(0x7f0000001200)={0x2020a00, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r0=>0x0, {0x1}, &(0x7f00000000c0)=""/232, 0xe8, &(0x7f00000001c0)=""/4096, &(0x7f00000011c0)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0], 0x9}, 0x58)
r1 = syz_open_procfs$namespace(r0, &(0x7f0000001280)='ns/time_for_children\x00')
sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x120000}, 0xc, &(0x7f0000001380)={&(0x7f0000001300)={0x6c, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@GTPA_VERSION={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010100}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x4000)
sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001440)={0x58, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x2a}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x20880)
syz_genetlink_get_family_id$nl80211(&(0x7f0000003d80), 0xffffffffffffffff)

04:08:44 executing program 5:
r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x420840, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000040))
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000240), 0x8400, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x74, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x24}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x33}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5df}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001d00)={<r1=>0xffffffffffffffff})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000001f40)={"8e4fd7b5e4a605843a57f12f3e418c87", 0x0, 0x0, {0x3, 0x207}, {0x81, 0xfff}, 0x2, [0xa139, 0x365fe8f0, 0x20, 0x5, 0x3, 0x2, 0x3, 0x6, 0x401, 0xfffffffffffffff7, 0x28000, 0x7, 0x7fffffff, 0x9, 0x92, 0x7ff]})

04:08:44 executing program 4:
sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
arch_prctl$ARCH_GET_GS(0x1004, 0x0)

04:08:44 executing program 0:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000)=<r1=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=<r2=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r2, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
r4 = pidfd_getfd(r3, r1, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r6 = pidfd_getfd(r3, r5, 0x0)
r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r6, 0x10000000)
r8 = ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0)
syz_io_uring_submit(0x0, r7, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd=r8, 0xff, {0x0, r6}, 0x9, 0x0, 0x1, {0x0, 0x0, r6}}, 0x3f)
sendmsg$NL80211_CMD_SET_BEACON(r4, &(0x7f0000002480)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002440)={&(0x7f0000002040)={0x3f8, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x59}}}}, [@NL80211_ATTR_FTM_RESPONDER={0x8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x4}]}, @NL80211_ATTR_IE_ASSOC_RESP={0xe9, 0x80, [@ssid={0x0, 0x6, @default_ibss_ssid}, @perr={0x84, 0xdb, {0xb1, 0xd, [@ext={{}, @device_b, 0x4, @device_b, 0x31}, @ext={{}, @broadcast, 0x71, @broadcast}, @ext={{}, @device_a, 0x800, @broadcast}, @ext={{}, @device_a, 0x0, @device_a, 0x4}, @ext={{}, @device_b, 0xfb7, @device_b, 0x1f}, @ext={{}, @device_a, 0x5c, @device_a, 0x13}, @ext={{}, @broadcast, 0x6b6, @device_a, 0x2}, @not_ext={{}, @device_a, 0xfffffffb, "", 0x3b}, @ext={{}, @broadcast, 0x8, @device_a, 0x35}, @not_ext={{}, @device_a, 0x1ff, "", 0x3b}, @not_ext={{}, @broadcast, 0xfffffffc, "", 0x1a}, @not_ext={{}, @device_b, 0x2, "", 0x29}, @not_ext={{}, @device_a, 0x4d7, "", 0x1}]}}]}, @NL80211_ATTR_BEACON_HEAD={0x2d7, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x1}, {0x7}, @device_a, @device_b, @initial, {0xa}}, 0x5, @default, 0x20, @void, @val={0x1, 0x1, [{0x30}]}, @val={0x3, 0x1, 0x1}, @val={0x4, 0x6, {0xe0, 0xcf, 0x3f, 0x200}}, @val={0x6, 0x2, 0x8001}, @val={0x5, 0x76, {0x6, 0x38, 0x2, "10b21220a7e17aa7ade37268e0e81fe95de79339ad2467b8a5eef9108e9a09fa753d7597bf11c12ace1aebd79b53daeb6bbbb75da52fb38ca3541142197e944d0e26b3c46a3bea62a5c61d1bbc9912d6ed1ca9d0e8f19f02decab5549c686d6212899af23e29a43e525dfa585550da4983ca0b"}}, @void, @void, @val={0x3c, 0x4, {0x0, 0x81, 0xa5, 0x4}}, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7f, 0x40}}, @void, [{0xdd, 0x6b, "0b36c576f84ac6cffe786ff88ffe68c0ea02d0510952894a24ab08bd8c483fee3c7a6f27179f6359866c88189592d429529710e4e201521b9a593149cea9c7b740ec30c73d276e7d7c095648904da89a2fc366fcbaaad052d8800ef7d40e057d20dc237469b86915482e31"}, {0xdd, 0x5b, "a0b26066bb5c06a90294a802b7cfd3a31e825b935b9a34e5710c6edfd16407a3a175635e7dd0ca8865f85a0ff0e59c940b60a1196cc007341922dd719663526c0f62994072644a26bc1221c8f7b70b532958e8594c13d8bf04044c"}, {0xdd, 0x50, "1b7fb12db25b28a1e8bf44b4a0ec7038eac299b18da885e9406df21d13ac898acdc2b7015db1eb07b07a0f4600b5a0d6a21288991d54441c8984184fd070e89e1207c3e5752495eb146e473ae978dbcd"}, {0xdd, 0xf0, "590123abe3a12ee381bceedcca542b203ece57faf5c1e1cbdf7b00084fc099ce8f0f6df1ffd2adbb9c5481e74b91841557e335a10da8d97d06cc3e192372d958756b2f5728c9ebf67a9474543288c1009130dcd0ce2a3f1b055b30f7ad603a7c9470ed3bc34a8ccfcc08b287401dc3b4d0947b3b3c15db92547ed6c0b983f10089089c0ca237822d53f16b9e8bef970a49d638d87d813103340eb50dea3e3dd8ca19f6e6a218d6ca102363e2754b58614f0cacc488fe3a65ca2268f684ebf26cced683431940ea9e0f69f489d9a64dd5224b7fe6ae8e7ebf4f186b02da651746810d239f97dfa7a27befaeb408bc2759"}]}}, @NL80211_ATTR_IE={0xb, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x1}, @supported_rates={0x1, 0x2, [{0x3}, {0x9, 0x1}]}]}]}, 0x3f8}, 0x1, 0x0, 0x0, 0x8040}, 0x40)
ioctl$TUNGETSNDBUF(r6, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:08:45 executing program 4:
sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
arch_prctl$ARCH_GET_GS(0x1004, 0x0)

04:08:52 executing program 6:
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000008c0)='ns/pid_for_children\x00')
syz_open_dev$loop(&(0x7f0000000b80), 0x5, 0x0)

04:08:52 executing program 7:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000)=<r1=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=<r2=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r2, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
r4 = pidfd_getfd(r3, r1, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r6 = pidfd_getfd(r3, r5, 0x0)
r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r6, 0x10000000)
r8 = ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0)
syz_io_uring_submit(0x0, r7, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd=r8, 0xff, {0x0, r6}, 0x9, 0x0, 0x1, {0x0, 0x0, r6}}, 0x3f)
sendmsg$NL80211_CMD_SET_BEACON(r4, &(0x7f0000002480)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002440)={&(0x7f0000002040)={0x3f8, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x59}}}}, [@NL80211_ATTR_FTM_RESPONDER={0x8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x4}]}, @NL80211_ATTR_IE_ASSOC_RESP={0xe9, 0x80, [@ssid={0x0, 0x6, @default_ibss_ssid}, @perr={0x84, 0xdb, {0xb1, 0xd, [@ext={{}, @device_b, 0x4, @device_b, 0x31}, @ext={{}, @broadcast, 0x71, @broadcast}, @ext={{}, @device_a, 0x800, @broadcast}, @ext={{}, @device_a, 0x0, @device_a, 0x4}, @ext={{}, @device_b, 0xfb7, @device_b, 0x1f}, @ext={{}, @device_a, 0x5c, @device_a, 0x13}, @ext={{}, @broadcast, 0x6b6, @device_a, 0x2}, @not_ext={{}, @device_a, 0xfffffffb, "", 0x3b}, @ext={{}, @broadcast, 0x8, @device_a, 0x35}, @not_ext={{}, @device_a, 0x1ff, "", 0x3b}, @not_ext={{}, @broadcast, 0xfffffffc, "", 0x1a}, @not_ext={{}, @device_b, 0x2, "", 0x29}, @not_ext={{}, @device_a, 0x4d7, "", 0x1}]}}]}, @NL80211_ATTR_BEACON_HEAD={0x2d7, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x1}, {0x7}, @device_a, @device_b, @initial, {0xa}}, 0x5, @default, 0x20, @void, @val={0x1, 0x1, [{0x30}]}, @val={0x3, 0x1, 0x1}, @val={0x4, 0x6, {0xe0, 0xcf, 0x3f, 0x200}}, @val={0x6, 0x2, 0x8001}, @val={0x5, 0x76, {0x6, 0x38, 0x2, "10b21220a7e17aa7ade37268e0e81fe95de79339ad2467b8a5eef9108e9a09fa753d7597bf11c12ace1aebd79b53daeb6bbbb75da52fb38ca3541142197e944d0e26b3c46a3bea62a5c61d1bbc9912d6ed1ca9d0e8f19f02decab5549c686d6212899af23e29a43e525dfa585550da4983ca0b"}}, @void, @void, @val={0x3c, 0x4, {0x0, 0x81, 0xa5, 0x4}}, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7f, 0x40}}, @void, [{0xdd, 0x6b, "0b36c576f84ac6cffe786ff88ffe68c0ea02d0510952894a24ab08bd8c483fee3c7a6f27179f6359866c88189592d429529710e4e201521b9a593149cea9c7b740ec30c73d276e7d7c095648904da89a2fc366fcbaaad052d8800ef7d40e057d20dc237469b86915482e31"}, {0xdd, 0x5b, "a0b26066bb5c06a90294a802b7cfd3a31e825b935b9a34e5710c6edfd16407a3a175635e7dd0ca8865f85a0ff0e59c940b60a1196cc007341922dd719663526c0f62994072644a26bc1221c8f7b70b532958e8594c13d8bf04044c"}, {0xdd, 0x50, "1b7fb12db25b28a1e8bf44b4a0ec7038eac299b18da885e9406df21d13ac898acdc2b7015db1eb07b07a0f4600b5a0d6a21288991d54441c8984184fd070e89e1207c3e5752495eb146e473ae978dbcd"}, {0xdd, 0xf0, "590123abe3a12ee381bceedcca542b203ece57faf5c1e1cbdf7b00084fc099ce8f0f6df1ffd2adbb9c5481e74b91841557e335a10da8d97d06cc3e192372d958756b2f5728c9ebf67a9474543288c1009130dcd0ce2a3f1b055b30f7ad603a7c9470ed3bc34a8ccfcc08b287401dc3b4d0947b3b3c15db92547ed6c0b983f10089089c0ca237822d53f16b9e8bef970a49d638d87d813103340eb50dea3e3dd8ca19f6e6a218d6ca102363e2754b58614f0cacc488fe3a65ca2268f684ebf26cced683431940ea9e0f69f489d9a64dd5224b7fe6ae8e7ebf4f186b02da651746810d239f97dfa7a27befaeb408bc2759"}]}}, @NL80211_ATTR_IE={0xb, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x1}, @supported_rates={0x1, 0x2, [{0x3}, {0x9, 0x1}]}]}]}, 0x3f8}, 0x1, 0x0, 0x0, 0x8040}, 0x40)
ioctl$TUNGETSNDBUF(r6, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:08:52 executing program 2:
clone3(&(0x7f0000001200)={0x2020a00, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r0=>0x0, {0x1}, &(0x7f00000000c0)=""/232, 0xe8, &(0x7f00000001c0)=""/4096, &(0x7f00000011c0)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0], 0x9}, 0x58)
r1 = syz_open_procfs$namespace(r0, &(0x7f0000001280)='ns/time_for_children\x00')
sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x120000}, 0xc, &(0x7f0000001380)={&(0x7f0000001300)={0x6c, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@GTPA_VERSION={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010100}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x4000)
sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001440)={0x58, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x2a}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x20880)
syz_genetlink_get_family_id$nl80211(&(0x7f0000003d80), 0xffffffffffffffff)

04:08:52 executing program 5:
r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x420840, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000040))
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000240), 0x8400, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001d00)={<r1=>0xffffffffffffffff})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000001f40)={"8e4fd7b5e4a605843a57f12f3e418c87", 0x0, 0x0, {0x3, 0x207}, {0x81, 0xfff}, 0x2, [0xa139, 0x365fe8f0, 0x20, 0x5, 0x3, 0x2, 0x3, 0x6, 0x401, 0xfffffffffffffff7, 0x28000, 0x7, 0x7fffffff, 0x9, 0x92, 0x7ff]})

04:08:52 executing program 3:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000)=<r1=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=<r2=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r2, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
pidfd_getfd(r3, r1, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r5 = pidfd_getfd(r3, r4, 0x0)
r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r5, 0x10000000)
r7 = ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0)
syz_io_uring_submit(0x0, r6, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd=r7, 0xff, {0x0, r5}, 0x9, 0x0, 0x1, {0x0, 0x0, r5}}, 0x3f)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(r5, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:08:52 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_BSS(r0, 0x0, 0x200080c0)

04:08:52 executing program 4:
sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
arch_prctl$ARCH_GET_GS(0x1004, 0x0)

04:08:52 executing program 0:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000)=<r1=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=<r2=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r2, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
r4 = pidfd_getfd(r3, r1, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r6 = pidfd_getfd(r3, r5, 0x0)
r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r6, 0x10000000)
r8 = ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0)
syz_io_uring_submit(0x0, r7, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd=r8, 0xff, {0x0, r6}, 0x9, 0x0, 0x1, {0x0, 0x0, r6}}, 0x3f)
sendmsg$NL80211_CMD_SET_BEACON(r4, &(0x7f0000002480)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002440)={&(0x7f0000002040)={0x3f8, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x59}}}}, [@NL80211_ATTR_FTM_RESPONDER={0x8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x4}]}, @NL80211_ATTR_IE_ASSOC_RESP={0xe9, 0x80, [@ssid={0x0, 0x6, @default_ibss_ssid}, @perr={0x84, 0xdb, {0xb1, 0xd, [@ext={{}, @device_b, 0x4, @device_b, 0x31}, @ext={{}, @broadcast, 0x71, @broadcast}, @ext={{}, @device_a, 0x800, @broadcast}, @ext={{}, @device_a, 0x0, @device_a, 0x4}, @ext={{}, @device_b, 0xfb7, @device_b, 0x1f}, @ext={{}, @device_a, 0x5c, @device_a, 0x13}, @ext={{}, @broadcast, 0x6b6, @device_a, 0x2}, @not_ext={{}, @device_a, 0xfffffffb, "", 0x3b}, @ext={{}, @broadcast, 0x8, @device_a, 0x35}, @not_ext={{}, @device_a, 0x1ff, "", 0x3b}, @not_ext={{}, @broadcast, 0xfffffffc, "", 0x1a}, @not_ext={{}, @device_b, 0x2, "", 0x29}, @not_ext={{}, @device_a, 0x4d7, "", 0x1}]}}]}, @NL80211_ATTR_BEACON_HEAD={0x2d7, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x1}, {0x7}, @device_a, @device_b, @initial, {0xa}}, 0x5, @default, 0x20, @void, @val={0x1, 0x1, [{0x30}]}, @val={0x3, 0x1, 0x1}, @val={0x4, 0x6, {0xe0, 0xcf, 0x3f, 0x200}}, @val={0x6, 0x2, 0x8001}, @val={0x5, 0x76, {0x6, 0x38, 0x2, "10b21220a7e17aa7ade37268e0e81fe95de79339ad2467b8a5eef9108e9a09fa753d7597bf11c12ace1aebd79b53daeb6bbbb75da52fb38ca3541142197e944d0e26b3c46a3bea62a5c61d1bbc9912d6ed1ca9d0e8f19f02decab5549c686d6212899af23e29a43e525dfa585550da4983ca0b"}}, @void, @void, @val={0x3c, 0x4, {0x0, 0x81, 0xa5, 0x4}}, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7f, 0x40}}, @void, [{0xdd, 0x6b, "0b36c576f84ac6cffe786ff88ffe68c0ea02d0510952894a24ab08bd8c483fee3c7a6f27179f6359866c88189592d429529710e4e201521b9a593149cea9c7b740ec30c73d276e7d7c095648904da89a2fc366fcbaaad052d8800ef7d40e057d20dc237469b86915482e31"}, {0xdd, 0x5b, "a0b26066bb5c06a90294a802b7cfd3a31e825b935b9a34e5710c6edfd16407a3a175635e7dd0ca8865f85a0ff0e59c940b60a1196cc007341922dd719663526c0f62994072644a26bc1221c8f7b70b532958e8594c13d8bf04044c"}, {0xdd, 0x50, "1b7fb12db25b28a1e8bf44b4a0ec7038eac299b18da885e9406df21d13ac898acdc2b7015db1eb07b07a0f4600b5a0d6a21288991d54441c8984184fd070e89e1207c3e5752495eb146e473ae978dbcd"}, {0xdd, 0xf0, "590123abe3a12ee381bceedcca542b203ece57faf5c1e1cbdf7b00084fc099ce8f0f6df1ffd2adbb9c5481e74b91841557e335a10da8d97d06cc3e192372d958756b2f5728c9ebf67a9474543288c1009130dcd0ce2a3f1b055b30f7ad603a7c9470ed3bc34a8ccfcc08b287401dc3b4d0947b3b3c15db92547ed6c0b983f10089089c0ca237822d53f16b9e8bef970a49d638d87d813103340eb50dea3e3dd8ca19f6e6a218d6ca102363e2754b58614f0cacc488fe3a65ca2268f684ebf26cced683431940ea9e0f69f489d9a64dd5224b7fe6ae8e7ebf4f186b02da651746810d239f97dfa7a27befaeb408bc2759"}]}}, @NL80211_ATTR_IE={0xb, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x1}, @supported_rates={0x1, 0x2, [{0x3}, {0x9, 0x1}]}]}]}, 0x3f8}, 0x1, 0x0, 0x0, 0x8040}, 0x40)
ioctl$TUNGETSNDBUF(r6, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:08:52 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b00)={0x64, 0x0, 0x800, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x4}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x3}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x2}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x4}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0xf7}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x2}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x3}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x7}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004}, 0x200080c0)

04:08:52 executing program 2:
clone3(&(0x7f0000001200)={0x2020a00, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r0=>0x0, {0x1}, &(0x7f00000000c0)=""/232, 0xe8, &(0x7f00000001c0)=""/4096, &(0x7f00000011c0)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0], 0x9}, 0x58)
r1 = syz_open_procfs$namespace(r0, &(0x7f0000001280)='ns/time_for_children\x00')
sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x120000}, 0xc, &(0x7f0000001380)={&(0x7f0000001300)={0x6c, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@GTPA_VERSION={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010100}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x4000)
sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001440)={0x58, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x2a}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x20880)
syz_genetlink_get_family_id$nl80211(&(0x7f0000003d80), 0xffffffffffffffff)

04:08:52 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b00)={0x64, 0x0, 0x800, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x4}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x3}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x2}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x4}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0xf7}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x2}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x3}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x7}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004}, 0x200080c0)

04:09:01 executing program 3:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000)=<r1=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=<r2=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r2, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
pidfd_getfd(r3, r1, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r5 = pidfd_getfd(r3, r4, 0x0)
r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r5, 0x10000000)
r7 = ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0)
syz_io_uring_submit(0x0, r6, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd=r7, 0xff, {0x0, r5}, 0x9, 0x0, 0x1, {0x0, 0x0, r5}}, 0x3f)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(r5, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:09:01 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b00)={0x64, 0x0, 0x800, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x4}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x3}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x2}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x4}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0xf7}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x2}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x3}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x7}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004}, 0x200080c0)

04:09:01 executing program 7:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000)=<r1=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=<r2=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r2, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
r4 = pidfd_getfd(r3, r1, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r6 = pidfd_getfd(r3, r5, 0x0)
r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r6, 0x10000000)
r8 = ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0)
syz_io_uring_submit(0x0, r7, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd=r8, 0xff, {0x0, r6}, 0x9, 0x0, 0x1, {0x0, 0x0, r6}}, 0x3f)
sendmsg$NL80211_CMD_SET_BEACON(r4, &(0x7f0000002480)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002440)={&(0x7f0000002040)={0x3f8, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x59}}}}, [@NL80211_ATTR_FTM_RESPONDER={0x8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x4}]}, @NL80211_ATTR_IE_ASSOC_RESP={0xe9, 0x80, [@ssid={0x0, 0x6, @default_ibss_ssid}, @perr={0x84, 0xdb, {0xb1, 0xd, [@ext={{}, @device_b, 0x4, @device_b, 0x31}, @ext={{}, @broadcast, 0x71, @broadcast}, @ext={{}, @device_a, 0x800, @broadcast}, @ext={{}, @device_a, 0x0, @device_a, 0x4}, @ext={{}, @device_b, 0xfb7, @device_b, 0x1f}, @ext={{}, @device_a, 0x5c, @device_a, 0x13}, @ext={{}, @broadcast, 0x6b6, @device_a, 0x2}, @not_ext={{}, @device_a, 0xfffffffb, "", 0x3b}, @ext={{}, @broadcast, 0x8, @device_a, 0x35}, @not_ext={{}, @device_a, 0x1ff, "", 0x3b}, @not_ext={{}, @broadcast, 0xfffffffc, "", 0x1a}, @not_ext={{}, @device_b, 0x2, "", 0x29}, @not_ext={{}, @device_a, 0x4d7, "", 0x1}]}}]}, @NL80211_ATTR_BEACON_HEAD={0x2d7, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x1}, {0x7}, @device_a, @device_b, @initial, {0xa}}, 0x5, @default, 0x20, @void, @val={0x1, 0x1, [{0x30}]}, @val={0x3, 0x1, 0x1}, @val={0x4, 0x6, {0xe0, 0xcf, 0x3f, 0x200}}, @val={0x6, 0x2, 0x8001}, @val={0x5, 0x76, {0x6, 0x38, 0x2, "10b21220a7e17aa7ade37268e0e81fe95de79339ad2467b8a5eef9108e9a09fa753d7597bf11c12ace1aebd79b53daeb6bbbb75da52fb38ca3541142197e944d0e26b3c46a3bea62a5c61d1bbc9912d6ed1ca9d0e8f19f02decab5549c686d6212899af23e29a43e525dfa585550da4983ca0b"}}, @void, @void, @val={0x3c, 0x4, {0x0, 0x81, 0xa5, 0x4}}, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7f, 0x40}}, @void, [{0xdd, 0x6b, "0b36c576f84ac6cffe786ff88ffe68c0ea02d0510952894a24ab08bd8c483fee3c7a6f27179f6359866c88189592d429529710e4e201521b9a593149cea9c7b740ec30c73d276e7d7c095648904da89a2fc366fcbaaad052d8800ef7d40e057d20dc237469b86915482e31"}, {0xdd, 0x5b, "a0b26066bb5c06a90294a802b7cfd3a31e825b935b9a34e5710c6edfd16407a3a175635e7dd0ca8865f85a0ff0e59c940b60a1196cc007341922dd719663526c0f62994072644a26bc1221c8f7b70b532958e8594c13d8bf04044c"}, {0xdd, 0x50, "1b7fb12db25b28a1e8bf44b4a0ec7038eac299b18da885e9406df21d13ac898acdc2b7015db1eb07b07a0f4600b5a0d6a21288991d54441c8984184fd070e89e1207c3e5752495eb146e473ae978dbcd"}, {0xdd, 0xf0, "590123abe3a12ee381bceedcca542b203ece57faf5c1e1cbdf7b00084fc099ce8f0f6df1ffd2adbb9c5481e74b91841557e335a10da8d97d06cc3e192372d958756b2f5728c9ebf67a9474543288c1009130dcd0ce2a3f1b055b30f7ad603a7c9470ed3bc34a8ccfcc08b287401dc3b4d0947b3b3c15db92547ed6c0b983f10089089c0ca237822d53f16b9e8bef970a49d638d87d813103340eb50dea3e3dd8ca19f6e6a218d6ca102363e2754b58614f0cacc488fe3a65ca2268f684ebf26cced683431940ea9e0f69f489d9a64dd5224b7fe6ae8e7ebf4f186b02da651746810d239f97dfa7a27befaeb408bc2759"}]}}, @NL80211_ATTR_IE={0xb, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x1}, @supported_rates={0x1, 0x2, [{0x3}, {0x9, 0x1}]}]}]}, 0x3f8}, 0x1, 0x0, 0x0, 0x8040}, 0x40)
ioctl$TUNGETSNDBUF(r6, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:09:01 executing program 5:
r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x420840, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000040))
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001d00)={<r1=>0xffffffffffffffff})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000001f40)={"8e4fd7b5e4a605843a57f12f3e418c87", 0x0, 0x0, {0x3, 0x207}, {0x81, 0xfff}, 0x2, [0xa139, 0x365fe8f0, 0x20, 0x5, 0x3, 0x2, 0x3, 0x6, 0x401, 0xfffffffffffffff7, 0x28000, 0x7, 0x7fffffff, 0x9, 0x92, 0x7ff]})

04:09:01 executing program 6:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000008c0)='ns/pid_for_children\x00')
syz_open_dev$loop(&(0x7f0000000b80), 0x5, 0x0)

04:09:01 executing program 0:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000)=<r1=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=<r2=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r2, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
r4 = pidfd_getfd(r3, r1, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r6 = pidfd_getfd(r3, r5, 0x0)
r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r6, 0x10000000)
r8 = ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0)
syz_io_uring_submit(0x0, r7, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd=r8, 0xff, {0x0, r6}, 0x9, 0x0, 0x1, {0x0, 0x0, r6}}, 0x3f)
sendmsg$NL80211_CMD_SET_BEACON(r4, &(0x7f0000002480)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002440)={&(0x7f0000002040)={0x3f8, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x59}}}}, [@NL80211_ATTR_FTM_RESPONDER={0x8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x4}]}, @NL80211_ATTR_IE_ASSOC_RESP={0xe9, 0x80, [@ssid={0x0, 0x6, @default_ibss_ssid}, @perr={0x84, 0xdb, {0xb1, 0xd, [@ext={{}, @device_b, 0x4, @device_b, 0x31}, @ext={{}, @broadcast, 0x71, @broadcast}, @ext={{}, @device_a, 0x800, @broadcast}, @ext={{}, @device_a, 0x0, @device_a, 0x4}, @ext={{}, @device_b, 0xfb7, @device_b, 0x1f}, @ext={{}, @device_a, 0x5c, @device_a, 0x13}, @ext={{}, @broadcast, 0x6b6, @device_a, 0x2}, @not_ext={{}, @device_a, 0xfffffffb, "", 0x3b}, @ext={{}, @broadcast, 0x8, @device_a, 0x35}, @not_ext={{}, @device_a, 0x1ff, "", 0x3b}, @not_ext={{}, @broadcast, 0xfffffffc, "", 0x1a}, @not_ext={{}, @device_b, 0x2, "", 0x29}, @not_ext={{}, @device_a, 0x4d7, "", 0x1}]}}]}, @NL80211_ATTR_BEACON_HEAD={0x2d7, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x1}, {0x7}, @device_a, @device_b, @initial, {0xa}}, 0x5, @default, 0x20, @void, @val={0x1, 0x1, [{0x30}]}, @val={0x3, 0x1, 0x1}, @val={0x4, 0x6, {0xe0, 0xcf, 0x3f, 0x200}}, @val={0x6, 0x2, 0x8001}, @val={0x5, 0x76, {0x6, 0x38, 0x2, "10b21220a7e17aa7ade37268e0e81fe95de79339ad2467b8a5eef9108e9a09fa753d7597bf11c12ace1aebd79b53daeb6bbbb75da52fb38ca3541142197e944d0e26b3c46a3bea62a5c61d1bbc9912d6ed1ca9d0e8f19f02decab5549c686d6212899af23e29a43e525dfa585550da4983ca0b"}}, @void, @void, @val={0x3c, 0x4, {0x0, 0x81, 0xa5, 0x4}}, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7f, 0x40}}, @void, [{0xdd, 0x6b, "0b36c576f84ac6cffe786ff88ffe68c0ea02d0510952894a24ab08bd8c483fee3c7a6f27179f6359866c88189592d429529710e4e201521b9a593149cea9c7b740ec30c73d276e7d7c095648904da89a2fc366fcbaaad052d8800ef7d40e057d20dc237469b86915482e31"}, {0xdd, 0x5b, "a0b26066bb5c06a90294a802b7cfd3a31e825b935b9a34e5710c6edfd16407a3a175635e7dd0ca8865f85a0ff0e59c940b60a1196cc007341922dd719663526c0f62994072644a26bc1221c8f7b70b532958e8594c13d8bf04044c"}, {0xdd, 0x50, "1b7fb12db25b28a1e8bf44b4a0ec7038eac299b18da885e9406df21d13ac898acdc2b7015db1eb07b07a0f4600b5a0d6a21288991d54441c8984184fd070e89e1207c3e5752495eb146e473ae978dbcd"}, {0xdd, 0xf0, "590123abe3a12ee381bceedcca542b203ece57faf5c1e1cbdf7b00084fc099ce8f0f6df1ffd2adbb9c5481e74b91841557e335a10da8d97d06cc3e192372d958756b2f5728c9ebf67a9474543288c1009130dcd0ce2a3f1b055b30f7ad603a7c9470ed3bc34a8ccfcc08b287401dc3b4d0947b3b3c15db92547ed6c0b983f10089089c0ca237822d53f16b9e8bef970a49d638d87d813103340eb50dea3e3dd8ca19f6e6a218d6ca102363e2754b58614f0cacc488fe3a65ca2268f684ebf26cced683431940ea9e0f69f489d9a64dd5224b7fe6ae8e7ebf4f186b02da651746810d239f97dfa7a27befaeb408bc2759"}]}}, @NL80211_ATTR_IE={0xb, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x1}, @supported_rates={0x1, 0x2, [{0x3}, {0x9, 0x1}]}]}]}, 0x3f8}, 0x1, 0x0, 0x0, 0x8040}, 0x40)
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:09:01 executing program 2:
clone3(&(0x7f0000001200)={0x2020a00, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r0=>0x0, {0x1}, &(0x7f00000000c0)=""/232, 0xe8, &(0x7f00000001c0)=""/4096, &(0x7f00000011c0)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0], 0x9}, 0x58)
r1 = syz_open_procfs$namespace(r0, &(0x7f0000001280)='ns/time_for_children\x00')
sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x120000}, 0xc, &(0x7f0000001380)={&(0x7f0000001300)={0x6c, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@GTPA_VERSION={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010100}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x4000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000001580), 0xffffffffffffffff)
syz_genetlink_get_family_id$nl80211(&(0x7f0000003d80), 0xffffffffffffffff)

04:09:01 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b00)={0x64, 0x0, 0x800, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x4}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x3}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x2}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x4}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0xf7}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x2}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x3}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x7}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004}, 0x200080c0)

04:09:01 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b00)={0x64, 0x0, 0x800, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x4}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x3}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x2}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x4}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0xf7}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x2}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x3}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x7}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004}, 0x200080c0)

04:09:01 executing program 2:
clone3(&(0x7f0000001200)={0x2020a00, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r0=>0x0, {0x1}, &(0x7f00000000c0)=""/232, 0xe8, &(0x7f00000001c0)=""/4096, &(0x7f00000011c0)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0], 0x9}, 0x58)
syz_open_procfs$namespace(r0, &(0x7f0000001280)='ns/time_for_children\x00')
syz_genetlink_get_family_id$nl80211(&(0x7f0000001580), 0xffffffffffffffff)
syz_genetlink_get_family_id$nl80211(&(0x7f0000003d80), 0xffffffffffffffff)

04:09:01 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000bc0)={&(0x7f0000000ac0), 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x64, 0x0, 0x800, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x4}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x3}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x2}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x4}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0xf7}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x2}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x3}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x7}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004}, 0x200080c0)

04:09:01 executing program 6:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000008c0)='ns/pid_for_children\x00')
syz_open_dev$loop(&(0x7f0000000b80), 0x5, 0x0)

04:09:01 executing program 5:
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x420840, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001d00)={<r0=>0xffffffffffffffff})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000001f40)={"8e4fd7b5e4a605843a57f12f3e418c87", 0x0, 0x0, {0x3, 0x207}, {0x81, 0xfff}, 0x2, [0xa139, 0x365fe8f0, 0x20, 0x5, 0x3, 0x2, 0x3, 0x6, 0x401, 0xfffffffffffffff7, 0x28000, 0x7, 0x7fffffff, 0x9, 0x92, 0x7ff]})

04:09:01 executing program 2:
clone3(&(0x7f0000001200)={0x2020a00, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x1}, &(0x7f00000000c0)=""/232, 0xe8, &(0x7f00000001c0)=""/4096, &(0x7f00000011c0)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0], 0x9}, 0x58)
syz_genetlink_get_family_id$nl80211(&(0x7f0000001580), 0xffffffffffffffff)
syz_genetlink_get_family_id$nl80211(&(0x7f0000003d80), 0xffffffffffffffff)

04:09:01 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000bc0)={&(0x7f0000000ac0), 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x64, 0x0, 0x800, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x4}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x3}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x2}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x4}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0xf7}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x2}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x3}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x7}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004}, 0x200080c0)

04:09:01 executing program 0:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000)=<r1=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=<r2=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r2, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
r4 = pidfd_getfd(r3, r1, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r6 = pidfd_getfd(r3, r5, 0x0)
r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r6, 0x10000000)
r8 = ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0)
syz_io_uring_submit(0x0, r7, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd=r8, 0xff, {0x0, r6}, 0x9, 0x0, 0x1, {0x0, 0x0, r6}}, 0x3f)
sendmsg$NL80211_CMD_SET_BEACON(r4, &(0x7f0000002480)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002440)={&(0x7f0000002040)={0x3f8, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x59}}}}, [@NL80211_ATTR_FTM_RESPONDER={0x8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x4}]}, @NL80211_ATTR_IE_ASSOC_RESP={0xe9, 0x80, [@ssid={0x0, 0x6, @default_ibss_ssid}, @perr={0x84, 0xdb, {0xb1, 0xd, [@ext={{}, @device_b, 0x4, @device_b, 0x31}, @ext={{}, @broadcast, 0x71, @broadcast}, @ext={{}, @device_a, 0x800, @broadcast}, @ext={{}, @device_a, 0x0, @device_a, 0x4}, @ext={{}, @device_b, 0xfb7, @device_b, 0x1f}, @ext={{}, @device_a, 0x5c, @device_a, 0x13}, @ext={{}, @broadcast, 0x6b6, @device_a, 0x2}, @not_ext={{}, @device_a, 0xfffffffb, "", 0x3b}, @ext={{}, @broadcast, 0x8, @device_a, 0x35}, @not_ext={{}, @device_a, 0x1ff, "", 0x3b}, @not_ext={{}, @broadcast, 0xfffffffc, "", 0x1a}, @not_ext={{}, @device_b, 0x2, "", 0x29}, @not_ext={{}, @device_a, 0x4d7, "", 0x1}]}}]}, @NL80211_ATTR_BEACON_HEAD={0x2d7, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x1}, {0x7}, @device_a, @device_b, @initial, {0xa}}, 0x5, @default, 0x20, @void, @val={0x1, 0x1, [{0x30}]}, @val={0x3, 0x1, 0x1}, @val={0x4, 0x6, {0xe0, 0xcf, 0x3f, 0x200}}, @val={0x6, 0x2, 0x8001}, @val={0x5, 0x76, {0x6, 0x38, 0x2, "10b21220a7e17aa7ade37268e0e81fe95de79339ad2467b8a5eef9108e9a09fa753d7597bf11c12ace1aebd79b53daeb6bbbb75da52fb38ca3541142197e944d0e26b3c46a3bea62a5c61d1bbc9912d6ed1ca9d0e8f19f02decab5549c686d6212899af23e29a43e525dfa585550da4983ca0b"}}, @void, @void, @val={0x3c, 0x4, {0x0, 0x81, 0xa5, 0x4}}, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7f, 0x40}}, @void, [{0xdd, 0x6b, "0b36c576f84ac6cffe786ff88ffe68c0ea02d0510952894a24ab08bd8c483fee3c7a6f27179f6359866c88189592d429529710e4e201521b9a593149cea9c7b740ec30c73d276e7d7c095648904da89a2fc366fcbaaad052d8800ef7d40e057d20dc237469b86915482e31"}, {0xdd, 0x5b, "a0b26066bb5c06a90294a802b7cfd3a31e825b935b9a34e5710c6edfd16407a3a175635e7dd0ca8865f85a0ff0e59c940b60a1196cc007341922dd719663526c0f62994072644a26bc1221c8f7b70b532958e8594c13d8bf04044c"}, {0xdd, 0x50, "1b7fb12db25b28a1e8bf44b4a0ec7038eac299b18da885e9406df21d13ac898acdc2b7015db1eb07b07a0f4600b5a0d6a21288991d54441c8984184fd070e89e1207c3e5752495eb146e473ae978dbcd"}, {0xdd, 0xf0, "590123abe3a12ee381bceedcca542b203ece57faf5c1e1cbdf7b00084fc099ce8f0f6df1ffd2adbb9c5481e74b91841557e335a10da8d97d06cc3e192372d958756b2f5728c9ebf67a9474543288c1009130dcd0ce2a3f1b055b30f7ad603a7c9470ed3bc34a8ccfcc08b287401dc3b4d0947b3b3c15db92547ed6c0b983f10089089c0ca237822d53f16b9e8bef970a49d638d87d813103340eb50dea3e3dd8ca19f6e6a218d6ca102363e2754b58614f0cacc488fe3a65ca2268f684ebf26cced683431940ea9e0f69f489d9a64dd5224b7fe6ae8e7ebf4f186b02da651746810d239f97dfa7a27befaeb408bc2759"}]}}, @NL80211_ATTR_IE={0xb, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x1}, @supported_rates={0x1, 0x2, [{0x3}, {0x9, 0x1}]}]}]}, 0x3f8}, 0x1, 0x0, 0x0, 0x8040}, 0x40)
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:09:01 executing program 3:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000)=<r1=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=<r2=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r2, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
pidfd_getfd(r3, r1, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r5 = pidfd_getfd(r3, r4, 0x0)
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r5, 0x10000000)
ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(r5, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:09:01 executing program 6:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000008c0)='ns/pid_for_children\x00')
syz_open_dev$loop(&(0x7f0000000b80), 0x5, 0x0)

04:09:01 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b00)={0x64, 0x0, 0x800, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x4}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x3}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x2}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x4}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0xf7}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x2}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x3}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x7}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004}, 0x200080c0)

04:09:10 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000bc0)={&(0x7f0000000ac0), 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x64, 0x0, 0x800, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x4}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x3}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x2}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x4}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0xf7}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x2}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x3}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x7}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004}, 0x200080c0)

04:09:10 executing program 5:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001d00)={<r0=>0xffffffffffffffff})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000001f40)={"8e4fd7b5e4a605843a57f12f3e418c87", 0x0, 0x0, {0x3, 0x207}, {0x81, 0xfff}, 0x2, [0xa139, 0x365fe8f0, 0x20, 0x5, 0x3, 0x2, 0x3, 0x6, 0x401, 0xfffffffffffffff7, 0x28000, 0x7, 0x7fffffff, 0x9, 0x92, 0x7ff]})

04:09:10 executing program 3:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000)=<r1=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=<r2=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r2, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
pidfd_getfd(r3, r1, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r5 = pidfd_getfd(r3, r4, 0x0)
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r5, 0x10000000)
ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(r5, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:09:10 executing program 0:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000)=<r1=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=<r2=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r2, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
r4 = pidfd_getfd(r3, r1, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r6 = pidfd_getfd(r3, r5, 0x0)
r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r6, 0x10000000)
r8 = ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0)
syz_io_uring_submit(0x0, r7, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd=r8, 0xff, {0x0, r6}, 0x9, 0x0, 0x1, {0x0, 0x0, r6}}, 0x3f)
sendmsg$NL80211_CMD_SET_BEACON(r4, &(0x7f0000002480)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002440)={&(0x7f0000002040)={0x3f8, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x59}}}}, [@NL80211_ATTR_FTM_RESPONDER={0x8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x4}]}, @NL80211_ATTR_IE_ASSOC_RESP={0xe9, 0x80, [@ssid={0x0, 0x6, @default_ibss_ssid}, @perr={0x84, 0xdb, {0xb1, 0xd, [@ext={{}, @device_b, 0x4, @device_b, 0x31}, @ext={{}, @broadcast, 0x71, @broadcast}, @ext={{}, @device_a, 0x800, @broadcast}, @ext={{}, @device_a, 0x0, @device_a, 0x4}, @ext={{}, @device_b, 0xfb7, @device_b, 0x1f}, @ext={{}, @device_a, 0x5c, @device_a, 0x13}, @ext={{}, @broadcast, 0x6b6, @device_a, 0x2}, @not_ext={{}, @device_a, 0xfffffffb, "", 0x3b}, @ext={{}, @broadcast, 0x8, @device_a, 0x35}, @not_ext={{}, @device_a, 0x1ff, "", 0x3b}, @not_ext={{}, @broadcast, 0xfffffffc, "", 0x1a}, @not_ext={{}, @device_b, 0x2, "", 0x29}, @not_ext={{}, @device_a, 0x4d7, "", 0x1}]}}]}, @NL80211_ATTR_BEACON_HEAD={0x2d7, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x1}, {0x7}, @device_a, @device_b, @initial, {0xa}}, 0x5, @default, 0x20, @void, @val={0x1, 0x1, [{0x30}]}, @val={0x3, 0x1, 0x1}, @val={0x4, 0x6, {0xe0, 0xcf, 0x3f, 0x200}}, @val={0x6, 0x2, 0x8001}, @val={0x5, 0x76, {0x6, 0x38, 0x2, "10b21220a7e17aa7ade37268e0e81fe95de79339ad2467b8a5eef9108e9a09fa753d7597bf11c12ace1aebd79b53daeb6bbbb75da52fb38ca3541142197e944d0e26b3c46a3bea62a5c61d1bbc9912d6ed1ca9d0e8f19f02decab5549c686d6212899af23e29a43e525dfa585550da4983ca0b"}}, @void, @void, @val={0x3c, 0x4, {0x0, 0x81, 0xa5, 0x4}}, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7f, 0x40}}, @void, [{0xdd, 0x6b, "0b36c576f84ac6cffe786ff88ffe68c0ea02d0510952894a24ab08bd8c483fee3c7a6f27179f6359866c88189592d429529710e4e201521b9a593149cea9c7b740ec30c73d276e7d7c095648904da89a2fc366fcbaaad052d8800ef7d40e057d20dc237469b86915482e31"}, {0xdd, 0x5b, "a0b26066bb5c06a90294a802b7cfd3a31e825b935b9a34e5710c6edfd16407a3a175635e7dd0ca8865f85a0ff0e59c940b60a1196cc007341922dd719663526c0f62994072644a26bc1221c8f7b70b532958e8594c13d8bf04044c"}, {0xdd, 0x50, "1b7fb12db25b28a1e8bf44b4a0ec7038eac299b18da885e9406df21d13ac898acdc2b7015db1eb07b07a0f4600b5a0d6a21288991d54441c8984184fd070e89e1207c3e5752495eb146e473ae978dbcd"}, {0xdd, 0xf0, "590123abe3a12ee381bceedcca542b203ece57faf5c1e1cbdf7b00084fc099ce8f0f6df1ffd2adbb9c5481e74b91841557e335a10da8d97d06cc3e192372d958756b2f5728c9ebf67a9474543288c1009130dcd0ce2a3f1b055b30f7ad603a7c9470ed3bc34a8ccfcc08b287401dc3b4d0947b3b3c15db92547ed6c0b983f10089089c0ca237822d53f16b9e8bef970a49d638d87d813103340eb50dea3e3dd8ca19f6e6a218d6ca102363e2754b58614f0cacc488fe3a65ca2268f684ebf26cced683431940ea9e0f69f489d9a64dd5224b7fe6ae8e7ebf4f186b02da651746810d239f97dfa7a27befaeb408bc2759"}]}}, @NL80211_ATTR_IE={0xb, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x1}, @supported_rates={0x1, 0x2, [{0x3}, {0x9, 0x1}]}]}]}, 0x3f8}, 0x1, 0x0, 0x0, 0x8040}, 0x40)
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:09:10 executing program 2:
clone3(&(0x7f0000001200)={0x2020a00, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x1}, &(0x7f00000000c0)=""/232, 0xe8, &(0x7f00000001c0)=""/4096, &(0x7f00000011c0)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0], 0x9}, 0x58)
syz_genetlink_get_family_id$nl80211(&(0x7f0000001580), 0xffffffffffffffff)
syz_genetlink_get_family_id$nl80211(&(0x7f0000003d80), 0xffffffffffffffff)

04:09:10 executing program 6:
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
syz_open_dev$loop(&(0x7f0000000b80), 0x5, 0x0)

04:09:10 executing program 4:
sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b00)={0x64, 0x0, 0x800, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x4}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x3}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x2}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x4}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0xf7}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x2}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x3}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x7}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004}, 0x200080c0)

04:09:10 executing program 7:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000)=<r1=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=<r2=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r2, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
r4 = pidfd_getfd(r3, r1, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r6 = pidfd_getfd(r3, r5, 0x0)
r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r6, 0x10000000)
r8 = ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0)
syz_io_uring_submit(0x0, r7, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd=r8, 0xff, {0x0, r6}, 0x9, 0x0, 0x1, {0x0, 0x0, r6}}, 0x3f)
sendmsg$NL80211_CMD_SET_BEACON(r4, &(0x7f0000002480)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002440)={&(0x7f0000002040)={0x3f8, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x59}}}}, [@NL80211_ATTR_FTM_RESPONDER={0x8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x4}]}, @NL80211_ATTR_IE_ASSOC_RESP={0xe9, 0x80, [@ssid={0x0, 0x6, @default_ibss_ssid}, @perr={0x84, 0xdb, {0xb1, 0xd, [@ext={{}, @device_b, 0x4, @device_b, 0x31}, @ext={{}, @broadcast, 0x71, @broadcast}, @ext={{}, @device_a, 0x800, @broadcast}, @ext={{}, @device_a, 0x0, @device_a, 0x4}, @ext={{}, @device_b, 0xfb7, @device_b, 0x1f}, @ext={{}, @device_a, 0x5c, @device_a, 0x13}, @ext={{}, @broadcast, 0x6b6, @device_a, 0x2}, @not_ext={{}, @device_a, 0xfffffffb, "", 0x3b}, @ext={{}, @broadcast, 0x8, @device_a, 0x35}, @not_ext={{}, @device_a, 0x1ff, "", 0x3b}, @not_ext={{}, @broadcast, 0xfffffffc, "", 0x1a}, @not_ext={{}, @device_b, 0x2, "", 0x29}, @not_ext={{}, @device_a, 0x4d7, "", 0x1}]}}]}, @NL80211_ATTR_BEACON_HEAD={0x2d7, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x1}, {0x7}, @device_a, @device_b, @initial, {0xa}}, 0x5, @default, 0x20, @void, @val={0x1, 0x1, [{0x30}]}, @val={0x3, 0x1, 0x1}, @val={0x4, 0x6, {0xe0, 0xcf, 0x3f, 0x200}}, @val={0x6, 0x2, 0x8001}, @val={0x5, 0x76, {0x6, 0x38, 0x2, "10b21220a7e17aa7ade37268e0e81fe95de79339ad2467b8a5eef9108e9a09fa753d7597bf11c12ace1aebd79b53daeb6bbbb75da52fb38ca3541142197e944d0e26b3c46a3bea62a5c61d1bbc9912d6ed1ca9d0e8f19f02decab5549c686d6212899af23e29a43e525dfa585550da4983ca0b"}}, @void, @void, @val={0x3c, 0x4, {0x0, 0x81, 0xa5, 0x4}}, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7f, 0x40}}, @void, [{0xdd, 0x6b, "0b36c576f84ac6cffe786ff88ffe68c0ea02d0510952894a24ab08bd8c483fee3c7a6f27179f6359866c88189592d429529710e4e201521b9a593149cea9c7b740ec30c73d276e7d7c095648904da89a2fc366fcbaaad052d8800ef7d40e057d20dc237469b86915482e31"}, {0xdd, 0x5b, "a0b26066bb5c06a90294a802b7cfd3a31e825b935b9a34e5710c6edfd16407a3a175635e7dd0ca8865f85a0ff0e59c940b60a1196cc007341922dd719663526c0f62994072644a26bc1221c8f7b70b532958e8594c13d8bf04044c"}, {0xdd, 0x50, "1b7fb12db25b28a1e8bf44b4a0ec7038eac299b18da885e9406df21d13ac898acdc2b7015db1eb07b07a0f4600b5a0d6a21288991d54441c8984184fd070e89e1207c3e5752495eb146e473ae978dbcd"}, {0xdd, 0xf0, "590123abe3a12ee381bceedcca542b203ece57faf5c1e1cbdf7b00084fc099ce8f0f6df1ffd2adbb9c5481e74b91841557e335a10da8d97d06cc3e192372d958756b2f5728c9ebf67a9474543288c1009130dcd0ce2a3f1b055b30f7ad603a7c9470ed3bc34a8ccfcc08b287401dc3b4d0947b3b3c15db92547ed6c0b983f10089089c0ca237822d53f16b9e8bef970a49d638d87d813103340eb50dea3e3dd8ca19f6e6a218d6ca102363e2754b58614f0cacc488fe3a65ca2268f684ebf26cced683431940ea9e0f69f489d9a64dd5224b7fe6ae8e7ebf4f186b02da651746810d239f97dfa7a27befaeb408bc2759"}]}}, @NL80211_ATTR_IE={0xb, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x1}, @supported_rates={0x1, 0x2, [{0x3}, {0x9, 0x1}]}]}]}, 0x3f8}, 0x1, 0x0, 0x0, 0x8040}, 0x40)
ioctl$TUNGETSNDBUF(r6, 0x800454d3, &(0x7f00000026c0))

04:09:10 executing program 2:
clone3(&(0x7f0000001200)={0x2020a00, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x1}, &(0x7f00000000c0)=""/232, 0xe8, &(0x7f00000001c0)=""/4096, &(0x7f00000011c0)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0], 0x9}, 0x58)
syz_genetlink_get_family_id$nl80211(&(0x7f0000001580), 0xffffffffffffffff)
syz_genetlink_get_family_id$nl80211(&(0x7f0000003d80), 0xffffffffffffffff)

04:09:10 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x200080c0)

04:09:10 executing program 7:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000)=<r1=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=<r2=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r2, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
r4 = pidfd_getfd(r3, r1, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r6 = pidfd_getfd(r3, r5, 0x0)
r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r6, 0x10000000)
r8 = ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0)
syz_io_uring_submit(0x0, r7, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd=r8, 0xff, {0x0, r6}, 0x9, 0x0, 0x1, {0x0, 0x0, r6}}, 0x3f)
sendmsg$NL80211_CMD_SET_BEACON(r4, &(0x7f0000002480)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002440)={&(0x7f0000002040)={0x3f8, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x59}}}}, [@NL80211_ATTR_FTM_RESPONDER={0x8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x4}]}, @NL80211_ATTR_IE_ASSOC_RESP={0xe9, 0x80, [@ssid={0x0, 0x6, @default_ibss_ssid}, @perr={0x84, 0xdb, {0xb1, 0xd, [@ext={{}, @device_b, 0x4, @device_b, 0x31}, @ext={{}, @broadcast, 0x71, @broadcast}, @ext={{}, @device_a, 0x800, @broadcast}, @ext={{}, @device_a, 0x0, @device_a, 0x4}, @ext={{}, @device_b, 0xfb7, @device_b, 0x1f}, @ext={{}, @device_a, 0x5c, @device_a, 0x13}, @ext={{}, @broadcast, 0x6b6, @device_a, 0x2}, @not_ext={{}, @device_a, 0xfffffffb, "", 0x3b}, @ext={{}, @broadcast, 0x8, @device_a, 0x35}, @not_ext={{}, @device_a, 0x1ff, "", 0x3b}, @not_ext={{}, @broadcast, 0xfffffffc, "", 0x1a}, @not_ext={{}, @device_b, 0x2, "", 0x29}, @not_ext={{}, @device_a, 0x4d7, "", 0x1}]}}]}, @NL80211_ATTR_BEACON_HEAD={0x2d7, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x1}, {0x7}, @device_a, @device_b, @initial, {0xa}}, 0x5, @default, 0x20, @void, @val={0x1, 0x1, [{0x30}]}, @val={0x3, 0x1, 0x1}, @val={0x4, 0x6, {0xe0, 0xcf, 0x3f, 0x200}}, @val={0x6, 0x2, 0x8001}, @val={0x5, 0x76, {0x6, 0x38, 0x2, "10b21220a7e17aa7ade37268e0e81fe95de79339ad2467b8a5eef9108e9a09fa753d7597bf11c12ace1aebd79b53daeb6bbbb75da52fb38ca3541142197e944d0e26b3c46a3bea62a5c61d1bbc9912d6ed1ca9d0e8f19f02decab5549c686d6212899af23e29a43e525dfa585550da4983ca0b"}}, @void, @void, @val={0x3c, 0x4, {0x0, 0x81, 0xa5, 0x4}}, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7f, 0x40}}, @void, [{0xdd, 0x6b, "0b36c576f84ac6cffe786ff88ffe68c0ea02d0510952894a24ab08bd8c483fee3c7a6f27179f6359866c88189592d429529710e4e201521b9a593149cea9c7b740ec30c73d276e7d7c095648904da89a2fc366fcbaaad052d8800ef7d40e057d20dc237469b86915482e31"}, {0xdd, 0x5b, "a0b26066bb5c06a90294a802b7cfd3a31e825b935b9a34e5710c6edfd16407a3a175635e7dd0ca8865f85a0ff0e59c940b60a1196cc007341922dd719663526c0f62994072644a26bc1221c8f7b70b532958e8594c13d8bf04044c"}, {0xdd, 0x50, "1b7fb12db25b28a1e8bf44b4a0ec7038eac299b18da885e9406df21d13ac898acdc2b7015db1eb07b07a0f4600b5a0d6a21288991d54441c8984184fd070e89e1207c3e5752495eb146e473ae978dbcd"}, {0xdd, 0xf0, "590123abe3a12ee381bceedcca542b203ece57faf5c1e1cbdf7b00084fc099ce8f0f6df1ffd2adbb9c5481e74b91841557e335a10da8d97d06cc3e192372d958756b2f5728c9ebf67a9474543288c1009130dcd0ce2a3f1b055b30f7ad603a7c9470ed3bc34a8ccfcc08b287401dc3b4d0947b3b3c15db92547ed6c0b983f10089089c0ca237822d53f16b9e8bef970a49d638d87d813103340eb50dea3e3dd8ca19f6e6a218d6ca102363e2754b58614f0cacc488fe3a65ca2268f684ebf26cced683431940ea9e0f69f489d9a64dd5224b7fe6ae8e7ebf4f186b02da651746810d239f97dfa7a27befaeb408bc2759"}]}}, @NL80211_ATTR_IE={0xb, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x1}, @supported_rates={0x1, 0x2, [{0x3}, {0x9, 0x1}]}]}]}, 0x3f8}, 0x1, 0x0, 0x0, 0x8040}, 0x40)

04:09:10 executing program 4:
sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b00)={0x64, 0x0, 0x800, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x4}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x3}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x2}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x4}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0xf7}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x2}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x3}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x7}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004}, 0x200080c0)

04:09:10 executing program 6:
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
syz_open_dev$loop(&(0x7f0000000b80), 0x5, 0x0)

04:09:10 executing program 5:
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001f40)={"8e4fd7b5e4a605843a57f12f3e418c87", 0x0, 0x0, {0x3, 0x207}, {0x81, 0xfff}, 0x2, [0xa139, 0x365fe8f0, 0x20, 0x5, 0x3, 0x2, 0x3, 0x6, 0x401, 0xfffffffffffffff7, 0x28000, 0x7, 0x7fffffff, 0x9, 0x92, 0x7ff]})

04:09:10 executing program 2:
syz_open_procfs$namespace(0x0, &(0x7f0000001280)='ns/time_for_children\x00')
syz_genetlink_get_family_id$nl80211(&(0x7f0000001580), 0xffffffffffffffff)
syz_genetlink_get_family_id$nl80211(&(0x7f0000003d80), 0xffffffffffffffff)

04:09:10 executing program 3:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000)=<r1=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=<r2=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r2, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
pidfd_getfd(r3, r1, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r5 = pidfd_getfd(r3, r4, 0x0)
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r5, 0x10000000)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(r5, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:09:10 executing program 0:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000)=<r1=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=<r2=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r2, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
pidfd_getfd(r3, r1, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r5 = pidfd_getfd(r3, r4, 0x0)
r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r5, 0x10000000)
r7 = ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0)
syz_io_uring_submit(0x0, r6, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd=r7, 0xff, {0x0, r5}, 0x9, 0x0, 0x1, {0x0, 0x0, r5}}, 0x3f)
ioctl$TUNGETSNDBUF(r5, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:09:19 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x200080c0)

04:09:19 executing program 6:
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
syz_open_dev$loop(&(0x7f0000000b80), 0x5, 0x0)

04:09:19 executing program 3:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000)=<r1=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=<r2=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r2, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
pidfd_getfd(r3, r1, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r5 = pidfd_getfd(r3, r4, 0x0)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(r5, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:09:19 executing program 0:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000)=<r1=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=<r2=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r2, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
pidfd_getfd(r3, r1, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r5 = pidfd_getfd(r3, r4, 0x0)
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r5, 0x10000000)
ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0)
ioctl$TUNGETSNDBUF(r5, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:09:19 executing program 5:
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001f40)={"8e4fd7b5e4a605843a57f12f3e418c87", 0x0, 0x0, {0x3, 0x207}, {0x81, 0xfff}, 0x2, [0xa139, 0x365fe8f0, 0x20, 0x5, 0x3, 0x2, 0x3, 0x6, 0x401, 0xfffffffffffffff7, 0x28000, 0x7, 0x7fffffff, 0x9, 0x92, 0x7ff]})

04:09:19 executing program 2:
syz_open_procfs$namespace(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000001580), 0xffffffffffffffff)
syz_genetlink_get_family_id$nl80211(&(0x7f0000003d80), 0xffffffffffffffff)

04:09:19 executing program 7:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000)=<r1=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=<r2=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r2, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
pidfd_getfd(r3, r1, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r5 = pidfd_getfd(r3, r4, 0x0)
r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r5, 0x10000000)
r7 = ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0)
syz_io_uring_submit(0x0, r6, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd=r7, 0xff, {0x0, r5}, 0x9, 0x0, 0x1, {0x0, 0x0, r5}}, 0x3f)

04:09:19 executing program 4:
sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b00)={0x64, 0x0, 0x800, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x4}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x3}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x2}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x4}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0xf7}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x2}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x3}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x7}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004}, 0x200080c0)

04:09:19 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x200080c0)

04:09:19 executing program 6:
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000008c0)='ns/pid_for_children\x00')
syz_open_dev$loop(0x0, 0x5, 0x0)

04:09:19 executing program 5:
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001f40)={"8e4fd7b5e4a605843a57f12f3e418c87", 0x0, 0x0, {0x3, 0x207}, {0x81, 0xfff}, 0x2, [0xa139, 0x365fe8f0, 0x20, 0x5, 0x3, 0x2, 0x3, 0x6, 0x401, 0xfffffffffffffff7, 0x28000, 0x7, 0x7fffffff, 0x9, 0x92, 0x7ff]})

04:09:19 executing program 4:
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b00)={0x64, 0x0, 0x800, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x4}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x3}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x2}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x4}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0xf7}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x2}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x3}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x7}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004}, 0x200080c0)

04:09:27 executing program 2:
syz_open_procfs$namespace(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000001580), 0xffffffffffffffff)
syz_genetlink_get_family_id$nl80211(&(0x7f0000003d80), 0xffffffffffffffff)

04:09:27 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b80)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x200080c0)

04:09:27 executing program 0:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000)=<r1=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=<r2=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r2, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
pidfd_getfd(r3, r1, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r5 = pidfd_getfd(r3, r4, 0x0)
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r5, 0x10000000)
ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0)
ioctl$TUNGETSNDBUF(r5, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:09:27 executing program 4:
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b00)={0x64, 0x0, 0x800, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x4}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x3}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x2}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x4}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0xf7}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x2}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x3}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x7}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004}, 0x200080c0)

04:09:27 executing program 7:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000)=<r1=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=<r2=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r2, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
pidfd_getfd(r3, r1, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r5 = pidfd_getfd(r3, r4, 0x0)
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r5, 0x10000000)
ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0)

04:09:27 executing program 5:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001d00))
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001f40)={"8e4fd7b5e4a605843a57f12f3e418c87", 0x0, 0x0, {0x3, 0x207}, {0x81, 0xfff}, 0x2, [0xa139, 0x365fe8f0, 0x20, 0x5, 0x3, 0x2, 0x3, 0x6, 0x401, 0xfffffffffffffff7, 0x28000, 0x7, 0x7fffffff, 0x9, 0x92, 0x7ff]})

04:09:27 executing program 3:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000)=<r1=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=<r2=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r2, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
pidfd_getfd(r3, r1, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:09:27 executing program 6:
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000008c0)='ns/pid_for_children\x00')
syz_open_dev$loop(0x0, 0x5, 0x0)

[  242.280565] Zero length message leads to an empty skb
04:09:27 executing program 5:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001d00))
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001f40)={"8e4fd7b5e4a605843a57f12f3e418c87", 0x0, 0x0, {0x3, 0x207}, {0x81, 0xfff}, 0x2, [0xa139, 0x365fe8f0, 0x20, 0x5, 0x3, 0x2, 0x3, 0x6, 0x401, 0xfffffffffffffff7, 0x28000, 0x7, 0x7fffffff, 0x9, 0x92, 0x7ff]})

04:09:27 executing program 6:
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000008c0)='ns/pid_for_children\x00')
syz_open_dev$loop(0x0, 0x5, 0x0)

04:09:27 executing program 4:
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b00)={0x64, 0x0, 0x800, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x4}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x3}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x2}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x4}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0xf7}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x2}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x3}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x7}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004}, 0x200080c0)

04:09:27 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b80)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x200080c0)

04:09:27 executing program 2:
syz_open_procfs$namespace(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000001580), 0xffffffffffffffff)
syz_genetlink_get_family_id$nl80211(&(0x7f0000003d80), 0xffffffffffffffff)

04:09:27 executing program 0:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000)=<r1=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=<r2=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r2, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
pidfd_getfd(r3, r1, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r5 = pidfd_getfd(r3, r4, 0x0)
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r5, 0x10000000)
ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0)
ioctl$TUNGETSNDBUF(r5, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:09:27 executing program 5:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001d00))
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001f40)={"8e4fd7b5e4a605843a57f12f3e418c87", 0x0, 0x0, {0x3, 0x207}, {0x81, 0xfff}, 0x2, [0xa139, 0x365fe8f0, 0x20, 0x5, 0x3, 0x2, 0x3, 0x6, 0x401, 0xfffffffffffffff7, 0x28000, 0x7, 0x7fffffff, 0x9, 0x92, 0x7ff]})

04:09:27 executing program 6:
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000008c0)='ns/pid_for_children\x00')
syz_open_dev$loop(&(0x7f0000000b80), 0x0, 0x0)

04:09:27 executing program 7:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000)=<r1=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=<r2=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r2, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
pidfd_getfd(r3, r1, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r5 = pidfd_getfd(r3, r4, 0x0)
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r5, 0x10000000)

04:09:27 executing program 5:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001d00)={<r0=>0xffffffffffffffff})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, 0x0)

04:09:27 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b80)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x200080c0)

04:09:27 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_BSS(r0, 0x0, 0x200080c0)

04:09:27 executing program 0:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000)=<r1=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=<r2=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r2, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
pidfd_getfd(r3, r1, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r5 = pidfd_getfd(r3, r4, 0x0)
r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r5, 0x10000000)
syz_io_uring_submit(0x0, r6, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r5}, 0x9, 0x0, 0x1, {0x0, 0x0, r5}}, 0x3f)
ioctl$TUNGETSNDBUF(r5, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:09:27 executing program 3:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000)=<r1=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=<r2=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r2, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
pidfd_getfd(r3, r1, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:09:36 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b80)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x200080c0)

04:09:36 executing program 3:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000)=<r1=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=<r2=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r2, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
pidfd_getfd(r3, r1, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:09:36 executing program 0:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000)=<r1=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=<r2=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r2, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
pidfd_getfd(r3, r1, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r5 = pidfd_getfd(r3, r4, 0x0)
r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r5, 0x10000000)
syz_io_uring_submit(0x0, r6, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r5}, 0x9, 0x0, 0x1, {0x0, 0x0, r5}}, 0x3f)
ioctl$TUNGETSNDBUF(r5, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:09:36 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x64, 0x0, 0x0, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x4}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x3}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x2}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x4}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0xf7}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x2}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x3}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x7}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004}, 0x200080c0)

04:09:36 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_BSS(r0, 0x0, 0x200080c0)

04:09:36 executing program 7:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000)=<r1=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=<r2=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r2, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
pidfd_getfd(r3, r1, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
pidfd_getfd(r3, r4, 0x0)

04:09:36 executing program 5:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000)=<r1=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=<r2=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r2, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
pidfd_getfd(r3, r1, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:09:36 executing program 2:
syz_open_procfs$namespace(0x0, &(0x7f0000001280)='ns/time_for_children\x00')
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
syz_genetlink_get_family_id$nl80211(&(0x7f0000003d80), 0xffffffffffffffff)

04:09:36 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b80)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x200080c0)

04:09:36 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x64, 0x0, 0x0, 0x0, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x4}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x3}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x2}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x4}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0xf7}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x2}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x3}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x7}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004}, 0x200080c0)

04:09:36 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b80)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x200080c0)

04:09:36 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_BSS(r0, 0x0, 0x200080c0)

04:09:36 executing program 2:
syz_open_procfs$namespace(0x0, &(0x7f0000001280)='ns/time_for_children\x00')
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
syz_genetlink_get_family_id$nl80211(&(0x7f0000003d80), 0xffffffffffffffff)

04:09:36 executing program 7:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000)=<r1=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=<r2=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r2, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
pidfd_getfd(r3, r1, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)

04:09:44 executing program 7:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000)=<r1=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=<r2=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r2, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
pidfd_getfd(r3, r1, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)

04:09:44 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x200080c0)

04:09:44 executing program 5:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000)=<r1=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=<r2=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r2, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
pidfd_getfd(r3, r1, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:09:44 executing program 2:
syz_open_procfs$namespace(0x0, &(0x7f0000001280)='ns/time_for_children\x00')
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
syz_genetlink_get_family_id$nl80211(&(0x7f0000003d80), 0xffffffffffffffff)

04:09:44 executing program 3:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000)=<r1=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=<r2=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r2, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
pidfd_getfd(r3, r1, 0x0)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:09:44 executing program 6:
sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b80)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x200080c0)

04:09:44 executing program 0:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000)=<r1=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=<r2=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r2, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
pidfd_getfd(r3, r1, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r5 = pidfd_getfd(r3, r4, 0x0)
r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r5, 0x10000000)
syz_io_uring_submit(0x0, r6, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r5}, 0x9, 0x0, 0x1, {0x0, 0x0, r5}}, 0x3f)
ioctl$TUNGETSNDBUF(r5, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:09:44 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x64, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x4}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x3}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x2}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x4}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0xf7}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x2}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x3}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x7}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004}, 0x200080c0)

04:09:44 executing program 2:
syz_open_procfs$namespace(0x0, &(0x7f0000001280)='ns/time_for_children\x00')
syz_genetlink_get_family_id$nl80211(&(0x7f0000001580), 0xffffffffffffffff)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)

04:09:44 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x200080c0)

04:09:44 executing program 0:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000)=<r1=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=<r2=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r2, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
pidfd_getfd(r3, r1, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r5 = pidfd_getfd(r3, r4, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r5}, 0x9, 0x0, 0x1, {0x0, 0x0, r5}}, 0x3f)
ioctl$TUNGETSNDBUF(r5, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:09:51 executing program 2:
syz_open_procfs$namespace(0x0, &(0x7f0000001280)='ns/time_for_children\x00')
syz_genetlink_get_family_id$nl80211(&(0x7f0000001580), 0xffffffffffffffff)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)

04:09:51 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x200080c0)

04:09:51 executing program 3:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r1=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r1, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:09:51 executing program 7:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000)=<r1=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=<r2=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r2, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
pidfd_getfd(r3, r1, 0x0)

04:09:51 executing program 6:
sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b80)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x200080c0)

04:09:51 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x5c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x4}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x3}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x2}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x4}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0xf7}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x2}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004}, 0x200080c0)

04:09:51 executing program 0:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000)=<r1=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=<r2=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r2, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
pidfd_getfd(r3, r1, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r5 = pidfd_getfd(r3, r4, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r5}, 0x9, 0x0, 0x1, {0x0, 0x0, r5}}, 0x3f)
ioctl$TUNGETSNDBUF(r5, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:09:51 executing program 5:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000)=<r1=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=<r2=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r2, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
pidfd_getfd(r3, r1, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:09:51 executing program 6:
sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b80)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x200080c0)

04:09:51 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x200080c0)

04:09:51 executing program 2:
syz_open_procfs$namespace(0x0, &(0x7f0000001280)='ns/time_for_children\x00')
syz_genetlink_get_family_id$nl80211(&(0x7f0000001580), 0xffffffffffffffff)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)

04:09:51 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x54, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x4}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x3}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x2}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x4}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0xf7}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x200080c0)

04:09:51 executing program 0:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000)=<r1=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=<r2=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r2, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
pidfd_getfd(r3, r1, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r5 = pidfd_getfd(r3, r4, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r5}, 0x9, 0x0, 0x1, {0x0, 0x0, r5}}, 0x3f)
ioctl$TUNGETSNDBUF(r5, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:09:51 executing program 3:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r1=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r1, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:09:52 executing program 6:
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b80)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x200080c0)

04:09:52 executing program 2:
syz_open_procfs$namespace(0x0, &(0x7f0000001280)='ns/time_for_children\x00')
syz_genetlink_get_family_id$nl80211(&(0x7f0000001580), 0xffffffffffffffff)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)

04:09:52 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x4c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x4}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x3}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x2}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x4}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0xf7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004}, 0x200080c0)

04:09:52 executing program 0:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000)=<r1=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=<r2=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r2, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
pidfd_getfd(r3, r1, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, 0xffffffffffffffff, 0x10000000)
syz_io_uring_submit(0x0, r4, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {}, 0x9, 0x0, 0x1}, 0x3f)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:10:00 executing program 7:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r1=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r1, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:10:00 executing program 3:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r1=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r1, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:10:00 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x44, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x4}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x3}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x2}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004}, 0x200080c0)

04:10:00 executing program 5:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000)=<r1=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=<r2=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r2, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
pidfd_getfd(r3, r1, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:10:00 executing program 6:
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b80)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x200080c0)

04:10:00 executing program 2:
syz_open_procfs$namespace(0x0, &(0x7f0000001280)='ns/time_for_children\x00')
syz_genetlink_get_family_id$nl80211(&(0x7f0000001580), 0xffffffffffffffff)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)

04:10:00 executing program 0:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000)=<r1=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=<r2=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r2, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
pidfd_getfd(r3, r1, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, 0xffffffffffffffff, 0x10000000)
syz_io_uring_submit(0x0, r4, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {}, 0x9, 0x0, 0x1}, 0x3f)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:10:00 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x200080c0)

04:10:00 executing program 6:
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b80)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x200080c0)

04:10:00 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x3c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x4}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x3}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004}, 0x200080c0)

04:10:00 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x200080c0)

04:10:00 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x34, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x4}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x3}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004}, 0x200080c0)

04:10:00 executing program 5:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000)=<r1=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=<r2=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r2, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
pidfd_getfd(r3, r1, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:10:00 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_BSS(r0, 0x0, 0x200080c0)

04:10:00 executing program 2:
syz_open_procfs$namespace(0x0, &(0x7f0000001280)='ns/time_for_children\x00')
syz_genetlink_get_family_id$nl80211(&(0x7f0000001580), 0xffffffffffffffff)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)

04:10:07 executing program 0:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000)=<r1=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=<r2=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r2, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
pidfd_getfd(r3, r1, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, 0xffffffffffffffff, 0x10000000)
syz_io_uring_submit(0x0, r4, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {}, 0x9, 0x0, 0x1}, 0x3f)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:10:07 executing program 3:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r1=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r1, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:10:07 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x2c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x4}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004}, 0x200080c0)

04:10:07 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b00)={0x64, 0x0, 0x0, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x4}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x3}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x2}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x4}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0xf7}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x2}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x3}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x7}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004}, 0x200080c0)

04:10:07 executing program 5:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000)=<r1=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=<r2=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r2, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
pidfd_getfd(r3, r1, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:10:07 executing program 2:
syz_open_procfs$namespace(0x0, &(0x7f0000001280)='ns/time_for_children\x00')
syz_genetlink_get_family_id$nl80211(&(0x7f0000001580), 0xffffffffffffffff)

04:10:07 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_BSS(r0, 0x0, 0x200080c0)

04:10:07 executing program 7:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r1=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r1, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)

04:10:08 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004}, 0x200080c0)

04:10:08 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_BSS(r0, 0x0, 0x200080c0)

04:10:08 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b00)={0x64, 0x0, 0x0, 0x0, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x4}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x3}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x2}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x4}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0xf7}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x2}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x3}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x7}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004}, 0x200080c0)

04:10:08 executing program 2:
syz_genetlink_get_family_id$nl80211(&(0x7f0000001580), 0xffffffffffffffff)

04:10:08 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x200080c0)

04:10:08 executing program 5:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000)=<r1=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=<r2=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r2, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
pidfd_getfd(r3, r1, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))

04:10:16 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x200080c0)

04:10:16 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x200080c0)

04:10:16 executing program 5:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000)=<r1=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=<r2=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r2, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
pidfd_getfd(r3, r1, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))

04:10:16 executing program 3:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r1=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r1, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:10:16 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b00)={0x64, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x4}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x3}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x2}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x4}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0xf7}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x2}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x3}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x7}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004}, 0x200080c0)

04:10:16 executing program 2:
syz_genetlink_get_family_id$nl80211(&(0x7f0000001580), 0xffffffffffffffff)

04:10:16 executing program 0:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000)=<r1=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=<r2=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r2, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
pidfd_getfd(r3, r1, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r4 = pidfd_getfd(r3, 0xffffffffffffffff, 0x0)
r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r4, 0x10000000)
syz_io_uring_submit(0x0, r5, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r4}, 0x9, 0x0, 0x1, {0x0, 0x0, r4}}, 0x3f)
ioctl$TUNGETSNDBUF(r4, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:10:16 executing program 7:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r1=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r1, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)

04:10:16 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b00)={0x5c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x4}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x3}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x2}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x4}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0xf7}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x2}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004}, 0x200080c0)

04:10:16 executing program 7:
gettid()
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)

04:10:16 executing program 2:
syz_genetlink_get_family_id$nl80211(&(0x7f0000001580), 0xffffffffffffffff)

04:10:16 executing program 0:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000)=<r1=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=<r2=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r2, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
pidfd_getfd(r3, r1, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r4 = pidfd_getfd(r3, 0xffffffffffffffff, 0x0)
r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r4, 0x10000000)
syz_io_uring_submit(0x0, r5, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r4}, 0x9, 0x0, 0x1, {0x0, 0x0, r4}}, 0x3f)
ioctl$TUNGETSNDBUF(r4, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:10:16 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x200080c0)

04:10:16 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)

04:10:16 executing program 3:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:10:16 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b00)={0x5c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x4}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x3}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x2}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x4}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0xf7}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x2}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004}, 0x200080c0)

04:10:16 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x200080c0)

04:10:16 executing program 7:
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)

04:10:16 executing program 0:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000)=<r1=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=<r2=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r2, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
pidfd_getfd(r3, r1, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r4 = pidfd_getfd(r3, 0xffffffffffffffff, 0x0)
r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r4, 0x10000000)
syz_io_uring_submit(0x0, r5, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r4}, 0x9, 0x0, 0x1, {0x0, 0x0, r4}}, 0x3f)
ioctl$TUNGETSNDBUF(r4, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:10:16 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x200080c0)

04:10:16 executing program 2:
syz_open_procfs$namespace(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000001580), 0xffffffffffffffff)

04:10:16 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b00)={0x54, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x4}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x3}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x2}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x4}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0xf7}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x200080c0)

04:10:16 executing program 5:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000)=<r1=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=<r2=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r2, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
pidfd_getfd(r3, r1, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))

04:10:24 executing program 5:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000)=<r1=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=<r2=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r2, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
pidfd_getfd(r3, r1, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:10:24 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b00)={0x4c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x4}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x3}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x2}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x4}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0xf7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004}, 0x200080c0)

04:10:24 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x200080c0)

04:10:24 executing program 7:
process_vm_writev(0x0, 0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)

04:10:24 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000bc0)={&(0x7f0000000ac0), 0xc, &(0x7f0000000b80)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x200080c0)

04:10:24 executing program 0:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000)=<r1=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=<r2=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r2, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
pidfd_getfd(r3, r1, 0x0)
r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r5 = pidfd_getfd(r3, r4, 0x0)
r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r5, 0x10000000)
syz_io_uring_submit(0x0, r6, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r5}, 0x9, 0x0, 0x1, {0x0, 0x0, r5}}, 0x3f)
ioctl$TUNGETSNDBUF(r5, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:10:24 executing program 2:
syz_open_procfs$namespace(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000001580), 0xffffffffffffffff)

04:10:24 executing program 3:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:10:24 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000bc0)={&(0x7f0000000ac0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x200080c0)

04:10:24 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x200080c0)

04:10:24 executing program 7:
process_vm_writev(0x0, 0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)

04:10:24 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000bc0)={&(0x7f0000000ac0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x200080c0)

04:10:24 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b00)={0x4c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x4}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x3}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x2}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x4}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0xf7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004}, 0x200080c0)

04:10:24 executing program 1:
socket$nl_generic(0x10, 0x3, 0x10)

04:10:33 executing program 3:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:10:33 executing program 7:
process_vm_writev(0x0, 0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)

04:10:33 executing program 5:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000)=<r1=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=<r2=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r2, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
pidfd_getfd(r3, r1, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:10:33 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000bc0)={&(0x7f0000000ac0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x200080c0)

04:10:33 executing program 1:
socket$nl_generic(0x10, 0x3, 0x10)

04:10:33 executing program 0:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000)=<r1=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=<r2=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r2, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
pidfd_getfd(r3, r1, 0x0)
r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r5 = pidfd_getfd(r3, r4, 0x0)
r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r5, 0x10000000)
syz_io_uring_submit(0x0, r6, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r5}, 0x9, 0x0, 0x1, {0x0, 0x0, r5}}, 0x3f)
ioctl$TUNGETSNDBUF(r5, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:10:33 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b00)={0x44, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x4}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x3}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x2}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004}, 0x200080c0)

04:10:33 executing program 2:
syz_open_procfs$namespace(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000001580), 0xffffffffffffffff)

04:10:33 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000bc0)={&(0x7f0000000ac0), 0xc, &(0x7f0000000b80)={0x0}}, 0x200080c0)

04:10:33 executing program 7:
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}], 0x7, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)

04:10:33 executing program 2:
syz_open_procfs$namespace(0x0, &(0x7f0000001280)='ns/time_for_children\x00')
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)

04:10:33 executing program 0:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000)=<r1=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=<r2=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r2, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
pidfd_getfd(r3, r1, 0x0)
r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r5 = pidfd_getfd(r3, r4, 0x0)
r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r5, 0x10000000)
syz_io_uring_submit(0x0, r6, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r5}, 0x9, 0x0, 0x1, {0x0, 0x0, r5}}, 0x3f)
ioctl$TUNGETSNDBUF(r5, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:10:33 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b00)={0x44, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x4}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x3}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x2}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004}, 0x200080c0)

04:10:33 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000bc0)={&(0x7f0000000ac0), 0xc, &(0x7f0000000b80)={0x0}}, 0x0)

04:10:33 executing program 1:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000)=<r1=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=<r2=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r2, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
pidfd_getfd(r3, r1, 0x0)
r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r5 = pidfd_getfd(r3, r4, 0x0)
r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r5, 0x10000000)
syz_io_uring_submit(0x0, r6, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r5}, 0x9, 0x0, 0x1, {0x0, 0x0, r5}}, 0x3f)
ioctl$TUNGETSNDBUF(r5, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:10:41 executing program 6:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000)=<r1=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=<r2=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r2, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
pidfd_getfd(r3, r1, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:10:41 executing program 0:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r1=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r1, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r4 = pidfd_getfd(r2, r3, 0x0)
r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r4, 0x10000000)
syz_io_uring_submit(0x0, r5, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r4}, 0x9, 0x0, 0x1, {0x0, 0x0, r4}}, 0x3f)
ioctl$TUNGETSNDBUF(r4, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:10:41 executing program 3:
gettid()
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:10:41 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b00)={0x44, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x4}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x3}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x2}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004}, 0x200080c0)

04:10:41 executing program 5:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000)=<r1=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=<r2=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r2, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
pidfd_getfd(r3, r1, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:10:41 executing program 1:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000)=<r1=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=<r2=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r2, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
pidfd_getfd(r3, r1, 0x0)
r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r5 = pidfd_getfd(r3, r4, 0x0)
r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r5, 0x10000000)
syz_io_uring_submit(0x0, r6, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r5}, 0x9, 0x0, 0x1, {0x0, 0x0, r5}}, 0x3f)
ioctl$TUNGETSNDBUF(r5, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:10:41 executing program 2:
syz_open_procfs$namespace(0x0, &(0x7f0000001280)='ns/time_for_children\x00')
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)

04:10:41 executing program 7:
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}], 0x6, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)

04:10:41 executing program 7:
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}], 0x5, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)

04:10:41 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b00)={0x3c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x4}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x3}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004}, 0x200080c0)

04:10:41 executing program 3:
gettid()
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:10:41 executing program 2:
syz_open_procfs$namespace(0x0, &(0x7f0000001280)='ns/time_for_children\x00')
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)

04:10:41 executing program 7:
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}], 0x4, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)

04:10:41 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b00)={0x34, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x4}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x3}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004}, 0x200080c0)

04:10:41 executing program 7:
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}], 0x3, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)

04:10:50 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b00)={0x2c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x4}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004}, 0x200080c0)

04:10:50 executing program 3:
gettid()
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:10:50 executing program 1:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000)=<r1=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=<r2=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r2, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
pidfd_getfd(r3, r1, 0x0)
r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r5 = pidfd_getfd(r3, r4, 0x0)
r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r5, 0x10000000)
syz_io_uring_submit(0x0, r6, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r5}, 0x9, 0x0, 0x1, {0x0, 0x0, r5}}, 0x3f)
ioctl$TUNGETSNDBUF(r5, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:10:50 executing program 7:
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}], 0x2, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)

04:10:50 executing program 0:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r1=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r1, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r4 = pidfd_getfd(r2, r3, 0x0)
r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r4, 0x10000000)
syz_io_uring_submit(0x0, r5, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r4}, 0x9, 0x0, 0x1, {0x0, 0x0, r4}}, 0x3f)
ioctl$TUNGETSNDBUF(r4, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:10:50 executing program 5:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000)=<r1=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=<r2=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r2, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
pidfd_getfd(r3, r1, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:10:50 executing program 2:
syz_open_procfs$namespace(0x0, &(0x7f0000001280)='ns/time_for_children\x00')
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)

04:10:50 executing program 6:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000)=<r1=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=<r2=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r2, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
pidfd_getfd(r3, r1, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:10:50 executing program 7:
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}], 0x1, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)

04:10:50 executing program 2:
syz_open_procfs$namespace(0x0, &(0x7f0000001280)='ns/time_for_children\x00')
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)

04:10:50 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b00)={0x2c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x4}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004}, 0x200080c0)

04:10:50 executing program 3:
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x58)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:10:50 executing program 0:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r1=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r1, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r4 = pidfd_getfd(r2, r3, 0x0)
r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r4, 0x10000000)
syz_io_uring_submit(0x0, r5, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r4}, 0x9, 0x0, 0x1, {0x0, 0x0, r4}}, 0x3f)
ioctl$TUNGETSNDBUF(r4, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:10:50 executing program 5:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000)=<r1=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=<r2=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r2, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
pidfd_getfd(r3, r1, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:10:50 executing program 7:
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}], 0x1, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)

04:10:50 executing program 2:
syz_open_procfs$namespace(0x0, &(0x7f0000001280)='ns/time_for_children\x00')
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)

04:10:50 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b00)={0x2c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x4}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004}, 0x200080c0)

04:10:50 executing program 1:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000)=<r1=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=<r2=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r2, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
pidfd_getfd(r3, r1, 0x0)
r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r5 = pidfd_getfd(r3, r4, 0x0)
r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r5, 0x10000000)
syz_io_uring_submit(0x0, r6, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r5}, 0x9, 0x0, 0x1, {0x0, 0x0, r5}}, 0x3f)
ioctl$TUNGETSNDBUF(r5, 0x800454d3, &(0x7f00000026c0))

04:10:50 executing program 6:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000)=<r1=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=<r2=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r2, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
pidfd_getfd(r3, r1, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:10:50 executing program 2:
syz_open_procfs$namespace(0x0, &(0x7f0000001280)='ns/time_for_children\x00')

04:10:50 executing program 5:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000)=<r1=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=<r2=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r2, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
pidfd_getfd(r3, r1, 0x0)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:10:50 executing program 7:
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}], 0x1, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)

04:10:50 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b00)={0x34, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x4}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x3}, @NL80211_ATTR_P2P_OPPPS={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004}, 0x200080c0)

04:10:50 executing program 0:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r1=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r1, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r3 = pidfd_getfd(0xffffffffffffffff, r2, 0x0)
r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r3, 0x10000000)
syz_io_uring_submit(0x0, r4, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r3}, 0x9, 0x0, 0x1, {0x0, 0x0, r3}}, 0x3f)
ioctl$TUNGETSNDBUF(r3, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:10:50 executing program 2:
syz_open_procfs$namespace(0x0, 0x0)

04:10:50 executing program 1:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000)=<r1=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=<r2=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r2, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
pidfd_getfd(r3, r1, 0x0)
r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r5 = pidfd_getfd(r3, r4, 0x0)
r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r5, 0x10000000)
syz_io_uring_submit(0x0, r6, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r5}, 0x9, 0x0, 0x1, {0x0, 0x0, r5}}, 0x3f)

04:10:58 executing program 0:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r1=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r1, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r3 = pidfd_getfd(0xffffffffffffffff, r2, 0x0)
r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r3, 0x10000000)
syz_io_uring_submit(0x0, r4, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r3}, 0x9, 0x0, 0x1, {0x0, 0x0, r3}}, 0x3f)
ioctl$TUNGETSNDBUF(r3, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:10:58 executing program 5:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000)=<r1=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=<r2=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r2, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
pidfd_getfd(r3, r1, 0x0)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:10:58 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b00)={0x34, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x4}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x3}, @NL80211_ATTR_P2P_OPPPS={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004}, 0x200080c0)

04:10:58 executing program 7:
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {0x0}], 0x2, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)

04:10:58 executing program 3:
clone3(0x0, 0x0)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:10:58 executing program 6:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000)=<r1=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=<r2=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r2, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
pidfd_getfd(r3, r1, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)

04:10:58 executing program 2:
syz_open_procfs$namespace(0x0, 0x0)

04:10:58 executing program 1:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000)=<r1=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=<r2=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r2, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
pidfd_getfd(r3, r1, 0x0)
r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r5 = pidfd_getfd(r3, r4, 0x0)
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r5, 0x10000000)

04:10:58 executing program 7:
process_vm_writev(0x0, &(0x7f0000000700)=[{0x0}], 0x1, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)

04:10:58 executing program 3:
clone3(0x0, 0x0)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:11:07 executing program 2:
syz_open_procfs$namespace(0x0, 0x0)

04:11:07 executing program 5:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000)=<r1=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=<r2=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r2, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
pidfd_getfd(r3, r1, 0x0)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:11:07 executing program 7:
process_vm_writev(0x0, &(0x7f0000000700)=[{0x0}], 0x1, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)

04:11:07 executing program 6:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000)=<r1=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=<r2=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r2, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
pidfd_getfd(r3, r1, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)

04:11:07 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b00)={0x2c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x4}, @NL80211_ATTR_P2P_OPPPS={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004}, 0x200080c0)

04:11:07 executing program 3:
clone3(0x0, 0x0)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:11:07 executing program 0:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0)
r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r2, 0x10000000)
syz_io_uring_submit(0x0, r3, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r2}, 0x9, 0x0, 0x1, {0x0, 0x0, r2}}, 0x3f)
ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:11:07 executing program 1:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000)=<r1=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=<r2=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r2, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
pidfd_getfd(r3, r1, 0x0)
r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
pidfd_getfd(r3, r4, 0x0)

04:11:07 executing program 7:
process_vm_writev(0x0, &(0x7f0000000700)=[{0x0}], 0x1, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)

04:11:07 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b00)={0x2c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x4}, @NL80211_ATTR_P2P_OPPPS={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004}, 0x200080c0)

04:11:15 executing program 7:
process_vm_writev(0x0, &(0x7f0000000700)=[{0x0}, {0x0}], 0x2, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)

04:11:15 executing program 2:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000)=<r1=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=<r2=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r2, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
pidfd_getfd(r3, r1, 0x0)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:11:15 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b00)={0x2c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x4}, @NL80211_ATTR_P2P_OPPPS={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004}, 0x200080c0)

04:11:15 executing program 0:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0)
r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r2, 0x10000000)
syz_io_uring_submit(0x0, r3, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r2}, 0x9, 0x0, 0x1, {0x0, 0x0, r2}}, 0x3f)
ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:11:15 executing program 3:
clone3(0x0, 0x0)
socketpair(0x0, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:11:15 executing program 6:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000)=<r1=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=<r2=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r2, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
pidfd_getfd(r3, r1, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)

04:11:15 executing program 5:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r1=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r1, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:11:15 executing program 1:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000)=<r1=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=<r2=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r2, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
pidfd_getfd(r3, r1, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)

04:11:15 executing program 7:
process_vm_writev(0x0, &(0x7f0000000700)=[{0x0}, {0x0}], 0x2, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)

04:11:15 executing program 3:
clone3(0x0, 0x0)
socketpair(0x0, 0x0, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:11:15 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b00)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_P2P_OPPPS={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004}, 0x200080c0)

04:11:15 executing program 6:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000)=<r1=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=<r2=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r2, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
pidfd_getfd(r3, r1, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:11:15 executing program 7:
process_vm_writev(0x0, &(0x7f0000000700)=[{0x0}, {0x0}], 0x2, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)

04:11:15 executing program 0:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0)
r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r2, 0x10000000)
syz_io_uring_submit(0x0, r3, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r2}, 0x9, 0x0, 0x1, {0x0, 0x0, r2}}, 0x3f)
ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:11:15 executing program 6:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000)=<r1=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=<r2=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r2, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
pidfd_getfd(r3, r1, 0x0)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:11:15 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b00)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_P2P_OPPPS={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004}, 0x200080c0)

04:11:15 executing program 5:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r1=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r1, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:11:15 executing program 2:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000)=<r1=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=<r2=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r2, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
pidfd_getfd(r3, r1, 0x0)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:11:15 executing program 1:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000)=<r1=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=<r2=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r2, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
pidfd_getfd(r3, r1, 0x0)

04:11:15 executing program 3:
clone3(0x0, 0x0)
socketpair(0x0, 0x0, 0x0, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:11:15 executing program 7:
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {0x0}], 0x2, 0x0, 0x0, 0x0)

04:11:16 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b00)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_P2P_OPPPS={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004}, 0x200080c0)

04:11:16 executing program 6:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r1=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r1, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:11:16 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b00)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_P2P_OPPPS={0x5}]}, 0x24}}, 0x200080c0)

04:11:16 executing program 1:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r1=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r1, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:11:16 executing program 7:
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {0x0}], 0x2, 0x0, 0x0, 0x0)

04:11:16 executing program 5:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r1=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r1, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:11:16 executing program 2:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000)=<r1=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=<r2=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r2, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
pidfd_getfd(r3, r1, 0x0)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:11:24 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b00)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_P2P_OPPPS={0x5}]}, 0x24}}, 0x200080c0)

04:11:24 executing program 0:
gettid()
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r1, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r1}, 0x9, 0x0, 0x1, {0x0, 0x0, r1}}, 0x3f)
ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:11:24 executing program 5:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r1=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r1, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:11:24 executing program 2:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000)=<r1=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=<r2=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r2, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
pidfd_getfd(r3, r1, 0x0)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))

04:11:24 executing program 7:
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {0x0}], 0x2, 0x0, 0x0, 0x0)

04:11:24 executing program 1:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r1=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r1, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:11:24 executing program 6:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r1=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r1, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:11:24 executing program 3:
clone3(0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:11:24 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b00)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_P2P_OPPPS={0x5}]}, 0x24}}, 0x0)

04:11:24 executing program 3:
clone3(0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:11:33 executing program 6:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r1=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r1, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:11:33 executing program 3:
clone3(0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)

04:11:33 executing program 5:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r1=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r1, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:11:33 executing program 0:
gettid()
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r1, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r1}, 0x9, 0x0, 0x1, {0x0, 0x0, r1}}, 0x3f)
ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:11:33 executing program 2:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000)=<r1=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=<r2=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r2, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
pidfd_getfd(r3, r1, 0x0)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))

04:11:33 executing program 7:
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {0x0}], 0x2, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}], 0x4, 0x0)

04:11:33 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b00)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_P2P_OPPPS={0x5}]}, 0x24}}, 0x0)

04:11:33 executing program 1:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:11:33 executing program 7:
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {0x0}], 0x2, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}], 0x3, 0x0)

04:11:33 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b00)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_P2P_OPPPS={0x5}]}, 0x24}}, 0x0)

04:11:33 executing program 3:
clone3(0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)

04:11:41 executing program 2:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000)=<r1=>0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=<r2=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r2, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
pidfd_getfd(r3, r1, 0x0)

04:11:41 executing program 0:
gettid()
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r1, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r1}, 0x9, 0x0, 0x1, {0x0, 0x0, r1}}, 0x3f)
ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:11:41 executing program 7:
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {0x0}], 0x2, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}], 0x2, 0x0)

04:11:41 executing program 1:
gettid()
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:11:41 executing program 5:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:11:41 executing program 4:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r1=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r1, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:11:41 executing program 3:
clone3(0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)

04:11:41 executing program 6:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r1=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r1, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:11:41 executing program 7:
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {0x0}], 0x2, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}], 0x1, 0x0)

04:11:41 executing program 1:
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:11:41 executing program 0:
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r0=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x58)
process_vm_writev(r0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0)
r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r2, 0x10000000)
syz_io_uring_submit(0x0, r3, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r2}, 0x9, 0x0, 0x1, {0x0, 0x0, r2}}, 0x3f)
ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:11:41 executing program 3:
gettid()
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r1, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r1}, 0x9, 0x0, 0x1, {0x0, 0x0, r1}}, 0x3f)
ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:11:42 executing program 7:
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {0x0}], 0x2, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}], 0x1, 0x0)

04:11:42 executing program 1:
openat$zero(0xffffffffffffff9c, 0x0, 0x82000, 0x0)

04:11:42 executing program 6:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r1=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r1, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:11:49 executing program 7:
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {0x0}], 0x2, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}], 0x1, 0x0)

04:11:49 executing program 3:
gettid()
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r1, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r1}, 0x9, 0x0, 0x1, {0x0, 0x0, r1}}, 0x3f)
ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:11:49 executing program 0:
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r0=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x58)
process_vm_writev(r0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0)
r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r2, 0x10000000)
syz_io_uring_submit(0x0, r3, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r2}, 0x9, 0x0, 0x1, {0x0, 0x0, r2}}, 0x3f)
ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:11:49 executing program 6:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r1=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r1, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:11:49 executing program 5:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:11:49 executing program 2:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r1=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r1, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:11:49 executing program 4:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r1=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r1, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:11:49 executing program 1:
openat$zero(0xffffffffffffff9c, 0x0, 0x82000, 0x0)

04:11:49 executing program 7:
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {0x0}], 0x2, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {0x0}], 0x2, 0x0)

04:11:49 executing program 1:
openat$zero(0xffffffffffffff9c, 0x0, 0x82000, 0x0)

04:11:49 executing program 3:
gettid()
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r1, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r1}, 0x9, 0x0, 0x1, {0x0, 0x0, r1}}, 0x3f)
ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:11:49 executing program 7:
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {0x0}], 0x2, &(0x7f00000009c0)=[{0x0}], 0x1, 0x0)

04:11:49 executing program 1:
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x0, 0x0)

04:11:49 executing program 7:
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {0x0}], 0x2, &(0x7f00000009c0)=[{0x0}], 0x1, 0x0)

04:11:49 executing program 1:
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x0, 0x0)

04:11:57 executing program 5:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:11:57 executing program 4:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r1=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r1, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:11:57 executing program 2:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r1=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r1, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)

04:11:57 executing program 7:
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {0x0}], 0x2, &(0x7f00000009c0)=[{0x0}], 0x1, 0x0)

04:11:57 executing program 0:
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r0=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x58)
process_vm_writev(r0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0)
r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r2, 0x10000000)
syz_io_uring_submit(0x0, r3, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r2}, 0x9, 0x0, 0x1, {0x0, 0x0, r2}}, 0x3f)
ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:11:57 executing program 6:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r1=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r1, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:11:57 executing program 3:
gettid()
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r1, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r1}, 0x9, 0x0, 0x1, {0x0, 0x0, r1}}, 0x3f)
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:11:57 executing program 1:
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x0, 0x0)

04:11:57 executing program 7:
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {0x0}], 0x2, &(0x7f00000009c0)=[{0x0}, {0x0}], 0x2, 0x0)

04:11:57 executing program 2:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r1=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r1, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)

04:11:57 executing program 3:
gettid()
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r1, 0x10000000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:11:57 executing program 1:
gettid()
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r1, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r1}, 0x9, 0x0, 0x1, {0x0, 0x0, r1}}, 0x3f)
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:11:57 executing program 6:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r1=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r1, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:11:57 executing program 7:
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {0x0}], 0x2, &(0x7f00000009c0)=[{0x0}, {0x0}], 0x2, 0x0)

04:11:57 executing program 4:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r1=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r1, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)

04:11:57 executing program 7:
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {0x0}], 0x2, &(0x7f00000009c0)=[{0x0}, {0x0}], 0x2, 0x0)

04:11:57 executing program 5:
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:11:57 executing program 2:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r1=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r1, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)

04:11:57 executing program 0:
gettid()
clone3(0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r1, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r1}, 0x9, 0x0, 0x1, {0x0, 0x0, r1}}, 0x3f)
ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:11:57 executing program 1:
gettid()
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r1, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r1}, 0x9, 0x0, 0x1, {0x0, 0x0, r1}}, 0x3f)
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:11:57 executing program 6:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:11:57 executing program 3:
gettid()
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r1, 0x10000000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:11:57 executing program 7:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:11:57 executing program 1:
gettid()
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r1, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r1}, 0x9, 0x0, 0x1, {0x0, 0x0, r1}}, 0x3f)
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:11:57 executing program 0:
gettid()
clone3(0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r1, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r1}, 0x9, 0x0, 0x1, {0x0, 0x0, r1}}, 0x3f)
ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:11:57 executing program 3:
gettid()
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r1, 0x10000000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:11:58 executing program 2:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r1=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r1, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:11:58 executing program 6:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:11:58 executing program 1:
gettid()
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r1, 0x10000000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:12:06 executing program 4:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r1=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r1, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)

04:12:06 executing program 6:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:12:06 executing program 0:
gettid()
clone3(0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r1, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r1}, 0x9, 0x0, 0x1, {0x0, 0x0, r1}}, 0x3f)
ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:12:06 executing program 3:
gettid()
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r1}, 0x9, 0x0, 0x1, {0x0, 0x0, r1}}, 0x3f)
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:12:06 executing program 7:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:12:06 executing program 5:
clone3(0x0, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:12:06 executing program 1:
gettid()
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r1, 0x10000000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:12:06 executing program 2:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r1=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r1, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:12:06 executing program 1:
gettid()
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r1, 0x10000000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:12:06 executing program 2:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r1=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r1, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:12:06 executing program 3:
gettid()
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r1}, 0x9, 0x0, 0x1, {0x0, 0x0, r1}}, 0x3f)
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:12:06 executing program 1:
gettid()
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
pidfd_getfd(0xffffffffffffffff, r0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:12:06 executing program 6:
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r0=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x58)
process_vm_writev(r0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:12:06 executing program 0:
r0 = gettid()
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r1=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r1, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r3 = pidfd_getfd(0xffffffffffffffff, r2, 0x0)
r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r3, 0x10000000)
syz_io_uring_submit(0x0, r4, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r3}, 0x9, 0x0, 0x1, {0x0, 0x0, r3}}, 0x3f)
ioctl$TUNGETSNDBUF(r3, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:12:06 executing program 1:
gettid()
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:12:06 executing program 5:
clone3(0x0, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:12:06 executing program 1:
gettid()
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:12:14 executing program 5:
clone3(0x0, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:12:14 executing program 4:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r1=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r1, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)

04:12:14 executing program 0:
r0 = gettid()
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r1=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r1, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r3 = pidfd_getfd(0xffffffffffffffff, r2, 0x0)
r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r3, 0x10000000)
syz_io_uring_submit(0x0, r4, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r3}, 0x9, 0x0, 0x1, {0x0, 0x0, r3}}, 0x3f)
ioctl$TUNGETSNDBUF(r3, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:12:14 executing program 7:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:12:14 executing program 3:
gettid()
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {}, 0x9, 0x0, 0x1}, 0x3f)
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:12:14 executing program 1:
gettid()
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:12:14 executing program 2:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:12:14 executing program 6:
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r0=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x58)
process_vm_writev(r0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:12:22 executing program 5:
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:12:22 executing program 6:
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r0=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x58)
process_vm_writev(r0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:12:22 executing program 3:
gettid()
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {}, 0x9, 0x0, 0x1}, 0x3f)
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:12:22 executing program 0:
r0 = gettid()
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r1=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r1, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r3 = pidfd_getfd(0xffffffffffffffff, r2, 0x0)
r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r3, 0x10000000)
syz_io_uring_submit(0x0, r4, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r3}, 0x9, 0x0, 0x1, {0x0, 0x0, r3}}, 0x3f)
ioctl$TUNGETSNDBUF(r3, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:12:22 executing program 4:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:12:22 executing program 2:
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x58)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:12:22 executing program 7:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))

04:12:22 executing program 1:
gettid()
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:12:22 executing program 3:
gettid()
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {}, 0x9, 0x0, 0x1}, 0x3f)
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:12:22 executing program 1:
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:12:22 executing program 5:
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:12:22 executing program 6:
clone3(0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:12:22 executing program 2:
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x58)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:12:30 executing program 3:
gettid()
syz_io_uring_submit(0x0, 0x0, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {}, 0x9, 0x0, 0x1}, 0x3f)
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:12:30 executing program 5:
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:12:30 executing program 2:
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x58)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:12:30 executing program 7:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))

04:12:30 executing program 4:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:12:30 executing program 1:
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:12:30 executing program 6:
clone3(0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:12:30 executing program 0:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, &(0x7f0000000040), &(0x7f0000000080)=<r1=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r1, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r3 = pidfd_getfd(0xffffffffffffffff, r2, 0x0)
r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r3, 0x10000000)
syz_io_uring_submit(0x0, r4, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r3}, 0x9, 0x0, 0x1, {0x0, 0x0, r3}}, 0x3f)
ioctl$TUNGETSNDBUF(r3, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:12:30 executing program 1:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)

04:12:30 executing program 6:
clone3(0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:12:30 executing program 3:
syz_io_uring_submit(0x0, 0x0, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {}, 0x9, 0x0, 0x1}, 0x3f)
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:12:30 executing program 0:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, &(0x7f0000000040), &(0x7f0000000080)=<r1=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r1, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r3 = pidfd_getfd(0xffffffffffffffff, r2, 0x0)
r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r3, 0x10000000)
syz_io_uring_submit(0x0, r4, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r3}, 0x9, 0x0, 0x1, {0x0, 0x0, r3}}, 0x3f)
ioctl$TUNGETSNDBUF(r3, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:12:30 executing program 3:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x3f)
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:12:30 executing program 1:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)

04:12:30 executing program 2:
gettid()
clone3(0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:12:30 executing program 4:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:12:38 executing program 5:
clone3(&(0x7f0000000240)={0x20020000, 0x0, &(0x7f0000000040), &(0x7f0000000080), {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:12:38 executing program 3:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:12:38 executing program 4:
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r0=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x58)
process_vm_writev(r0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:12:38 executing program 2:
gettid()
clone3(0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:12:38 executing program 6:
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r0=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x58)
process_vm_writev(r0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:12:38 executing program 7:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))

04:12:38 executing program 1:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)

04:12:38 executing program 0:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, &(0x7f0000000080)=<r1=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r1, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r3 = pidfd_getfd(0xffffffffffffffff, r2, 0x0)
r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r3, 0x10000000)
syz_io_uring_submit(0x0, r4, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r3}, 0x9, 0x0, 0x1, {0x0, 0x0, r3}}, 0x3f)
ioctl$TUNGETSNDBUF(r3, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:12:38 executing program 2:
gettid()
clone3(0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:12:38 executing program 6:
clone3(&(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000080)=<r0=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x58)
process_vm_writev(r0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:12:38 executing program 2:
r0 = gettid()
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:12:38 executing program 0:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, &(0x7f0000000080)=<r1=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r1, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r3 = pidfd_getfd(0xffffffffffffffff, r2, 0x0)
r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r3, 0x10000000)
syz_io_uring_submit(0x0, r4, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r3}, 0x9, 0x0, 0x1, {0x0, 0x0, r3}}, 0x3f)
ioctl$TUNGETSNDBUF(r3, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:12:38 executing program 3:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)

04:12:38 executing program 1:
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:12:38 executing program 3:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)

04:12:38 executing program 6:
clone3(&(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000080)=<r0=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x58)
process_vm_writev(r0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

[  440.193875] kworker/u10:2 (57) used greatest stack depth: 23968 bytes left
04:12:46 executing program 5:
clone3(&(0x7f0000000240)={0x20020000, 0x0, &(0x7f0000000040), &(0x7f0000000080), {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:12:46 executing program 0:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0)
r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r2, 0x10000000)
syz_io_uring_submit(0x0, r3, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r2}, 0x9, 0x0, 0x1, {0x0, 0x0, r2}}, 0x3f)
ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:12:46 executing program 6:
clone3(&(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000080)=<r0=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x58)
process_vm_writev(r0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:12:46 executing program 1:
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:12:46 executing program 4:
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r0=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x58)
process_vm_writev(r0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:12:46 executing program 7:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:12:46 executing program 3:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)

04:12:46 executing program 2:
r0 = gettid()
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:12:46 executing program 3:
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r0=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x58)
process_vm_writev(r0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:12:46 executing program 7:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:12:46 executing program 0:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0)
r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r2, 0x10000000)
syz_io_uring_submit(0x0, r3, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r2}, 0x9, 0x0, 0x1, {0x0, 0x0, r2}}, 0x3f)
ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:12:46 executing program 6:
clone3(&(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000080)=<r0=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x58)
process_vm_writev(r0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:12:46 executing program 5:
clone3(&(0x7f0000000240)={0x20020000, 0x0, &(0x7f0000000040), &(0x7f0000000080), {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:12:46 executing program 3:
clone3(&(0x7f0000000240)={0x20020000, 0x0, &(0x7f0000000040), &(0x7f0000000080), {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:12:46 executing program 0:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0)
r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r2, 0x10000000)
syz_io_uring_submit(0x0, r3, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r2}, 0x9, 0x0, 0x1, {0x0, 0x0, r2}}, 0x3f)
ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:12:46 executing program 4:
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r0=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x58)
process_vm_writev(r0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:12:46 executing program 2:
r0 = gettid()
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:12:46 executing program 1:
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:12:46 executing program 5:
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), 0x0, &(0x7f0000000080), {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:12:46 executing program 7:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:12:46 executing program 0:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0)
r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r2, 0x10000000)
syz_io_uring_submit(0x0, r3, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r2}, 0x9, 0x0, 0x1, {0x0, 0x0, r2}}, 0x3f)
ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:12:46 executing program 2:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, &(0x7f0000000040), &(0x7f0000000080), {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:12:54 executing program 5:
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), 0x0, &(0x7f0000000080), {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:12:54 executing program 1:
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))

04:12:54 executing program 7:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:12:54 executing program 0:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {0x32}, 0x0, 0x0, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0)
r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r2, 0x10000000)
syz_io_uring_submit(0x0, r3, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r2}, 0x9, 0x0, 0x1, {0x0, 0x0, r2}}, 0x3f)
ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:12:54 executing program 2:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, &(0x7f0000000040), &(0x7f0000000080), {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:12:54 executing program 3:
clone3(&(0x7f0000000240)={0x20020000, 0x0, &(0x7f0000000040), &(0x7f0000000080), {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:12:54 executing program 4:
gettid()
clone3(0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:12:54 executing program 6:
clone3(&(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:12:54 executing program 0:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {0x32}, 0x0, 0x0, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0)
r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r2, 0x10000000)
syz_io_uring_submit(0x0, r3, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r2}, 0x9, 0x0, 0x1, {0x0, 0x0, r2}}, 0x3f)
ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:12:54 executing program 4:
gettid()
clone3(0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:12:54 executing program 2:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, &(0x7f0000000080), {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:13:03 executing program 4:
gettid()
clone3(0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:13:03 executing program 2:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:13:03 executing program 5:
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:13:03 executing program 0:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {0x32}, 0x0, 0x0, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0)
r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r2, 0x10000000)
syz_io_uring_submit(0x0, r3, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r2}, 0x9, 0x0, 0x1, {0x0, 0x0, r2}}, 0x3f)
ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:13:03 executing program 1:
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))

04:13:03 executing program 6:
clone3(&(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:13:03 executing program 3:
clone3(&(0x7f0000000240)={0x20020000, 0x0, &(0x7f0000000040), &(0x7f0000000080), {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:13:03 executing program 7:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:13:03 executing program 4:
r0 = gettid()
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r1=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r1, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:13:03 executing program 7:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:13:03 executing program 0:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0)
r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r2, 0x10000000)
syz_io_uring_submit(0x0, r3, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r2}, 0x9, 0x0, 0x1, {0x0, 0x0, r2}}, 0x3f)
ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:13:03 executing program 2:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:13:04 executing program 1:
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))

04:13:04 executing program 3:
clone3(&(0x7f0000000240)={0x20020000, 0x0, &(0x7f0000000040), &(0x7f0000000080), {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))

04:13:04 executing program 5:
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), 0x0, 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:13:04 executing program 6:
clone3(&(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:13:04 executing program 4:
r0 = gettid()
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r1=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r1, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:13:12 executing program 4:
r0 = gettid()
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r1=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r1, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:13:12 executing program 0:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0)
r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r2, 0x10000000)
syz_io_uring_submit(0x0, r3, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r2}, 0x9, 0x0, 0x1, {0x0, 0x0, r2}}, 0x3f)
ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:13:12 executing program 7:
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:13:12 executing program 2:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:13:12 executing program 6:
clone3(&(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:13:12 executing program 5:
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), 0x0, 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:13:12 executing program 1:
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:13:12 executing program 3:
clone3(&(0x7f0000000240)={0x20020000, 0x0, &(0x7f0000000040), &(0x7f0000000080), {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)

04:13:12 executing program 6:
clone3(&(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:13:12 executing program 7:
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:13:12 executing program 0:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0)
r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r2, 0x10000000)
syz_io_uring_submit(0x0, r3, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r2}, 0x9, 0x0, 0x1, {0x0, 0x0, r2}}, 0x3f)
ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:13:12 executing program 2:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:13:12 executing program 6:
clone3(&(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), 0x0, {0x32}, 0x0, 0x0, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:13:12 executing program 3:
clone3(&(0x7f0000000240)={0x20020000, 0x0, &(0x7f0000000040), &(0x7f0000000080), {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x58)

04:13:12 executing program 4:
r0 = gettid()
clone3(&(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000080)=<r1=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r1, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:13:12 executing program 5:
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), 0x0, 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:13:12 executing program 0:
gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, 0x0}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r1, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r1}, 0x9, 0x0, 0x1, {0x0, 0x0, r1}}, 0x3f)
ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:13:20 executing program 2:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:13:20 executing program 7:
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:13:20 executing program 3:
clone3(0x0, 0x0)

04:13:20 executing program 5:
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), 0x0, 0x0, {0x32}, 0x0, 0x0, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:13:20 executing program 6:
clone3(&(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), 0x0, {0x32}, 0x0, 0x0, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:13:20 executing program 0:
gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, 0x0}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r1, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r1}, 0x9, 0x0, 0x1, {0x0, 0x0, r1}}, 0x3f)
ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:13:20 executing program 4:
r0 = gettid()
clone3(&(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000080)=<r1=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r1, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:13:20 executing program 1:
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:13:20 executing program 3:
clone3(0x0, 0x0)

04:13:20 executing program 4:
r0 = gettid()
clone3(&(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000080)=<r1=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r1, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:13:28 executing program 3:
clone3(0x0, 0x0)

04:13:28 executing program 6:
clone3(&(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), 0x0, {0x32}, 0x0, 0x0, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:13:28 executing program 0:
gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, 0x0}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r1, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r1}, 0x9, 0x0, 0x1, {0x0, 0x0, r1}}, 0x3f)
ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:13:28 executing program 5:
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), 0x0, 0x0, {0x32}, 0x0, 0x0, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:13:28 executing program 2:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:13:28 executing program 1:
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:13:28 executing program 4:
r0 = gettid()
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), 0x0, &(0x7f0000000080)=<r1=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r1, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:13:28 executing program 7:
gettid()
clone3(0x0, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:13:28 executing program 7:
gettid()
clone3(0x0, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:13:28 executing program 3:
clone3(&(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000080), {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x58)

04:13:28 executing program 4:
r0 = gettid()
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), 0x0, &(0x7f0000000080)=<r1=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r1, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:13:28 executing program 7:
gettid()
clone3(0x0, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:13:28 executing program 0:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0], 0x4}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0)
r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r2, 0x10000000)
syz_io_uring_submit(0x0, r3, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r2}, 0x9, 0x0, 0x1, {0x0, 0x0, r2}}, 0x3f)
ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:13:28 executing program 6:
clone3(&(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:13:29 executing program 2:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:13:29 executing program 7:
r0 = gettid()
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:13:29 executing program 3:
clone3(&(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000080), {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x58)

04:13:29 executing program 1:
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x58)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:13:29 executing program 5:
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), 0x0, 0x0, {0x32}, 0x0, 0x0, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:13:29 executing program 0:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0], 0x3}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0)
r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r2, 0x10000000)
syz_io_uring_submit(0x0, r3, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r2}, 0x9, 0x0, 0x1, {0x0, 0x0, r2}}, 0x3f)
ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:13:29 executing program 7:
r0 = gettid()
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:13:29 executing program 3:
clone3(&(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000080), {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x58)

04:13:29 executing program 6:
clone3(&(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:13:29 executing program 4:
r0 = gettid()
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), 0x0, &(0x7f0000000080)=<r1=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r1, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:13:38 executing program 4:
r0 = gettid()
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), &(0x7f0000000040), 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:13:38 executing program 6:
clone3(&(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:13:38 executing program 5:
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:13:38 executing program 3:
clone3(&(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000080), {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x58)

04:13:38 executing program 1:
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x58)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:13:38 executing program 2:
gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, 0x0, 0x0}, 0x58)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:13:38 executing program 0:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0], 0x2}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0)
r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r2, 0x10000000)
syz_io_uring_submit(0x0, r3, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r2}, 0x9, 0x0, 0x1, {0x0, 0x0, r2}}, 0x3f)
ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:13:38 executing program 7:
r0 = gettid()
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:13:38 executing program 3:
clone3(&(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000080), {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x58)

04:13:38 executing program 2:
gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, 0x0, 0x0}, 0x58)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:13:38 executing program 5:
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, 0x0, 0x0}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:13:38 executing program 6:
clone3(&(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, 0x0}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:13:38 executing program 7:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, &(0x7f0000000040), &(0x7f0000000080), {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:13:47 executing program 1:
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x58)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:13:47 executing program 0:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0], 0x2}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0)
r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r2, 0x10000000)
syz_io_uring_submit(0x0, r3, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r2}, 0x9, 0x0, 0x1, {0x0, 0x0, r2}}, 0x3f)
ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:13:47 executing program 4:
r0 = gettid()
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), &(0x7f0000000040), 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:13:47 executing program 5:
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, 0x0, 0x0}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:13:47 executing program 3:
clone3(&(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000080), {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x58)

04:13:47 executing program 2:
gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, 0x0, 0x0}, 0x58)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:13:47 executing program 7:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, &(0x7f0000000040), &(0x7f0000000080), {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:13:47 executing program 6:
clone3(&(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, 0x0}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:13:47 executing program 6:
clone3(&(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, 0x0}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:13:47 executing program 5:
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, 0x0, 0x0}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:13:47 executing program 3:
clone3(&(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x58)

04:13:47 executing program 2:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[r0, r0, r0, r0], 0x4}, 0x58)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:13:55 executing program 7:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, &(0x7f0000000040), &(0x7f0000000080), {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:13:55 executing program 5:
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:13:55 executing program 2:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[r0, r0, r0, r0], 0x4}, 0x58)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:13:55 executing program 3:
clone3(&(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x58)

04:13:55 executing program 4:
r0 = gettid()
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), &(0x7f0000000040), 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:13:55 executing program 6:
clone3(&(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:13:55 executing program 1:
clone3(0x0, 0x0)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:13:55 executing program 0:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0], 0x1}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0)
r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r2, 0x10000000)
syz_io_uring_submit(0x0, r3, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r2}, 0x9, 0x0, 0x1, {0x0, 0x0, r2}}, 0x3f)
ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:13:55 executing program 2:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[r0, r0, r0, r0], 0x4}, 0x58)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:13:55 executing program 0:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0], 0x1}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0)
r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r2, 0x10000000)
syz_io_uring_submit(0x0, r3, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r2}, 0x9, 0x0, 0x1, {0x0, 0x0, r2}}, 0x3f)
ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:13:55 executing program 4:
r0 = gettid()
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r1=>0x0, {}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r1, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:13:55 executing program 3:
clone3(&(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x58)

04:13:55 executing program 7:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), 0x0, &(0x7f0000000080), {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:13:55 executing program 1:
clone3(0x0, 0x0)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:13:55 executing program 6:
clone3(&(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:13:55 executing program 0:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0], 0x1}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0)
r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r2, 0x10000000)
syz_io_uring_submit(0x0, r3, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r2}, 0x9, 0x0, 0x1, {0x0, 0x0, r2}}, 0x3f)
ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:13:55 executing program 5:
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0], 0x3}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:14:03 executing program 1:
clone3(0x0, 0x0)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:14:03 executing program 3:
clone3(&(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x58)

04:14:03 executing program 2:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[r0, r0, r0, r0, 0x0], 0x5}, 0x58)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:14:03 executing program 0:
gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r1, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r1}, 0x9, 0x0, 0x1, {0x0, 0x0, r1}}, 0x3f)
ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:14:03 executing program 4:
r0 = gettid()
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r1=>0x0, {}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r1, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:14:03 executing program 7:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), 0x0, &(0x7f0000000080), {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:14:03 executing program 6:
clone3(&(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:14:03 executing program 5:
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0], 0x3}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:14:04 executing program 0:
gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r1, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r1}, 0x9, 0x0, 0x1, {0x0, 0x0, r1}}, 0x3f)
ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:14:04 executing program 1:
clone3(&(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000080), {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x58)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:14:04 executing program 4:
r0 = gettid()
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r1=>0x0, {}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r1, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:14:04 executing program 5:
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0], 0x3}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:14:04 executing program 2:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[r0, r0, r0, r0, 0x0], 0x5}, 0x58)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:14:04 executing program 3:
clone3(&(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), 0x0, {}, 0x0, 0x0, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x58)

04:14:04 executing program 6:
clone3(&(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, 0x0, 0x0], 0x3}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:14:04 executing program 0:
gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r1, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r1}, 0x9, 0x0, 0x1, {0x0, 0x0, r1}}, 0x3f)
ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:14:04 executing program 7:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), 0x0, &(0x7f0000000080), {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:14:04 executing program 0:
gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r1, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r1}, 0x9, 0x0, 0x1, {0x0, 0x0, r1}}, 0x3f)
ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:14:04 executing program 3:
clone3(&(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), 0x0, {}, 0x0, 0x0, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x58)

04:14:04 executing program 1:
clone3(&(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000080), {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x58)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:14:04 executing program 6:
clone3(&(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, 0x0, 0x0], 0x3}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:14:04 executing program 4:
r0 = gettid()
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r1=>0x0, {0x32}, 0x0, 0x0, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r1, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:14:04 executing program 7:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:14:12 executing program 1:
clone3(&(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000080), {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x58)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:14:12 executing program 7:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:14:12 executing program 3:
clone3(&(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), 0x0, {}, 0x0, 0x0, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x58)

04:14:12 executing program 5:
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0], 0x3}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:14:12 executing program 0:
gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r1, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r1}, 0x9, 0x0, 0x1, {0x0, 0x0, r1}}, 0x3f)
ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:14:12 executing program 4:
r0 = gettid()
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r1=>0x0, {0x32}, 0x0, 0x0, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r1, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:14:12 executing program 6:
clone3(&(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, 0x0, 0x0], 0x3}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:14:12 executing program 2:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[r0, r0, r0, r0, 0x0], 0x5}, 0x58)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:14:12 executing program 7:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:14:12 executing program 2:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[r0, r0, r0, r0], 0x4}, 0x58)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:14:12 executing program 6:
clone3(&(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, 0x0], 0x2}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:14:12 executing program 3:
clone3(&(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x58)

04:14:12 executing program 5:
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0], 0x3}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:14:12 executing program 1:
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), 0x0, &(0x7f0000000080), {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x58)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:14:12 executing program 0:
gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
process_vm_writev(0x0, 0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r1, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r1}, 0x9, 0x0, 0x1, {0x0, 0x0, r1}}, 0x3f)
ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:14:12 executing program 7:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:14:21 executing program 1:
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), 0x0, &(0x7f0000000080), {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x58)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:14:21 executing program 4:
r0 = gettid()
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r1=>0x0, {0x32}, 0x0, 0x0, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r1, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:14:21 executing program 0:
gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
process_vm_writev(0x0, 0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r1, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r1}, 0x9, 0x0, 0x1, {0x0, 0x0, r1}}, 0x3f)
ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:14:21 executing program 5:
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0], 0x3}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:14:21 executing program 7:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:14:21 executing program 6:
clone3(&(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, 0x0], 0x2}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:14:21 executing program 3:
clone3(&(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x58)

04:14:21 executing program 2:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[r0, r0, r0, r0], 0x4}, 0x58)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:14:30 executing program 3:
clone3(&(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x58)

04:14:30 executing program 1:
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x58)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:14:30 executing program 0:
gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
process_vm_writev(0x0, 0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r1, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r1}, 0x9, 0x0, 0x1, {0x0, 0x0, r1}}, 0x3f)
ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:14:30 executing program 2:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[r0, r0, r0, r0], 0x4}, 0x58)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:14:30 executing program 7:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:14:30 executing program 5:
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0], 0x3}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:14:30 executing program 4:
r0 = gettid()
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r1=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r1, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:14:30 executing program 6:
clone3(&(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:14:30 executing program 6:
clone3(&(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:14:30 executing program 1:
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x58)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:14:30 executing program 0:
gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}], 0x7, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r1, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r1}, 0x9, 0x0, 0x1, {0x0, 0x0, r1}}, 0x3f)
ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:14:30 executing program 6:
clone3(&(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:14:30 executing program 3:
clone3(&(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, 0x0}, 0x58)

04:14:30 executing program 4:
r0 = gettid()
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r1=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r1, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:14:30 executing program 5:
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0], 0x3}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:14:30 executing program 6:
clone3(&(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:14:30 executing program 7:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), 0x0, {}, 0x0, 0x0, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:14:30 executing program 1:
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x58)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:14:30 executing program 2:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[r0, r0, r0, 0x0, r0], 0x5}, 0x58)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:14:30 executing program 6:
clone3(&(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
process_vm_writev(0x0, 0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:14:30 executing program 5:
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[0x0, 0x0], 0x2}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:14:30 executing program 3:
clone3(&(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, 0x0}, 0x58)

04:14:39 executing program 3:
clone3(&(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, 0x0}, 0x58)

04:14:39 executing program 2:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[r0, r0, r0, 0x0, r0], 0x5}, 0x58)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:14:39 executing program 6:
clone3(&(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:14:39 executing program 7:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), 0x0, {}, 0x0, 0x0, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:14:39 executing program 0:
gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}], 0x7, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r1, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r1}, 0x9, 0x0, 0x1, {0x0, 0x0, r1}}, 0x3f)
ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:14:39 executing program 5:
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[0x0, 0x0], 0x2}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:14:39 executing program 1:
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), 0x0, 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x58)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:14:39 executing program 4:
r0 = gettid()
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r1=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
process_vm_writev(r1, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:14:39 executing program 3:
clone3(&(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58)

04:14:39 executing program 6:
clone3(&(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:14:39 executing program 1:
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), 0x0, 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x58)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:14:39 executing program 2:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[r0, r0, 0x0, r0], 0x4}, 0x58)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:14:39 executing program 5:
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[0x0, 0x0], 0x2}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:14:48 executing program 7:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), 0x0, {}, 0x0, 0x0, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:14:48 executing program 4:
gettid()
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r0=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, 0x0}, 0x58)
process_vm_writev(r0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:14:48 executing program 5:
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0], 0x3}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, 0x0, 0x8080)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:14:48 executing program 3:
clone3(&(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58)

04:14:48 executing program 0:
gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}], 0x7, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r1, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r1}, 0x9, 0x0, 0x1, {0x0, 0x0, r1}}, 0x3f)
ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:14:48 executing program 1:
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), 0x0, 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x58)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:14:48 executing program 2:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[r0, r0, 0x0, r0], 0x4}, 0x58)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:14:48 executing program 6:
clone3(&(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:14:48 executing program 3:
clone3(&(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58)

04:14:48 executing program 6:
clone3(&(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:14:48 executing program 4:
gettid()
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r0=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, 0x0}, 0x58)
process_vm_writev(r0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:14:48 executing program 0:
gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}], 0x6, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r1, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r1}, 0x9, 0x0, 0x1, {0x0, 0x0, r1}}, 0x3f)
ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:14:48 executing program 2:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[r0, 0x0, r0], 0x3}, 0x58)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:14:48 executing program 5:
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0], 0x3}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, 0x0, 0x8080)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:14:48 executing program 7:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:14:49 executing program 1:
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), 0x0, 0x0, {0x32}, 0x0, 0x0, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x58)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:14:49 executing program 3:
clone3(&(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58)

04:14:49 executing program 6:
clone3(&(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:14:49 executing program 5:
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0], 0x3}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, 0x0, 0x8080)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:14:57 executing program 5:
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0], 0x3}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:14:57 executing program 1:
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), 0x0, 0x0, {0x32}, 0x0, 0x0, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x58)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:14:57 executing program 3:
clone3(&(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58)

04:14:57 executing program 2:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[r0, 0x0, r0], 0x3}, 0x58)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:14:57 executing program 7:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:14:58 executing program 4:
gettid()
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r0=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, 0x0}, 0x58)
process_vm_writev(r0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:14:57 executing program 0:
gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}], 0x5, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r1, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r1}, 0x9, 0x0, 0x1, {0x0, 0x0, r1}}, 0x3f)
ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:14:57 executing program 6:
clone3(&(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:14:58 executing program 6:
clone3(&(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000001dc0), 0x0, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:14:58 executing program 3:
clone3(&(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58)

04:15:06 executing program 0:
gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}], 0x5, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r1, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r1}, 0x9, 0x0, 0x1, {0x0, 0x0, r1}}, 0x3f)
ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:15:06 executing program 7:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[r0, r0, r0, r0, r0], 0x5}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:15:06 executing program 2:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[0x0, r0], 0x2}, 0x58)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:15:06 executing program 1:
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), 0x0, 0x0, {0x32}, 0x0, 0x0, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x58)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:15:06 executing program 5:
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0], 0x3}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:15:06 executing program 3:
clone3(&(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58)

04:15:06 executing program 6:
clone3(&(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000001dc0), 0x0, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:15:06 executing program 4:
r0 = gettid()
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r1=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0], 0x4}, 0x58)
process_vm_writev(r1, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:15:06 executing program 5:
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0], 0x3}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:15:06 executing program 0:
gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}], 0x5, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r1, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r1}, 0x9, 0x0, 0x1, {0x0, 0x0, r1}}, 0x3f)
ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:15:06 executing program 7:
gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, 0x0}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:15:07 executing program 2:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[0x0, r0], 0x2}, 0x58)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:15:07 executing program 0:
gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {0x0}], 0x6, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r1, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r1}, 0x9, 0x0, 0x1, {0x0, 0x0, r1}}, 0x3f)
ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:15:07 executing program 1:
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x58)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:15:07 executing program 3:
clone3(&(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58)

04:15:07 executing program 6:
clone3(&(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000001dc0), 0x0, 0x0)
openat$zero(0xffffffffffffff9c, 0x0, 0x82000, 0x0)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:15:07 executing program 5:
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0], 0x3}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={0x0, 0x0, 0x0}, 0x8080)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:15:07 executing program 7:
gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, 0x0}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:15:07 executing program 4:
r0 = gettid()
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r1=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0], 0x4}, 0x58)
process_vm_writev(r1, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:15:07 executing program 4:
r0 = gettid()
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r1=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0], 0x4}, 0x58)
process_vm_writev(r1, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:15:07 executing program 0:
gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {0x0}], 0x6, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r1, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r1}, 0x9, 0x0, 0x1, {0x0, 0x0, r1}}, 0x3f)
ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:15:07 executing program 7:
gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, 0x0}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:15:07 executing program 5:
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0], 0x3}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={0x0, 0x0, 0x0}, 0x8080)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:15:07 executing program 3:
clone3(&(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58)

04:15:07 executing program 2:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[0x0, r0], 0x2}, 0x58)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:15:07 executing program 6:
clone3(&(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000001dc0), 0x0, 0x0)
openat$zero(0xffffffffffffff9c, 0x0, 0x82000, 0x0)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:15:07 executing program 0:
gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {0x0}], 0x6, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r1, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r1}, 0x9, 0x0, 0x1, {0x0, 0x0, r1}}, 0x3f)
ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:15:07 executing program 7:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0], 0x4}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:15:15 executing program 5:
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0], 0x3}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={0x0, 0x0, 0x0}, 0x8080)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:15:15 executing program 1:
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x58)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:15:15 executing program 6:
clone3(&(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000001dc0), 0x0, 0x0)
openat$zero(0xffffffffffffff9c, 0x0, 0x82000, 0x0)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:15:15 executing program 0:
gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f0000000580)=""/17, 0x11}], 0x5, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r1, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r1}, 0x9, 0x0, 0x1, {0x0, 0x0, r1}}, 0x3f)
ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:15:15 executing program 7:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0], 0x3}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:15:15 executing program 3:
clone3(&(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58)

04:15:15 executing program 4:
r0 = gettid()
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r1=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, 0x0], 0x5}, 0x58)
process_vm_writev(r1, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:15:15 executing program 2:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[0x0, 0x0, r0], 0x3}, 0x58)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:15:22 executing program 0:
gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f0000000580)=""/17, 0x11}], 0x5, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r1, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r1}, 0x9, 0x0, 0x1, {0x0, 0x0, r1}}, 0x3f)
ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:15:22 executing program 2:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[0x0, 0x0, r0], 0x3}, 0x58)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:15:22 executing program 1:
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x58)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:15:22 executing program 3:
clone3(&(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, 0x0, 0x0], 0x3}, 0x58)

04:15:22 executing program 5:
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0], 0x3}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={0x0, 0x0, 0x0}, 0x0)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:15:22 executing program 7:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0], 0x3}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:15:22 executing program 4:
r0 = gettid()
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r1=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, 0x0], 0x5}, 0x58)
process_vm_writev(r1, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:15:22 executing program 6:
clone3(&(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000001dc0), 0x0, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x0, 0x0)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:15:22 executing program 7:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0], 0x3}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:15:22 executing program 6:
clone3(&(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000001dc0), 0x0, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x0, 0x0)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:15:22 executing program 1:
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, 0x0, 0x0}, 0x58)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:15:23 executing program 2:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[0x0, 0x0, r0], 0x3}, 0x58)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:15:23 executing program 5:
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0], 0x3}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={0x0, 0x0, 0x0}, 0x0)
socketpair(0x0, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:15:23 executing program 0:
gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f0000000580)=""/17, 0x11}], 0x5, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r1, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r1}, 0x9, 0x0, 0x1, {0x0, 0x0, r1}}, 0x3f)
ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:15:23 executing program 4:
r0 = gettid()
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r1=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0, 0x0], 0x5}, 0x58)
process_vm_writev(r1, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:15:23 executing program 7:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, 0x0], 0x4}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:15:23 executing program 1:
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, 0x0, 0x0}, 0x58)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:15:31 executing program 3:
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0], 0x3}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={0x0, 0x0, 0x0}, 0x0)
socketpair(0x0, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:15:31 executing program 6:
clone3(&(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000001dc0), 0x0, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x0, 0x0)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:15:31 executing program 2:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[r0, 0x0, r0], 0x3}, 0x58)
process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:15:31 executing program 4:
r0 = gettid()
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r1=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0], 0x4}, 0x58)
process_vm_writev(r1, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:15:31 executing program 0:
gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {0x0}, {&(0x7f0000000580)=""/17, 0x11}], 0x6, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r1, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r1}, 0x9, 0x0, 0x1, {0x0, 0x0, r1}}, 0x3f)
ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:15:31 executing program 7:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, 0x0], 0x4}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:15:31 executing program 1:
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, 0x0, 0x0}, 0x58)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:15:31 executing program 5:
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0], 0x3}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={0x0, 0x0, 0x0}, 0x0)
socketpair(0x0, 0x0, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:15:31 executing program 4:
r0 = gettid()
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r1=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0], 0x4}, 0x58)
process_vm_writev(r1, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:15:31 executing program 2:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[r0, 0x0, r0], 0x3}, 0x58)
process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:15:31 executing program 1:
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:15:31 executing program 6:
clone3(&(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000001dc0), 0x0, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x0, 0x0)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, 0x0)

04:15:39 executing program 5:
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0], 0x3}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={0x0, 0x0, 0x0}, 0x0)
socketpair(0x0, 0x0, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:15:39 executing program 4:
r0 = gettid()
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r1=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0], 0x4}, 0x58)
process_vm_writev(r1, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:15:39 executing program 6:
clone3(&(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000001dc0), 0x0, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x0, 0x0)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, 0x0)

04:15:39 executing program 1:
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:15:39 executing program 0:
gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {0x0}, {&(0x7f0000000580)=""/17, 0x11}], 0x6, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r1, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r1}, 0x9, 0x0, 0x1, {0x0, 0x0, r1}}, 0x3f)
ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:15:39 executing program 3:
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0], 0x3}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={0x0, 0x0, 0x0}, 0x0)
socketpair(0x0, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:15:39 executing program 7:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, 0x0], 0x4}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:15:39 executing program 2:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[r0, 0x0, r0], 0x3}, 0x58)
process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:15:39 executing program 2:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[r0, 0x0, r0], 0x3}, 0x58)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}], 0x3, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:15:39 executing program 0:
gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {0x0}, {&(0x7f0000000580)=""/17, 0x11}], 0x6, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r1, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r1}, 0x9, 0x0, 0x1, {0x0, 0x0, r1}}, 0x3f)
ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:15:39 executing program 1:
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:15:39 executing program 4:
r0 = gettid()
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r1=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, 0x0, r0], 0x5}, 0x58)
process_vm_writev(r1, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:15:39 executing program 6:
clone3(&(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000001dc0), 0x0, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x0, 0x0)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, 0x0)

04:15:40 executing program 2:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[r0, 0x0, r0], 0x3}, 0x58)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}], 0x3, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:15:40 executing program 1:
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:15:40 executing program 5:
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0], 0x3}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={0x0, 0x0, 0x0}, 0x0)
socketpair(0x0, 0x0, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:15:40 executing program 7:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0], 0x3}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:15:40 executing program 4:
r0 = gettid()
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r1=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, 0x0, r0], 0x5}, 0x58)
process_vm_writev(r1, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:15:40 executing program 2:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[r0, 0x0, r0], 0x3}, 0x58)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}], 0x3, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:15:40 executing program 3:
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0], 0x3}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={0x0, 0x0, 0x0}, 0x0)
socketpair(0x0, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:15:40 executing program 0:
gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}], 0x5, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r1, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r1}, 0x9, 0x0, 0x1, {0x0, 0x0, r1}}, 0x3f)
ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:15:40 executing program 5:
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0], 0x3}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={0x0, 0x0, 0x0}, 0x0)
socketpair(0x0, 0xa, 0x0, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:15:40 executing program 1:
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0], 0x3}, 0x58)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:15:48 executing program 7:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0], 0x3}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:15:48 executing program 0:
gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}], 0x5, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r1, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r1}, 0x9, 0x0, 0x1, {0x0, 0x0, r1}}, 0x3f)
ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:15:48 executing program 1:
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0], 0x3}, 0x58)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:15:48 executing program 3:
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0], 0x3}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={0x0, 0x0, 0x0}, 0x0)
socketpair(0x0, 0xa, 0x1f, &(0x7f00000024c0))

04:15:48 executing program 4:
r0 = gettid()
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r1=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, 0x0, r0], 0x5}, 0x58)
process_vm_writev(r1, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:15:48 executing program 5:
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0], 0x3}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={0x0, 0x0, 0x0}, 0x0)
socketpair(0x0, 0xa, 0x0, 0x0)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:15:48 executing program 2:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[r0, 0x0, r0], 0x3}, 0x58)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {0x0}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:15:48 executing program 6:
gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}], 0x5, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r1, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r1}, 0x9, 0x0, 0x1, {0x0, 0x0, r1}}, 0x3f)
ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:15:48 executing program 2:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[r0, 0x0, r0], 0x3}, 0x58)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {0x0}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:15:48 executing program 1:
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[0x0, 0x0], 0x2}, 0x58)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:15:48 executing program 0:
gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {0x0}, {&(0x7f0000000580)=""/17, 0x11}], 0x5, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r1, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r1}, 0x9, 0x0, 0x1, {0x0, 0x0, r1}}, 0x3f)
ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:15:48 executing program 7:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0], 0x3}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:15:48 executing program 2:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[r0, 0x0, r0], 0x3}, 0x58)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {0x0}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:15:48 executing program 4:
r0 = gettid()
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r1=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0], 0x4}, 0x58)
process_vm_writev(r1, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:15:56 executing program 1:
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
socketpair(0x29, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:15:56 executing program 5:
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0], 0x3}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={0x0, 0x0, 0x0}, 0x0)
socketpair(0x0, 0xa, 0x0, 0x0)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:15:56 executing program 4:
r0 = gettid()
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r1=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0], 0x4}, 0x58)
process_vm_writev(r1, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:15:56 executing program 7:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, 0x0, r0], 0x4}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:15:56 executing program 6:
gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}], 0x5, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r1, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r1}, 0x9, 0x0, 0x1, {0x0, 0x0, r1}}, 0x3f)
ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:15:56 executing program 0:
gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {0x0}, {&(0x7f0000000580)=""/17, 0x11}], 0x5, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r1, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r1}, 0x9, 0x0, 0x1, {0x0, 0x0, r1}}, 0x3f)
ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:15:56 executing program 2:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[r0, 0x0, r0], 0x3}, 0x58)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x3, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:15:56 executing program 3:
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0], 0x3}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={0x0, 0x0, 0x0}, 0x0)

04:15:56 executing program 7:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, 0x0, r0], 0x4}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:15:56 executing program 1:
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
socketpair(0x0, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:15:56 executing program 4:
r0 = gettid()
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r1=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0], 0x4}, 0x58)
process_vm_writev(r1, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:15:56 executing program 7:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, 0x0, r0], 0x4}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:16:04 executing program 2:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[r0, 0x0, r0], 0x3}, 0x58)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x3, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:16:04 executing program 3:
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0], 0x3}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={0x0, 0x0, 0x0}, 0x0)

04:16:04 executing program 7:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0], 0x3}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:16:04 executing program 4:
r0 = gettid()
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r1=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, 0x0, r0, r0], 0x5}, 0x58)
process_vm_writev(r1, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:16:04 executing program 0:
gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {0x0}, {&(0x7f0000000580)=""/17, 0x11}], 0x5, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r1, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r1}, 0x9, 0x0, 0x1, {0x0, 0x0, r1}}, 0x3f)
ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:16:04 executing program 5:
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0], 0x3}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={0x0, 0x0, 0x0}, 0x0)
socketpair(0x0, 0xa, 0x0, 0x0)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:16:04 executing program 1:
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
socketpair(0x0, 0xa, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:16:04 executing program 6:
gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {0x0}, {&(0x7f0000000580)=""/17, 0x11}], 0x5, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r1, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r1}, 0x9, 0x0, 0x1, {0x0, 0x0, r1}}, 0x3f)
ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:16:04 executing program 7:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0], 0x3}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:16:04 executing program 0:
gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}], 0x4, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r1, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r1}, 0x9, 0x0, 0x1, {0x0, 0x0, r1}}, 0x3f)
ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:16:04 executing program 1:
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
socketpair(0x0, 0x0, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:16:05 executing program 5:
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0], 0x3}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={0x0, 0x0, 0x0}, 0x0)
socketpair(0x0, 0xa, 0x0, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, 0x0)

04:16:05 executing program 3:
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0], 0x3}, 0x58)

04:16:05 executing program 6:
gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {0x0}, {&(0x7f0000000580)=""/17, 0x11}], 0x5, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r1, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r1}, 0x9, 0x0, 0x1, {0x0, 0x0, r1}}, 0x3f)
ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:16:05 executing program 2:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[r0, 0x0, r0], 0x3}, 0x58)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x3, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:16:05 executing program 4:
r0 = gettid()
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r1=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, 0x0, r0, r0], 0x5}, 0x58)
process_vm_writev(r1, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:16:05 executing program 0:
gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}], 0x4, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r1, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r1}, 0x9, 0x0, 0x1, {0x0, 0x0, r1}}, 0x3f)
ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:16:05 executing program 3:
clone3(0x0, 0x0)

04:16:05 executing program 7:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0], 0x3}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:16:13 executing program 3:
clone3(0x0, 0x0)

04:16:13 executing program 7:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, 0x0, r0, r0], 0x4}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:16:13 executing program 0:
gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}], 0x4, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r1, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r1}, 0x9, 0x0, 0x1, {0x0, 0x0, r1}}, 0x3f)
ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:16:13 executing program 4:
r0 = gettid()
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r1=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, 0x0, r0, r0], 0x5}, 0x58)
process_vm_writev(r1, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:16:13 executing program 2:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[r0, 0x0, r0], 0x3}, 0x58)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {&(0x7f0000000b40)=""/182, 0xb6}, {0x0}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:16:13 executing program 1:
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
socketpair(0x0, 0x0, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:16:13 executing program 6:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0], 0x3}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:16:13 executing program 5:
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
socketpair(0x0, 0x0, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:16:13 executing program 3:
clone3(0x0, 0x0)

04:16:20 executing program 1:
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
socketpair(0x0, 0x0, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:16:20 executing program 3:
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0], 0x3}, 0x58)

04:16:20 executing program 5:
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
socketpair(0x0, 0x0, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:16:20 executing program 6:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0], 0x3}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:16:20 executing program 4:
r0 = gettid()
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r1=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, 0x0, r0, r0], 0x4}, 0x58)
process_vm_writev(r1, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:16:20 executing program 2:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[r0, 0x0, r0], 0x3}, 0x58)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {0x0}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x3, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:16:20 executing program 0:
gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {0x0}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}], 0x5, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r1, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r1}, 0x9, 0x0, 0x1, {0x0, 0x0, r1}}, 0x3f)
ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:16:20 executing program 7:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, 0x0, r0, r0], 0x4}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:16:20 executing program 7:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, 0x0, r0, r0], 0x4}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:16:20 executing program 1:
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
socketpair(0x0, 0xa, 0x0, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:16:20 executing program 4:
r0 = gettid()
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r1=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, 0x0, r0, r0], 0x4}, 0x58)
process_vm_writev(r1, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:16:21 executing program 0:
gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {0x0}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}], 0x5, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r1, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r1}, 0x9, 0x0, 0x1, {0x0, 0x0, r1}}, 0x3f)
ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:16:21 executing program 5:
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
socketpair(0x0, 0x0, 0x1f, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:16:21 executing program 3:
clone3(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0], 0x3}, 0x58)

04:16:21 executing program 2:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[r0, 0x0, r0], 0x3}, 0x58)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {0x0}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x3, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:16:21 executing program 7:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0], 0x3}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:16:21 executing program 4:
r0 = gettid()
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r1=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, 0x0, r0, r0], 0x4}, 0x58)
process_vm_writev(r1, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:16:21 executing program 6:
gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {0x0}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}], 0x5, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r1, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r1}, 0x9, 0x0, 0x1, {0x0, 0x0, r1}}, 0x3f)
ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:16:21 executing program 0:
gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {0x0}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}], 0x5, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r1, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r1}, 0x9, 0x0, 0x1, {0x0, 0x0, r1}}, 0x3f)
ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:16:29 executing program 2:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[r0, 0x0, r0], 0x3}, 0x58)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {0x0}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x3, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:16:29 executing program 7:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0], 0x3}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:16:29 executing program 6:
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
socketpair(0x0, 0xa, 0x0, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:16:29 executing program 5:
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
socketpair(0x0, 0x0, 0x1f, &(0x7f00000024c0))

04:16:29 executing program 0:
gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}], 0x4, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r1, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r1}, 0x9, 0x0, 0x1, {0x0, 0x0, r1}}, 0x3f)
ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:16:29 executing program 1:
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
socketpair(0x0, 0xa, 0x0, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:16:29 executing program 3:
clone3(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0], 0x3}, 0x58)

04:16:29 executing program 4:
r0 = gettid()
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r1=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, r0, r0], 0x3}, 0x58)
process_vm_writev(r1, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:16:29 executing program 4:
r0 = gettid()
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r1=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, r0, r0], 0x3}, 0x58)
process_vm_writev(r1, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:16:29 executing program 7:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0], 0x3}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:16:29 executing program 3:
clone3(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0], 0x3}, 0x58)

04:16:29 executing program 6:
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
socketpair(0x0, 0xa, 0x0, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:16:29 executing program 0:
gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}], 0x4, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r1, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r1}, 0x9, 0x0, 0x1, {0x0, 0x0, r1}}, 0x3f)
ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:16:29 executing program 4:
r0 = gettid()
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r1=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, r0, r0], 0x3}, 0x58)
process_vm_writev(r1, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:16:29 executing program 5:
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[0x0], 0x1}, 0x58)

04:16:29 executing program 1:
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
socketpair(0x0, 0xa, 0x0, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:16:29 executing program 2:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[r0, 0x0, r0], 0x3}, 0x58)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {0x0}, {0x0}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:16:29 executing program 7:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, r0, r0, r0], 0x4}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:16:29 executing program 4:
r0 = gettid()
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r1=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, 0x0, r0, r0], 0x4}, 0x58)
process_vm_writev(r1, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:16:29 executing program 6:
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
socketpair(0x0, 0xa, 0x0, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:16:30 executing program 3:
clone3(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

04:16:30 executing program 7:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, r0, r0, r0], 0x4}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:16:38 executing program 1:
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
socketpair(0x0, 0xa, 0x0, 0x0)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:16:38 executing program 6:
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
socketpair(0x0, 0xa, 0x0, &(0x7f00000024c0))

04:16:38 executing program 3:
clone3(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

04:16:38 executing program 0:
gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {0x0}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}], 0x4, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r1, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r1}, 0x9, 0x0, 0x1, {0x0, 0x0, r1}}, 0x3f)
ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:16:38 executing program 5:
clone3(0x0, 0x0)

04:16:38 executing program 7:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, r0, r0, r0], 0x4}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:16:38 executing program 4:
r0 = gettid()
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r1=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, 0x0, r0, r0], 0x4}, 0x58)
process_vm_writev(r1, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:16:38 executing program 2:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[r0, 0x0, r0], 0x3}, 0x58)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {0x0}, {0x0}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:16:38 executing program 5:
clone3(0x0, 0x0)

04:16:38 executing program 4:
r0 = gettid()
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r1=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, 0x0, r0, r0], 0x4}, 0x58)
process_vm_writev(r1, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:16:38 executing program 3:
clone3(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

04:16:38 executing program 5:
clone3(0x0, 0x0)

04:16:38 executing program 0:
gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {0x0}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}], 0x4, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r1, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r1}, 0x9, 0x0, 0x1, {0x0, 0x0, r1}}, 0x3f)
ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:16:47 executing program 6:
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[0x0], 0x1}, 0x58)

04:16:47 executing program 7:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0], 0x4}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, 0x0, 0x8080)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:16:47 executing program 3:
clone3(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

04:16:47 executing program 0:
gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {0x0}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}], 0x4, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r1, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r1}, 0x9, 0x0, 0x1, {0x0, 0x0, r1}}, 0x3f)
ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:16:47 executing program 5:
clone3(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[0x0], 0x1}, 0x58)

04:16:47 executing program 2:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[r0, 0x0, r0], 0x3}, 0x58)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000a40)=""/245, 0xf5}, {0x0}, {0x0}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x4, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:16:47 executing program 1:
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
socketpair(0x0, 0xa, 0x0, 0x0)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:16:47 executing program 4:
r0 = gettid()
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, 0x0, r0, r0], 0x4}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:16:47 executing program 1:
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
socketpair(0x0, 0xa, 0x0, 0x0)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, 0x0)

04:16:47 executing program 2:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[r0, 0x0, r0], 0x3}, 0x58)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000b40)=""/182, 0xb6}, {0x0}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x3, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:16:47 executing program 4:
r0 = gettid()
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, 0x0, r0, r0], 0x4}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:16:47 executing program 5:
clone3(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[0x0], 0x1}, 0x58)

04:16:47 executing program 6:
clone3(0x0, 0x0)

04:16:47 executing program 3:
clone3(0x0, 0x0)

04:16:47 executing program 0:
gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f0000000400)=""/48, 0x30}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}], 0x3, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r1, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r1}, 0x9, 0x0, 0x1, {0x0, 0x0, r1}}, 0x3f)
ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:16:47 executing program 4:
r0 = gettid()
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, 0x0, r0, r0], 0x4}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:16:47 executing program 1:
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
socketpair(0x0, 0xa, 0x0, 0x0)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, 0x0)

04:16:47 executing program 7:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0], 0x4}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, 0x0, 0x8080)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:16:47 executing program 4:
r0 = gettid()
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r1=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, 0x0, r0, r0], 0x4}, 0x58)
process_vm_writev(r1, 0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:16:47 executing program 5:
clone3(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0x0], 0x1}, 0x58)

04:16:47 executing program 1:
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
socketpair(0x0, 0xa, 0x0, 0x0)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, 0x0)

04:16:47 executing program 0:
gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f0000000400)=""/48, 0x30}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}], 0x3, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r1, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r1}, 0x9, 0x0, 0x1, {0x0, 0x0, r1}}, 0x3f)
ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:16:47 executing program 6:
clone3(0x0, 0x0)

04:16:47 executing program 3:
clone3(0x0, 0x0)

04:16:55 executing program 5:
clone3(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

04:16:55 executing program 7:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0], 0x4}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, 0x0, 0x8080)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:16:55 executing program 0:
gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f0000000400)=""/48, 0x30}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}], 0x3, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r1, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r1}, 0x9, 0x0, 0x1, {0x0, 0x0, r1}}, 0x3f)
ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:16:55 executing program 3:
clone3(0x0, 0x0)

04:16:55 executing program 2:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[r0, 0x0, r0], 0x3}, 0x58)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000b40)=""/182, 0xb6}, {0x0}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x3, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:16:55 executing program 6:
clone3(0x0, 0x0)

04:16:55 executing program 1:
clone3(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0x0], 0x1}, 0x58)

04:16:55 executing program 4:
r0 = gettid()
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r1=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, 0x0, r0, r0], 0x4}, 0x58)
process_vm_writev(r1, 0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:16:55 executing program 6:
clone3(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[0x0], 0x1}, 0x58)

04:16:55 executing program 3:
r0 = gettid()
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, 0x0, r0, r0], 0x4}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:16:55 executing program 5:
clone3(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

04:16:55 executing program 2:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[r0, 0x0, r0], 0x3}, 0x58)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{0x0}, {0x0}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x3, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:17:03 executing program 0:
gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}], 0x4, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r1, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r1}, 0x9, 0x0, 0x1, {0x0, 0x0, r1}}, 0x3f)
ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:17:03 executing program 7:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0], 0x4}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:17:03 executing program 2:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[r0, 0x0, r0], 0x3}, 0x58)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{0x0}, {0x0}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x3, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:17:03 executing program 5:
clone3(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

04:17:03 executing program 1:
clone3(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0x0], 0x1}, 0x58)

04:17:03 executing program 6:
clone3(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[0x0], 0x1}, 0x58)

04:17:03 executing program 3:
r0 = gettid()
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, 0x0, r0, r0], 0x4}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:17:03 executing program 4:
r0 = gettid()
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r1=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, 0x0, r0, r0], 0x4}, 0x58)
process_vm_writev(r1, 0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:17:03 executing program 4:
r0 = gettid()
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r1=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, 0x0, r0, r0], 0x4}, 0x58)
process_vm_writev(r1, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}], 0x7, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:17:03 executing program 5:
clone3(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

04:17:03 executing program 0:
gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}], 0x4, 0x0, 0x0, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r1, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r1}, 0x9, 0x0, 0x1, {0x0, 0x0, r1}}, 0x3f)
ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:17:12 executing program 2:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[r0, 0x0, r0], 0x3}, 0x58)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{0x0}, {0x0}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x3, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/172, 0xac}], 0x1, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:17:12 executing program 7:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0], 0x4}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:17:12 executing program 4:
r0 = gettid()
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r1=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, 0x0, r0, r0], 0x4}, 0x58)
process_vm_writev(r1, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}], 0x7, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:17:12 executing program 5:
clone3(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

04:17:12 executing program 3:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0], 0x4}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:17:12 executing program 6:
clone3(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[0x0], 0x1}, 0x58)

04:17:12 executing program 0:
gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}], 0x4, 0x0, 0x0, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r1, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r1}, 0x9, 0x0, 0x1, {0x0, 0x0, r1}}, 0x3f)
ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:17:12 executing program 1:
clone3(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0x0], 0x1}, 0x58)

04:17:12 executing program 5:
clone3(0x0, 0x0)

04:17:12 executing program 2:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[r0, 0x0, r0], 0x3}, 0x58)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000b40)=""/182, 0xb6}, {0x0}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x3, 0x0, 0x0, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:17:12 executing program 7:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0], 0x4}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:17:12 executing program 1:
clone3(0x0, 0x0)

04:17:12 executing program 4:
r0 = gettid()
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r1=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, 0x0, r0, r0], 0x4}, 0x58)
process_vm_writev(r1, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}], 0x7, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:17:12 executing program 0:
gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}], 0x4, 0x0, 0x0, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r1, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r1}, 0x9, 0x0, 0x1, {0x0, 0x0, r1}}, 0x3f)
ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:17:12 executing program 6:
clone3(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[0x0], 0x1}, 0x58)

04:17:12 executing program 3:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0], 0x4}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:17:12 executing program 5:
clone3(0x0, 0x0)

04:17:13 executing program 1:
clone3(0x0, 0x0)

04:17:13 executing program 2:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[r0, 0x0, r0], 0x3}, 0x58)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000b40)=""/182, 0xb6}, {0x0}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x3, 0x0, 0x0, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:17:13 executing program 6:
clone3(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, {0x32}, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0x0], 0x1}, 0x58)

04:17:13 executing program 0:
gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}], 0x4, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}], 0x4, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r1, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r1}, 0x9, 0x0, 0x1, {0x0, 0x0, r1}}, 0x3f)
ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:17:13 executing program 4:
r0 = gettid()
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r1=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, 0x0, r0, r0], 0x4}, 0x58)
process_vm_writev(r1, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {0x0}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:17:21 executing program 1:
clone3(0x0, 0x0)

04:17:21 executing program 4:
r0 = gettid()
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r1=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, 0x0, r0, r0], 0x4}, 0x58)
process_vm_writev(r1, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {0x0}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:17:21 executing program 6:
clone3(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, {0x32}, 0x0, 0x0, 0x0, 0x0}, 0x58)

04:17:21 executing program 3:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0], 0x4}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:17:21 executing program 2:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[r0, 0x0, r0], 0x3}, 0x58)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000b40)=""/182, 0xb6}, {0x0}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x3, 0x0, 0x0, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:17:21 executing program 7:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0], 0x4}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40), 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:17:21 executing program 0:
gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}], 0x4, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}], 0x4, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r1, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r1}, 0x9, 0x0, 0x1, {0x0, 0x0, r1}}, 0x3f)
ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:17:21 executing program 5:
clone3(0x0, 0x0)

04:17:21 executing program 1:
clone3(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

04:17:21 executing program 5:
gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}], 0x4, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}], 0x4, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r1, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r1}, 0x9, 0x0, 0x1, {0x0, 0x0, r1}}, 0x3f)
ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:17:21 executing program 0:
gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}], 0x4, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}], 0x4, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r1, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r1}, 0x9, 0x0, 0x1, {0x0, 0x0, r1}}, 0x3f)
ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:17:21 executing program 6:
clone3(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, {0x32}, 0x0, 0x0, 0x0, 0x0}, 0x58)

04:17:21 executing program 3:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0], 0x4}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)

04:17:29 executing program 1:
r0 = gettid()
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r1=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, 0x0, r0, r0], 0x4}, 0x58)
process_vm_writev(r1, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {0x0}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:17:29 executing program 3:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0], 0x4}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)

04:17:29 executing program 2:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[r0, 0x0, r0], 0x3}, 0x58)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000b40)=""/182, 0xb6}, {0x0}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x3, &(0x7f0000001dc0), 0x0, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:17:29 executing program 5:
clone3(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, {0x32}, 0x0, 0x0, 0x0, 0x0}, 0x58)

04:17:29 executing program 7:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0], 0x4}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40), 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:17:29 executing program 0:
gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}], 0x4, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {0x0}], 0x5, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r1, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r1}, 0x9, 0x0, 0x1, {0x0, 0x0, r1}}, 0x3f)
ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:17:29 executing program 6:
clone3(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, {0x32}, 0x0, 0x0, 0x0, 0x0}, 0x58)

04:17:29 executing program 4:
r0 = gettid()
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r1=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, 0x0, r0, r0], 0x4}, 0x58)
process_vm_writev(r1, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {0x0}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:17:29 executing program 2:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[r0, 0x0, r0], 0x3}, 0x58)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000b40)=""/182, 0xb6}, {0x0}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x3, &(0x7f0000001dc0), 0x0, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:17:29 executing program 0:
gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}], 0x4, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {0x0}], 0x5, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r1, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r1}, 0x9, 0x0, 0x1, {0x0, 0x0, r1}}, 0x3f)
ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:17:29 executing program 1:
r0 = gettid()
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r1=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, 0x0, r0, r0], 0x4}, 0x58)
process_vm_writev(r1, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {0x0}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:17:29 executing program 3:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0], 0x4}, 0x58)

04:17:29 executing program 6:
clone3(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

04:17:29 executing program 5:
clone3(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, {0x32}, 0x0, 0x0, 0x0, 0x0}, 0x58)

04:17:42 executing program 0:
gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}], 0x4, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {0x0}], 0x5, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r1, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r1}, 0x9, 0x0, 0x1, {0x0, 0x0, r1}}, 0x3f)
ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:17:42 executing program 4:
r0 = gettid()
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r1=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, 0x0, r0, r0], 0x4}, 0x58)
process_vm_writev(r1, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x7, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:17:42 executing program 7:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0], 0x4}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40), 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:17:42 executing program 3:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0], 0x4}, 0x58)

04:17:42 executing program 2:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[r0, 0x0, r0], 0x3}, 0x58)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000b40)=""/182, 0xb6}, {0x0}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x3, &(0x7f0000001dc0), 0x0, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:17:42 executing program 1:
r0 = gettid()
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r1=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, 0x0, r0, r0], 0x4}, 0x58)
process_vm_writev(r1, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {0x0}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:17:42 executing program 6:
clone3(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

04:17:42 executing program 5:
clone3(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, {0x32}, 0x0, 0x0, 0x0, 0x0}, 0x58)

04:17:42 executing program 5:
clone3(0x0, 0x0)

04:17:42 executing program 4:
r0 = gettid()
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r1=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, 0x0, r0, r0], 0x4}, 0x58)
process_vm_writev(r1, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x7, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:17:42 executing program 7:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0], 0x4}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:17:42 executing program 3:
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58)

04:17:42 executing program 0:
gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}], 0x4, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {0x0}], 0x4, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r1, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r1}, 0x9, 0x0, 0x1, {0x0, 0x0, r1}}, 0x3f)
ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:17:42 executing program 6:
clone3(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

04:17:42 executing program 5:
clone3(0x0, 0x0)

04:17:42 executing program 1:
r0 = gettid()
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r1=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, 0x0, r0, r0], 0x4}, 0x58)
process_vm_writev(r1, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {0x0}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)

04:17:42 executing program 2:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[r0, 0x0, r0], 0x3}, 0x58)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000b40)=""/182, 0xb6}, {0x0}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x3, &(0x7f0000001dc0), 0x0, 0x0)
openat$zero(0xffffffffffffff9c, 0x0, 0x82000, 0x0)

04:17:50 executing program 5:
clone3(0x0, 0x0)

04:17:50 executing program 2:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[r0, 0x0, r0], 0x3}, 0x58)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000b40)=""/182, 0xb6}, {0x0}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x3, &(0x7f0000001dc0), 0x0, 0x0)
openat$zero(0xffffffffffffff9c, 0x0, 0x82000, 0x0)

04:17:50 executing program 0:
gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}], 0x4, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {0x0}], 0x4, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r1, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r1}, 0x9, 0x0, 0x1, {0x0, 0x0, r1}}, 0x3f)
ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:17:50 executing program 7:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0], 0x4}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:17:50 executing program 1:
r0 = gettid()
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r1=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, 0x0, r0, r0], 0x4}, 0x58)
process_vm_writev(r1, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {0x0}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)

04:17:50 executing program 6:
clone3(0x0, 0x0)

04:17:50 executing program 4:
r0 = gettid()
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r1=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, 0x0, r0, r0], 0x4}, 0x58)
process_vm_writev(r1, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x7, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:17:50 executing program 3:
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58)

04:17:50 executing program 6:
clone3(0x0, 0x0)

04:17:50 executing program 5:
clone3(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

04:17:50 executing program 0:
gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}], 0x4, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {0x0}], 0x4, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r1, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r1}, 0x9, 0x0, 0x1, {0x0, 0x0, r1}}, 0x3f)
ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:17:59 executing program 6:
clone3(0x0, 0x0)

04:17:59 executing program 0:
gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}], 0x4, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {0x0}, {0x0}], 0x5, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r1, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r1}, 0x9, 0x0, 0x1, {0x0, 0x0, r1}}, 0x3f)
ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:17:59 executing program 7:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0], 0x4}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:17:59 executing program 4:
r0 = gettid()
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r1=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, 0x0, r0, r0], 0x4}, 0x58)
process_vm_writev(r1, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {0x0}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:17:59 executing program 1:
r0 = gettid()
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, 0x0, r0, r0], 0x4}, 0x58)

04:17:59 executing program 2:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[r0, 0x0, r0], 0x3}, 0x58)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000b40)=""/182, 0xb6}, {0x0}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x3, &(0x7f0000001dc0), 0x0, 0x0)
openat$zero(0xffffffffffffff9c, 0x0, 0x82000, 0x0)

04:17:59 executing program 3:
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58)

04:17:59 executing program 5:
clone3(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

04:17:59 executing program 6:
clone3(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

04:17:59 executing program 4:
r0 = gettid()
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r1=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, 0x0, r0, r0], 0x4}, 0x58)
process_vm_writev(r1, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {0x0}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:17:59 executing program 1:
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58)

04:17:59 executing program 5:
clone3(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

04:17:59 executing program 6:
clone3(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

04:17:59 executing program 3:
clone3(0x0, 0x0)

04:17:59 executing program 0:
gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}], 0x4, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {0x0}, {0x0}], 0x5, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r1, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r1}, 0x9, 0x0, 0x1, {0x0, 0x0, r1}}, 0x3f)
ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:17:59 executing program 2:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[r0, 0x0, r0], 0x3}, 0x58)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000b40)=""/182, 0xb6}, {0x0}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x3, &(0x7f0000001dc0), 0x0, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x0, 0x0)

04:17:59 executing program 7:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0], 0x4}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={0x0}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:17:59 executing program 4:
r0 = gettid()
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r1=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, 0x0, r0, r0], 0x4}, 0x58)
process_vm_writev(r1, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {0x0}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:17:59 executing program 1:
clone3(0x0, 0x0)

04:17:59 executing program 1:
clone3(0x0, 0x0)

04:17:59 executing program 6:
clone3(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

04:18:07 executing program 1:
clone3(0x0, 0x0)

04:18:07 executing program 3:
clone3(0x0, 0x0)

04:18:07 executing program 0:
gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}], 0x4, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {0x0}, {0x0}], 0x5, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r1, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r1}, 0x9, 0x0, 0x1, {0x0, 0x0, r1}}, 0x3f)
ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:18:07 executing program 2:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[r0, 0x0, r0], 0x3}, 0x58)
process_vm_writev(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000b40)=""/182, 0xb6}, {0x0}, {&(0x7f0000001c00)=""/166, 0xa6}], 0x3, &(0x7f0000001dc0), 0x0, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x0, 0x0)

04:18:07 executing program 7:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0], 0x4}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={0x0}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:18:07 executing program 6:
clone3(0x0, 0x0)

04:18:07 executing program 4:
r0 = gettid()
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r1=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, 0x0, r0, r0], 0x4}, 0x58)
process_vm_writev(r1, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x7, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:18:07 executing program 5:
gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}], 0x4, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {0x0}], 0x4, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r1, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r1}, 0x9, 0x0, 0x1, {0x0, 0x0, r1}}, 0x3f)
ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:18:07 executing program 6:
clone3(0x0, 0x0)

04:18:07 executing program 1:
clone3(&(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000080), {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58)

04:18:07 executing program 3:
clone3(0x0, 0x0)

04:18:07 executing program 5:
gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}], 0x4, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {0x0}], 0x4, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r1, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r1}, 0x9, 0x0, 0x1, {0x0, 0x0, r1}}, 0x3f)
ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:18:08 executing program 1:
clone3(&(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000080), {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58)

04:18:16 executing program 1:
clone3(&(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000080), {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58)

04:18:16 executing program 6:
clone3(0x0, 0x0)

04:18:16 executing program 0:
gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}], 0x4, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f00000008c0)=""/130, 0x82}, {0x0}], 0x4, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r1, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r1}, 0x9, 0x0, 0x1, {0x0, 0x0, r1}}, 0x3f)
ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:18:16 executing program 3:
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), &(0x7f0000000040), 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58)

04:18:16 executing program 7:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0], 0x4}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={0x0}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:18:16 executing program 5:
gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}], 0x4, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {0x0}], 0x4, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r1, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r1}, 0x9, 0x0, 0x1, {0x0, 0x0, r1}}, 0x3f)
ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:18:16 executing program 4:
r0 = gettid()
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r1=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, 0x0, r0, r0], 0x4}, 0x58)
process_vm_writev(r1, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x7, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:18:16 executing program 2:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0], 0x4}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={0x0}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:18:16 executing program 6:
clone3(&(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000080), {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58)

04:18:16 executing program 4:
r0 = gettid()
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r1=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, 0x0, r0, r0], 0x4}, 0x58)
process_vm_writev(r1, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x7, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:18:16 executing program 5:
gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}], 0x4, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {0x0}], 0x4, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r1, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r1}, 0x9, 0x0, 0x1, {0x0, 0x0, r1}}, 0x3f)
ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f00000026c0))

04:18:16 executing program 7:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0], 0x4}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:18:16 executing program 3:
clone3(&(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58)

04:18:16 executing program 4:
r0 = gettid()
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r1=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, 0x0, r0, r0], 0x4}, 0x58)
process_vm_writev(r1, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {0x0}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:18:16 executing program 6:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0], 0x4}, 0x58)

04:18:16 executing program 0:
gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}], 0x4, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f00000008c0)=""/130, 0x82}, {0x0}], 0x4, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r1, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r1}, 0x9, 0x0, 0x1, {0x0, 0x0, r1}}, 0x3f)
ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:18:16 executing program 1:
clone3(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58)

04:18:25 executing program 1:
clone3(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58)

04:18:25 executing program 5:
gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}], 0x4, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {0x0}], 0x4, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r1, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r1}, 0x9, 0x0, 0x1, {0x0, 0x0, r1}}, 0x3f)

04:18:25 executing program 7:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0], 0x4}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:18:25 executing program 2:
clone3(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, {0x32}, 0x0, 0x0, 0x0, 0x0}, 0x58)

04:18:25 executing program 4:
r0 = gettid()
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r1=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, 0x0, r0, r0], 0x4}, 0x58)
process_vm_writev(r1, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {0x0}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:18:25 executing program 0:
gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}], 0x4, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {0x0}, {0x0}], 0x4, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r1, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r1}, 0x9, 0x0, 0x1, {0x0, 0x0, r1}}, 0x3f)
ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:18:25 executing program 6:
gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}], 0x4, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f00000008c0)=""/130, 0x82}, {0x0}], 0x4, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r1, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r1}, 0x9, 0x0, 0x1, {0x0, 0x0, r1}}, 0x3f)
ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:18:25 executing program 3:
clone3(&(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58)

04:18:25 executing program 7:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0], 0x4}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:18:25 executing program 5:
gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}], 0x4, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {0x0}], 0x4, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r1}, 0x9, 0x0, 0x1, {0x0, 0x0, r1}}, 0x3f)

04:18:25 executing program 1:
clone3(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58)

04:18:25 executing program 0:
gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}], 0x4, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {0x0}, {0x0}], 0x4, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r1, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r1}, 0x9, 0x0, 0x1, {0x0, 0x0, r1}}, 0x3f)
ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:18:25 executing program 3:
clone3(&(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58)

04:18:25 executing program 2:
clone3(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, {0x32}, 0x0, 0x0, 0x0, 0x0}, 0x58)

04:18:25 executing program 7:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0], 0x4}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x0, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:18:25 executing program 4:
r0 = gettid()
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r1=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, 0x0, r0, r0], 0x4}, 0x58)
process_vm_writev(r1, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {0x0}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:18:25 executing program 5:
gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}], 0x4, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {0x0}], 0x4, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {}, 0x9, 0x0, 0x1}, 0x3f)

04:18:26 executing program 6:
gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}], 0x4, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}], 0x4, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r1, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r1}, 0x9, 0x0, 0x1, {0x0, 0x0, r1}}, 0x3f)
ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:18:26 executing program 2:
gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}], 0x4, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}], 0x4, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r1, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r1}, 0x9, 0x0, 0x1, {0x0, 0x0, r1}}, 0x3f)
ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:18:26 executing program 7:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0], 0x4}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x0, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:18:34 executing program 0:
gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}], 0x4, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {0x0}, {0x0}], 0x4, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r1, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r1}, 0x9, 0x0, 0x1, {0x0, 0x0, r1}}, 0x3f)
ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:18:34 executing program 1:
clone3(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58)

04:18:34 executing program 2:
r0 = gettid()
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r1=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, 0x0, r0, r0], 0x4}, 0x58)
process_vm_writev(r1, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {0x0}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:18:34 executing program 6:
gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}], 0x4, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}], 0x4, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r1, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r1}, 0x9, 0x0, 0x1, {0x0, 0x0, r1}}, 0x3f)
ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:18:34 executing program 3:
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), 0x0, 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58)

04:18:34 executing program 7:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0], 0x4}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x0, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:18:34 executing program 4:
r0 = gettid()
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r1=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, 0x0, r0, r0], 0x4}, 0x58)
process_vm_writev(r1, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x7, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:18:34 executing program 5:
gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}], 0x4, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {0x0}], 0x4, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {}, 0x9, 0x0, 0x1}, 0x3f)

04:18:34 executing program 1:
clone3(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

04:18:34 executing program 2:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0], 0x4}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x0, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:18:34 executing program 6:
gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}], 0x4, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}], 0x4, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r1, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r1}, 0x9, 0x0, 0x1, {0x0, 0x0, r1}}, 0x3f)
ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:18:34 executing program 7:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0], 0x4}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x0, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:18:34 executing program 1:
gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}], 0x4, 0x0, 0x0, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r1, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r1}, 0x9, 0x0, 0x1, {0x0, 0x0, r1}}, 0x3f)
ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:18:34 executing program 3:
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58)

04:18:34 executing program 2:
clone3(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[0x0], 0x1}, 0x58)

04:18:34 executing program 0:
gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}], 0x4, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f00000008c0)=""/130, 0x82}, {0x0}], 0x3, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r1, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r1}, 0x9, 0x0, 0x1, {0x0, 0x0, r1}}, 0x3f)
ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:18:34 executing program 5:
gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}], 0x4, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {0x0}], 0x4, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {}, 0x9, 0x0, 0x1}, 0x3f)

04:18:34 executing program 6:
gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}], 0x4, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}], 0x4, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r1, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r1}, 0x9, 0x0, 0x1, {0x0, 0x0, r1}}, 0x3f)
ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f00000026c0))

04:18:43 executing program 2:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0], 0x4}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:18:43 executing program 4:
r0 = gettid()
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r1=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, 0x0, r0, r0], 0x4}, 0x58)
process_vm_writev(r1, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x7, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:18:43 executing program 3:
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58)

04:18:43 executing program 5:
gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {}, 0x9, 0x0, 0x1}, 0x3f)

04:18:43 executing program 6:
gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}], 0x4, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}], 0x4, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r1, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r1}, 0x9, 0x0, 0x1, {0x0, 0x0, r1}}, 0x3f)

04:18:43 executing program 0:
gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}], 0x4, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f00000008c0)=""/130, 0x82}, {0x0}], 0x3, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r1, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r1}, 0x9, 0x0, 0x1, {0x0, 0x0, r1}}, 0x3f)
ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:18:43 executing program 1:
clone3(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[0x0], 0x1}, 0x58)

04:18:43 executing program 7:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0], 0x4}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x0, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:18:43 executing program 4:
r0 = gettid()
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r1=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, 0x0, r0, r0], 0x4}, 0x58)
process_vm_writev(r1, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x7, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:18:51 executing program 4:
r0 = gettid()
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r1=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, 0x0, r0, r0], 0x4}, 0x58)
process_vm_writev(r1, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {0x0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:18:51 executing program 0:
gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}], 0x4, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {0x0}, {0x0}], 0x3, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r1, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r1}, 0x9, 0x0, 0x1, {0x0, 0x0, r1}}, 0x3f)
ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:18:51 executing program 6:
gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}], 0x4, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}], 0x4, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r1}, 0x9, 0x0, 0x1, {0x0, 0x0, r1}}, 0x3f)

04:18:51 executing program 3:
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58)

04:18:51 executing program 7:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0], 0x4}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x0, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:18:51 executing program 2:
r0 = gettid()
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r1=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, 0x0, r0, r0], 0x4}, 0x58)
process_vm_writev(r1, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}], 0x7, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:18:51 executing program 5:
gettid()
syz_io_uring_submit(0x0, 0x0, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {}, 0x9, 0x0, 0x1}, 0x3f)

04:18:51 executing program 1:
clone3(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[0x0], 0x1}, 0x58)

04:18:51 executing program 5:
syz_io_uring_submit(0x0, 0x0, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {}, 0x9, 0x0, 0x1}, 0x3f)

04:18:51 executing program 4:
r0 = gettid()
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r1=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, 0x0, r0, r0], 0x4}, 0x58)
process_vm_writev(r1, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {0x0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:18:51 executing program 6:
gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}], 0x4, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}], 0x4, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r1}, 0x9, 0x0, 0x1, {0x0, 0x0, r1}}, 0x3f)

04:18:51 executing program 2:
gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}], 0x4, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r1, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r1}, 0x9, 0x0, 0x1, {0x0, 0x0, r1}}, 0x3f)
ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:18:51 executing program 3:
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58)

04:18:51 executing program 5:
syz_io_uring_submit(0x0, 0x0, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {}, 0x9, 0x0, 0x1}, 0x3f)

04:18:51 executing program 7:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0], 0x4}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x5c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:18:51 executing program 0:
gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}], 0x4, &(0x7f00000009c0)=[{0x0}, {0x0}], 0x2, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r1, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r1}, 0x9, 0x0, 0x1, {0x0, 0x0, r1}}, 0x3f)
ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:18:51 executing program 4:
r0 = gettid()
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r1=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, 0x0, r0, r0], 0x4}, 0x58)
process_vm_writev(r1, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000440)=""/80, 0x50}, {0x0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:18:51 executing program 1:
clone3(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

04:18:51 executing program 5:
syz_io_uring_submit(0x0, 0x0, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {}, 0x9, 0x0, 0x1}, 0x3f)

04:18:51 executing program 6:
gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}], 0x4, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}], 0x4, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {}, 0x9, 0x0, 0x1}, 0x3f)

04:18:51 executing program 0:
gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}], 0x4, &(0x7f00000009c0)=[{0x0}, {0x0}], 0x2, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r1, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r1}, 0x9, 0x0, 0x1, {0x0, 0x0, r1}}, 0x3f)
ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:18:51 executing program 3:
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

04:18:51 executing program 1:
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, 0x0, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
socketpair(0x0, 0xa, 0x0, &(0x7f00000024c0))
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:18:51 executing program 7:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0], 0x4}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x5c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:18:51 executing program 5:
gettid()
syz_io_uring_submit(0x0, 0x0, 0x0, 0x3f)

[  806.541169] 
[  806.541360] =====================================
[  806.541756] WARNING: bad unlock balance detected!
[  806.542157] 6.19.0-rc5-next-20260115 #1 Not tainted
[  806.542563] -------------------------------------
[  806.542951] syz-executor.7/8142 is trying to release lock (rcu_read_lock) at:
[  806.543536] [<ffffffff81c1dee5>] __wait_on_freeing_inode+0x105/0x350
[  806.544072] but there are no more locks to release!
[  806.544480] 
[  806.544480] other info that might help us debug this:
[  806.545012] 4 locks held by syz-executor.7/8142:
[  806.545396]  #0: ffff88800a7c63f8 (sb_writers#3){.+.+}-{0:0}, at: filename_create+0xf7/0x400
[  806.546118]  #1: ffff888030634698 (&type->i_mutex_dir_key#3/1){+.+.}-{4:4}, at: filename_create+0x1b1/0x400
[  806.546939]  #2: ffff88800fb42950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xe32/0x12d0
[  806.547676]  #3: ffffffff85c16898 (inode_hash_lock){+.+.}-{3:3}, at: insert_inode_locked+0xf9/0x890
[  806.552119] 
[  806.552119] stack backtrace:
[  806.552499] CPU: 0 UID: 0 PID: 8142 Comm: syz-executor.7 Not tainted 6.19.0-rc5-next-20260115 #1 PREEMPT(lazy) 
[  806.552514] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  806.552521] Call Trace:
[  806.552526]  <TASK>
[  806.552530]  dump_stack_lvl+0xca/0x120
[  806.552562]  ? __wait_on_freeing_inode+0x105/0x350
[  806.552576]  print_unlock_imbalance_bug+0x118/0x130
[  806.552592]  ? __wait_on_freeing_inode+0x105/0x350
[  806.552607]  lock_release+0x1ee/0x270
[  806.552622]  __wait_on_freeing_inode+0x10a/0x350
[  806.552637]  ? __pfx___wait_on_freeing_inode+0x10/0x10
[  806.552653]  ? __pfx_var_wake_function+0x10/0x10
[  806.552671]  ? lock_is_held_type+0x9e/0x120
[  806.552684]  insert_inode_locked+0x25f/0x890
[  806.552701]  __ext4_new_inode+0x223d/0x4cd0
[  806.552719]  ? __pfx___ext4_new_inode+0x10/0x10
[  806.552734]  ? __pfx___dquot_initialize+0x10/0x10
[  806.552753]  ? __pfx_avc_has_perm+0x10/0x10
[  806.552770]  ext4_symlink+0x623/0xb40
[  806.552789]  ? __pfx_ext4_symlink+0x10/0x10
[  806.552805]  ? security_inode_permission+0x72/0xe0
[  806.552819]  vfs_symlink+0x44b/0x840
[  806.552836]  filename_symlinkat+0x158/0x440
[  806.552850]  ? __pfx_filename_symlinkat+0x10/0x10
[  806.552864]  ? strncpy_from_user+0x21b/0x2f0
[  806.552882]  __x64_sys_symlink+0x82/0x110
[  806.552896]  do_syscall_64+0xbf/0x420
[  806.552909]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  806.552922] RIP: 0033:0x7f3e89e6e427
[  806.552932] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  806.552943] RSP: 002b:00007fff478f78b8 EFLAGS: 00000206 ORIG_RAX: 0000000000000058
[  806.552955] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3e89e6e427
[  806.552962] RDX: 00007fff478f7993 RSI: 00007f3e89ec902f RDI: 00007fff478f7980
[  806.552970] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007fff478f7750
[  806.552977] R10: 00007fff478f7607 R11: 0000000000000206 R12: 0000000000000001
[  806.552985] R13: 0000000000000000 R14: 0000000000000001 R15: 00007fff478f7980
[  806.552995]  </TASK>
[  806.568556] ------------[ cut here ]------------
[  806.568937] WARNING: kernel/rcu/tree_plugin.h:443 at __rcu_read_unlock+0x25f/0x5c0, CPU#0: syz-executor.7/8142
[  806.569848] Modules linked in:
[  806.570160] CPU: 0 UID: 0 PID: 8142 Comm: syz-executor.7 Not tainted 6.19.0-rc5-next-20260115 #1 PREEMPT(lazy) 
[  806.570957] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  806.571655] RIP: 0010:__rcu_read_unlock+0x25f/0x5c0
[  806.572224] Code: f2 02 00 00 c7 43 58 01 00 00 00 bf 09 00 00 00 e8 d6 b7 de ff 4d 85 f6 0f 84 73 fe ff ff e8 38 8a 20 00 fb e9 68 fe ff ff 90 <0f> 0b 90 5b 5d 41 5c 41 5d 41 5e e9 81 4d 74 03 e8 2c 5d 56 00 e9
[  806.573710] RSP: 0018:ffff88803f4b79a0 EFLAGS: 00010286
[  806.574178] RAX: 00000000ffffffff RBX: ffff88803ef5d280 RCX: ffffffff815660f7
[  806.574746] RDX: 0000000000000000 RSI: ffffffff81566100 RDI: ffff88803ef5d67c
[  806.575355] RBP: ffff88803ef5d280 R08: 0000000000000000 R09: fffffbfff0ba7040
[  806.575919] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88803ef5d280
[  806.576537] R13: 0000000000000001 R14: ffffffff85c0e730 R15: ffff888030634f58
[  806.577155] FS:  0000555574eef400(0000) GS:ffff8880e5342000(0000) knlGS:0000000000000000
[  806.577793] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  806.578299] CR2: 00007f3e89eee547 CR3: 000000004144e000 CR4: 0000000000350ef0
[  806.578868] Call Trace:
[  806.579155]  <TASK>
[  806.579853]  __wait_on_freeing_inode+0x10f/0x350
[  806.580696]  ? __pfx___wait_on_freeing_inode+0x10/0x10
[  806.582026]  ? __pfx_var_wake_function+0x10/0x10
[  806.585663]  ? lock_is_held_type+0x9e/0x120
[  806.588294]  insert_inode_locked+0x25f/0x890
[  806.589949]  __ext4_new_inode+0x223d/0x4cd0
[  806.592443]  ? __pfx___ext4_new_inode+0x10/0x10
[  806.593679]  ? __pfx___dquot_initialize+0x10/0x10
[  806.594454]  ? __pfx_avc_has_perm+0x10/0x10
[  806.596216]  ext4_symlink+0x623/0xb40
[  806.598447]  ? __pfx_ext4_symlink+0x10/0x10
[  806.599450]  ? security_inode_permission+0x72/0xe0
[  806.601094]  vfs_symlink+0x44b/0x840
[  806.602356]  filename_symlinkat+0x158/0x440
[  806.603473]  ? __pfx_filename_symlinkat+0x10/0x10
[  806.604245]  ? strncpy_from_user+0x21b/0x2f0
[  806.606153]  __x64_sys_symlink+0x82/0x110
[  806.606849]  do_syscall_64+0xbf/0x420
[  806.607681]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  806.608228] RIP: 0033:0x7f3e89e6e427
[  806.608603] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  806.610085] RSP: 002b:00007fff478f78b8 EFLAGS: 00000206 ORIG_RAX: 0000000000000058
[  806.610679] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3e89e6e427
[  806.611276] RDX: 00007fff478f7993 RSI: 00007f3e89ec902f RDI: 00007fff478f7980
[  806.611836] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007fff478f7750
[  806.612432] R10: 00007fff478f7607 R11: 0000000000000206 R12: 0000000000000001
[  806.612998] R13: 0000000000000000 R14: 0000000000000001 R15: 00007fff478f7980
[  806.615612]  </TASK>
[  806.615804] irq event stamp: 389
[  806.616110] hardirqs last  enabled at (389): [<ffffffff84d19a7c>] _raw_spin_unlock_irqrestore+0x2c/0x50
[  806.616916] hardirqs last disabled at (388): [<ffffffff84d197d3>] _raw_spin_lock_irqsave+0x53/0x60
[  806.617720] softirqs last  enabled at (384): [<ffffffff812cda79>] kernel_fpu_end+0x59/0x70
[  806.618484] softirqs last disabled at (382): [<ffffffff812ce94b>] kernel_fpu_begin_mask+0x1bb/0x300
[  806.619300] ---[ end trace 0000000000000000 ]---
04:18:59 executing program 6:
gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}], 0x4, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}], 0x4, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {}, 0x9, 0x0, 0x1}, 0x3f)

04:18:59 executing program 1:
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

04:18:59 executing program 3:
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

04:18:59 executing program 0:
gettid()
clone3(&(0x7f0000000240)={0x20020000, 0x0, 0x0, 0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[0x0], 0x1}, 0x58)
process_vm_writev(0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}], 0x4, &(0x7f00000009c0)=[{0x0}, {0x0}], 0x2, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x204900, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12cade7112a214bc, r1, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f0000001fc0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0xff, {0x0, r1}, 0x9, 0x0, 0x1, {0x0, 0x0, r1}}, 0x3f)
ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f00000026c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)

04:18:59 executing program 5:
gettid()
syz_io_uring_submit(0x0, 0x0, 0x0, 0x3f)

04:18:59 executing program 7:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0], 0x4}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x5c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:18:59 executing program 4:
r0 = gettid()
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r1=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, 0x0, r0, r0], 0x4}, 0x58)
process_vm_writev(r1, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x7, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)

04:18:59 executing program 2:
r0 = gettid()
clone3(&(0x7f0000000240)={0x20020000, &(0x7f0000000000), &(0x7f0000000040), 0x0, {}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, r0, r0, r0], 0x4}, 0x58)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x5c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20008811}, 0x8080)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000026c0))

04:18:59 executing program 5:
gettid()
syz_io_uring_submit(0x0, 0x0, 0x0, 0x3f)

04:18:59 executing program 4:
r0 = gettid()
clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r1=>0x0, {0x32}, &(0x7f00000000c0)=""/151, 0x97, &(0x7f0000000180)=""/66, &(0x7f0000000200)=[r0, 0x0, r0, r0], 0x4}, 0x58)
process_vm_writev(r1, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x7, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/67, 0x43}, {&(0x7f0000000880)=""/45, 0x2d}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/6, 0x6}], 0x5, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000001e00), 0x82000, 0x0)


VM DIAGNOSIS:
04:18:51  Registers:
info registers vcpu 0
RAX=0000000000000065 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff82975135 RDI=ffffffff889c19e0 RBP=ffffffff889c19a0 RSP=ffff88803f4b7488
R8 =0000000000000000 R9 =ffffed1001683046 R10=0000000000000065 R11=666666203a332320
R12=0000000000000065 R13=0000000000000010 R14=ffffffff889c19a0 R15=ffffffff82975120
RIP=ffffffff8297518d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000555574eef400 00000000 00000000
GS =0000 ffff8880e5342000 00000000 00000000
LDT=0000 fffffe5300000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f3e89eee547 CR3=000000004144e000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000a60ce07b00000000cec3662e XMM01=000000000000000003515b82db34ca11
XMM02=0000000000000000333bebdfd0a6a21d XMM03=00000000000000000000000000000000
XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000001 RBX=0000000000000001 RCX=ffffffff84d1a2ce RDX=fffffbfff0b82d11
RSI=0000000000000004 RDI=ffffffff85c16880 RBP=ffffffff85c16880 RSP=ffff88803eb57950
R8 =0000000000000000 R9 =fffffbfff0b82d10 R10=ffffffff85c16883 R11=0000000000000000
R12=1ffff11007d6af2b R13=0000000000000003 R14=fffffbfff0b82d10 R15=ffff88803eb57988
RIP=ffffffff84d1a460 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00005555894e0400 00000000 00000000
GS =0000 ffff8880e5442000 00000000 00000000
LDT=0000 fffffe1600000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f47e0e9d541 CR3=000000003f04e000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000a60ce07b00000000cec3662e XMM01=000000000000000003515b82db34ca11
XMM02=0000000000000000333bebdfd0a6a21d XMM03=00000000000000000000000000000000
XMM04=000000ff0000000000000000000000ff XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000