Warning: Permanently added '[localhost]:4508' (ECDSA) to the list of known hosts. 2026/01/17 13:14:41 fuzzer started 2026/01/17 13:14:41 dialing manager at localhost:42157 syzkaller login: [ 52.381882] cgroup: Unknown subsys name 'net' [ 52.438400] cgroup: Unknown subsys name 'cpuset' [ 52.453151] cgroup: Unknown subsys name 'rlimit' 2026/01/17 13:14:52 syscalls: 206 2026/01/17 13:14:52 code coverage: enabled 2026/01/17 13:14:52 comparison tracing: enabled 2026/01/17 13:14:52 extra coverage: enabled 2026/01/17 13:14:52 setuid sandbox: enabled 2026/01/17 13:14:52 namespace sandbox: enabled 2026/01/17 13:14:52 Android sandbox: enabled 2026/01/17 13:14:52 fault injection: enabled 2026/01/17 13:14:52 leak checking: enabled 2026/01/17 13:14:52 net packet injection: enabled 2026/01/17 13:14:52 net device setup: enabled 2026/01/17 13:14:52 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2026/01/17 13:14:52 devlink PCI setup: PCI device 0000:00:10.0 is not available 2026/01/17 13:14:52 USB emulation: enabled 2026/01/17 13:14:52 hci packet injection: enabled 2026/01/17 13:14:52 wifi device emulation: enabled 2026/01/17 13:14:52 802.15.4 emulation: enabled 2026/01/17 13:14:52 fetching corpus: 0, signal 0/0 (executing program) 2026/01/17 13:14:53 starting 8 fuzzer processes 13:14:53 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/processor', 0x0, 0x9) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x20008824) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2) r1 = io_uring_setup(0x37c5, &(0x7f0000000140)={0x0, 0x708f, 0x0, 0x1, 0x15}) socketpair(0x27, 0x5, 0xf8, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000200)={'ip6tnl0\x00', 0x0, 0x29, 0x8, 0x0, 0x3, 0x45, @mcast1, @remote, 0x80, 0x80, 0x1f, 0x800}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000400)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r3, 0x4, 0xb4, 0x6, 0x7, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, 0x40, 0x40, 0x3, 0x3ff}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000440)={'syztnl2\x00', r4, 0x4, 0x5f, 0x61, 0x0, 0x70, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x80, 0x8000, 0x81, 0x3ff}}) r5 = shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ff9000/0x4000)=nil) shmctl$SHM_UNLOCK(r5, 0xc) waitid(0x1, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000500)) timer_create(0x2, &(0x7f00000005c0)={0x0, 0x2b, 0x2}, &(0x7f0000000600)=0x0) timer_gettime(r6, &(0x7f0000000640)) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x110, r1, 0x8000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000680)) waitid(0x0, 0x0, &(0x7f00000006c0), 0x1, &(0x7f0000000740)) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/module/snd_pcm', 0x14001, 0xc0) ioctl$EVIOCGKEYCODE_V2(r8, 0x80284504, &(0x7f0000000840)=""/171) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) syz_io_uring_submit(r7, 0x0, &(0x7f0000000a40)=@IORING_OP_STATX={0x15, 0x4, 0x0, r8, &(0x7f0000000900), &(0x7f0000000a00)='./file0\x00', 0x20, 0x2000}, 0x3) 13:14:53 executing program 1: socketpair(0x2, 0x4, 0xfffffe9b, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x40, 0x0, 0x5, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x18}, 0x7800, 0x8000, 0xfffffffa, 0x233a}}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000100)={0x0, @loopback, @loopback}, &(0x7f0000000140)=0xc) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xad) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000200)) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/hci_vhci', 0x30000, 0x8) getsockopt$inet6_tcp_int(r4, 0x6, 0x5, &(0x7f0000000280), &(0x7f00000002c0)=0x4) recvmmsg(r0, &(0x7f0000003ac0)=[{{&(0x7f0000000300)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/238, 0xee}, {&(0x7f0000000480)=""/16, 0x10}, {&(0x7f00000004c0)=""/194, 0xc2}, {&(0x7f00000005c0)=""/206, 0xce}, {&(0x7f00000006c0)=""/52, 0x34}, {&(0x7f0000000700)=""/180, 0xb4}], 0x6, &(0x7f0000000840)=""/48, 0x30}, 0xbe4}, {{&(0x7f0000000880)=@can, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/55, 0x37}, {&(0x7f0000000940)=""/159, 0x9f}, {&(0x7f0000000a00)=""/72, 0x48}, {&(0x7f0000000a80)=""/165, 0xa5}, {&(0x7f0000000b40)=""/214, 0xd6}, {&(0x7f0000000c40)=""/120, 0x78}, {&(0x7f0000000cc0)=""/4096, 0x1000}], 0x7, &(0x7f0000001d40)=""/55, 0x37}}, {{&(0x7f0000001d80)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000001fc0)=[{&(0x7f0000001e00)=""/246, 0xf6}, {&(0x7f0000001f00)=""/142, 0x8e}], 0x2, &(0x7f0000002000)=""/216, 0xd8}, 0x7}, {{0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000002140)=""/221, 0xdd}, 0x3}, {{&(0x7f0000002240)=@tipc=@name, 0x80, &(0x7f0000003500)=[{&(0x7f00000022c0)=""/122, 0x7a}, {&(0x7f0000002340)=""/184, 0xb8}, {&(0x7f0000002400)=""/68, 0x44}, {&(0x7f0000002480)=""/18, 0x12}, {&(0x7f00000024c0)=""/10, 0xa}, {&(0x7f0000002500)=""/4096, 0x1000}], 0x6, &(0x7f0000003580)=""/247, 0xf7}, 0x101}, {{&(0x7f0000003680)=@in={0x2, 0x0, @initdev}, 0x80, &(0x7f00000039c0)=[{&(0x7f0000003700)=""/142, 0x8e}, {&(0x7f00000037c0)=""/55, 0x37}, {&(0x7f0000003800)=""/226, 0xe2}, {&(0x7f0000003900)=""/129, 0x81}], 0x4, &(0x7f0000003a00)=""/175, 0xaf}, 0x9}], 0x6, 0x40000100, 0x0) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000003d40)={&(0x7f0000003c40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000003d00)={&(0x7f0000003c80)={0x5c, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x28}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_DOMAIN={0x9, 0x1, '!$(\xd2\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4014}, 0x20008080) r5 = socket(0x11, 0x3, 0x1) ioctl$sock_SIOCGIFCONF(r5, 0x8912, &(0x7f0000003dc0)=@req={0x28, &(0x7f0000003d80)={'veth0_to_hsr\x00', @ifru_flags}}) socketpair(0x2, 0x3, 0x80, &(0x7f0000003e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000004000)={'ip6tnl0\x00', &(0x7f0000003f80)={'syztnl2\x00', r3, 0x4, 0x0, 0x48, 0x8, 0x6c, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', 0x40, 0x40, 0x8001, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r7, 0x89f4, &(0x7f00000040c0)={'ip6_vti0\x00', &(0x7f0000004040)={'syztnl2\x00', r8, 0x29, 0x8, 0x0, 0x9, 0x64, @mcast1, @mcast2, 0x80, 0x8, 0x2, 0x9}}) r9 = accept(r6, &(0x7f0000004100)=@qipcrtr, &(0x7f0000004180)=0x80) getsockopt$inet6_tcp_buf(r9, 0x6, 0x1f, &(0x7f00000041c0)=""/113, &(0x7f0000004240)=0x71) syz_genetlink_get_family_id$nl80211(&(0x7f0000004280), r9) setsockopt$inet6_tcp_buf(r9, 0x6, 0x1c, &(0x7f00000042c0)="f13752d8c5aaf6511ad2b6c65e384ff767a81b2be50d70c8e190960799cc0afaa6d28ef4d68dd6241cb010aebfb78ed748cb2509b012ae3a6aaaf06a09631e9fb137ea2789b35e0ede25ed4f82fe846c350cdce613e43eab52f36e83dfe4b36c4ce1acbde6ab32a8307d54bd4e8a8bbd85dc32b084275897a7a63c4689f74ceac6d2289a82b4dcfe337a0700425af7c44d4915cd7fe2fa7ad36620760376c2fc4534c7f27228f7d839f7da9d8b76118b1c0413421fcc068ccbe2d9808395f4fcd3afa112c54a7d20ea2f806168c315522ea000af71218ab486a299749d8960b5d45e2b50402ce850a812b4e0dde3fd5e8a1242d066c3bf", 0xf7) 13:14:53 executing program 2: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)="3c83aba66cc4e07e77a76c5edaaaeb2c142196dcb4948d1bea7cc7c56c0522d946cb5ac4231e337744cd43286b5d06c909b77ba0b1dfa735763b470323ffa9785312df86d54ab56c63f169c855da890385e79ba7c12224570381988ffe8d2b65a733b2b77981ee7865d86a0dd49f2d3d71ba26e167eb653682c8fb6d85ea2cee1876e5e45d8d6f35f9920ea42fd04de7fa1e08de2e345b5c79da16e0f38f87b93c79d554bdf32aa1cdf40cebec88412bea62d90d3915360fdeab0e5ac3a9df3b64a91136855c82d51ab174ac5cd6bd6b9d223bcd6f79ffce263b54bd9999c01459a72d54dffa20773c8d28d00c5e0ea136538365", 0xf4}, 0x1, 0x0, 0x0, 0x4000}, 0x20000001) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000180)) sysinfo(&(0x7f00000001c0)=""/142) ioctl$sock_ifreq(r1, 0x8931, &(0x7f0000000280)={'batadv_slave_0\x00', @ifru_addrs=@in={0x2, 0x0, @local}}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/bus/platform', 0x16001, 0x9) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r3, 0x2, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000090) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f00000004c0)={0x14c, r3, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x81, 0x6}, {0xe9, 0x1}, {0x6, 0x5}, {0x2d, 0x6}, {0x81, 0x2}, {0x3f, 0x6}, {0x8, 0x2}, {0x1, 0x7}, {0x48, 0x5}, {0x80, 0x5}, {0xff, 0x6}, {0x2, 0x5}], "c1060bf1205e1788"}}, @NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x5, 0x6}, {0x2, 0x5}, {0x5, 0x7}, {0xff, 0x7}, {0x0, 0x5}, {0x3, 0x2}, {0xfa, 0x2}, {0x1, 0x7}, {0x0, 0x2}, {0x6f}, {}, {0x7, 0x7}, {0x81, 0x7}, {0x6, 0x7}, {0x7, 0x7}, {0x4, 0x5}, {0x1f}, {0x5, 0x4}], "98cb2e5ab9500d0c"}}, @NL80211_ATTR_QOS_MAP={0xe, 0xc7, {[{0x81, 0x6}], "57fcf5f60644f176"}}, @NL80211_ATTR_QOS_MAP={0x34, 0xc7, {[{0x1, 0x7}, {0xff, 0x3}, {0x4, 0x1}, {0x40}, {0x8, 0x6}, {0x6, 0x2}, {0x5b, 0x6}, {0x40, 0x6}, {0x5, 0x2}, {0x2, 0x3}, {0xff, 0x1}, {0x7, 0x5}, {0x81, 0x6}, {0x1}, {0xfa, 0x7}, {0xb2, 0x7}, {0x6, 0x7}, {0x2, 0x5}, {0x7f, 0x4}, {0x9}], "c94f799edde58374"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "71a679bb7dfeab0b"}}, @NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0x3f, 0x3}, {0x15, 0x1}, {0xc0, 0x4}, {0x3}, {0x1, 0x7}, {0x9, 0x7}, {0x6}, {0x4, 0x3}, {0x0, 0x3}, {0x7, 0x2}, {0xd4, 0x7}, {0x1, 0x4}, {0x4}, {0x6, 0x7}], "73aa28212d51194b"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0xff, 0x5}, {0x2, 0x1}, {0x7, 0x5}, {0x2, 0x2}, {0x1, 0x6}, {0x6, 0x5}, {0xa1}, {0x1, 0x1}], "402ab314775a4ac1"}}, @NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0x40, 0x3}, {0x20, 0x7}, {0x9, 0x1}, {0x3, 0x2}, {0x40, 0x6}, {0x2, 0x4}, {0x3a, 0x6}, {0x20, 0x6}, {0x0, 0x4}, {0x7f, 0x7}, {0x1, 0x7}, {0x8, 0x3}, {0x7, 0x4}, {0x3f, 0x1}, {0x3, 0x4}, {0x2}, {0x1f, 0x1}, {0xf8, 0x3}, {0x1, 0x5}], "2f10c13b1320f82b"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0x3, 0x7}, {0x7, 0x4}, {0x4, 0x7}, {0x2, 0x1}, {0x1f, 0x7}, {0xa5, 0x4}, {0x65, 0x4}, {0x9, 0x7}], "be02396e2de23506"}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) ioctl$CDROM_MEDIA_CHANGED(r2, 0x5325, 0x8) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x42000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x24, r3, 0x4, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_STA_TX_POWER={0x6}]}, 0x24}}, 0x4850) ioctl$sock_ifreq(r1, 0xa9, &(0x7f0000000800)={'syzkaller0\x00', @ifru_settings={0x0, 0x0, @te1=&(0x7f00000007c0)={0x9, 0x3, 0x3, 0x48}}}) sysinfo(&(0x7f0000000840)=""/122) syz_genetlink_get_family_id$team(&(0x7f00000008c0), r2) r5 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000900)) sendmsg$802154_raw(r5, &(0x7f0000000a80)={0xfffffffffffffffe, 0x0, &(0x7f0000000a40)={&(0x7f0000000940)="b76454b20b7ab7f1c8f2524461f12070545d1eaac1636e80e8b1fed838f1018c6633b7d8e36172997d2afb57dcab6a5f1cd483e57e6b4697785a368b03b102b25fde82e84038f42064c7cad207a57446f8ed4eb3e6dc4b6760792505f5cc2e345b10dc6d4d6ab4cc364d4cfb1601034f43aa75fd6ac2549b0998f57de30e4c64aaf217669dcb49b67c92f4a65144ff327c13128c159f09d4ca472303d76af4b7fd7c200e74ababf9c8fb3b777ed62c0aec7491bda64fb32af670f2f69d437f8fd16ca9e3290ea83118ee05a7a6e61742eaca354a89760c8be7a15d65c1ce1e91589eac53386e2680992aaa57", 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x4001) accept(r0, &(0x7f0000000ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000b40)=0x80) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000e00)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, r5, 0x0, &(0x7f0000000dc0)={&(0x7f0000000b80)=@nl=@proc, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000c00)=""/219, 0xdb}, {&(0x7f0000000d00)=""/31, 0x1f}], 0x2, &(0x7f0000000d80)=""/60, 0x3c}, 0x0, 0x12100, 0x1, {0x1}}, 0x7) 13:14:53 executing program 6: prctl$PR_SET_IO_FLUSHER(0x39, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) clock_gettime(0x5, &(0x7f0000000000)) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000040)) clock_nanosleep(0x5, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x80, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x5c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xe0}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "60ba389c00a5ea1d6dd65713749c7a02"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x3f}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x49}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3d3e46fd6bbaaa3c6a156013bb6a5a36"}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x10) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) setfsgid(0xee00) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, r1, 0x12, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xffff, 0x36}}}}, [@NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x9}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x9}, @NL80211_ATTR_P2P_CTWINDOW={0x5}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0xd800}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x20}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) rt_sigtimedwait(&(0x7f0000000400)={[0x7fff]}, 0x0, &(0x7f0000000440)={0x77359400}, 0x8) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x1) sched_rr_get_interval(0x0, &(0x7f0000000480)) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}}, 0x404) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) clock_nanosleep(0x0, 0x1, &(0x7f00000005c0), &(0x7f0000000600)) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x1) [ 63.019749] audit: type=1400 audit(1768655693.578:7): avc: denied { execmem } for pid=273 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 13:14:53 executing program 7: ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000001040)={&(0x7f0000000000), &(0x7f0000000040)=""/4096, 0x1000}) tkill(0x0, 0x13) waitid(0x1, 0xffffffffffffffff, &(0x7f0000001080), 0x1, &(0x7f0000001100)) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001280)={&(0x7f0000001200)={0x60, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x400, 0x60}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xe}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xb}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x9}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xf}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x40004}, 0x10) r0 = syz_open_dev$usbmon(&(0x7f0000001300), 0x1, 0x52401) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000002380)={&(0x7f0000001340), &(0x7f0000001380)=""/4096, 0x1000}) r1 = gettid() r2 = getpgrp(r1) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000002480)={&(0x7f00000023c0), &(0x7f0000002400)=""/97, 0x61}) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f0000002600)={&(0x7f00000024c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000002500)=""/226, 0xe2}) r3 = accept(0xffffffffffffffff, 0x0, &(0x7f0000002640)) clock_gettime(0x0, &(0x7f0000006e00)={0x0, 0x0}) recvmmsg(r3, &(0x7f0000006c80)=[{{&(0x7f0000002680)=@l2, 0x80, &(0x7f0000002800)=[{&(0x7f0000002700)=""/218, 0xda}], 0x1, &(0x7f0000002840)=""/31, 0x1f}, 0x40}, {{&(0x7f0000002880)=@generic, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002900)=""/4096, 0x1000}, {&(0x7f0000003900)=""/16, 0x10}, {&(0x7f0000003940)=""/205, 0xcd}, {&(0x7f0000003a40)=""/157, 0x9d}, {&(0x7f0000003b00)=""/140, 0x8c}, {&(0x7f0000003bc0)=""/192, 0xc0}, {&(0x7f0000003c80)=""/4096, 0x1000}], 0x7, &(0x7f0000004d00)=""/148, 0x94}, 0xd5}, {{&(0x7f0000004dc0)=@can, 0x80, &(0x7f0000004f80)=[{&(0x7f0000004e40)=""/17, 0x11}, {&(0x7f0000004e80)=""/241, 0xf1}], 0x2}, 0xa0}, {{&(0x7f0000004fc0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000005440)=[{&(0x7f0000005040)=""/229, 0xe5}, {&(0x7f0000005140)=""/140, 0x8c}, {&(0x7f0000005200)=""/246, 0xf6}, {&(0x7f0000005300)=""/223, 0xdf}, {&(0x7f0000005400)=""/41, 0x29}], 0x5, &(0x7f00000054c0)=""/44, 0x2c}, 0x101}, {{&(0x7f0000005500)=@qipcrtr, 0x80, &(0x7f0000006a80)=[{&(0x7f0000005580)=""/4096, 0x1000}, {&(0x7f0000006580)=""/252, 0xfc}, {&(0x7f0000006680)=""/241, 0xf1}, {&(0x7f0000006780)=""/87, 0x57}, {&(0x7f0000006800)=""/254, 0xfe}, {&(0x7f0000006900)=""/90, 0x5a}, {&(0x7f0000006980)=""/225, 0xe1}], 0x7}}, {{0x0, 0x0, &(0x7f0000006bc0)=[{&(0x7f0000006b00)=""/145, 0x91}], 0x1, &(0x7f0000006c00)=""/81, 0x51}, 0x3ff}], 0x6, 0x1, &(0x7f0000006e40)={r4, r5+10000000}) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f0000006fc0)={&(0x7f0000006e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000006ec0)=""/206, 0xce}) sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f0000007140)={&(0x7f0000007000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000007100)={&(0x7f0000007040)={0x88, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x88}, 0x1, 0x0, 0x0, 0xc800}, 0x240088d0) waitid(0x1, r2, &(0x7f0000007180), 0x8, 0x0) getpgrp(r1) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10010, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r6, 0x0, &(0x7f0000007200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x3, 0x2004, @fd_index=0x9, 0x10001, 0x0, 0x0, 0x17, 0x1, {0x3}}, 0x30) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000007380)={'syztnl1\x00', &(0x7f0000007300)={'syztnl2\x00', 0x0, 0x80, 0x7, 0x41, 0x100, {{0xf, 0x4, 0x2, 0x1, 0x3c, 0x66, 0x0, 0x1, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x28}, @empty, {[@timestamp_addr={0x44, 0x24, 0x52, 0x1, 0x8, [{@rand_addr=0x64010102, 0x5}, {@empty, 0x8}, {@rand_addr=0x64010100, 0x7}, {@multicast1, 0x3}]}, @end]}}}}}) 13:14:53 executing program 3: clock_nanosleep(0x1, 0x1, &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f0000000040)) r0 = getpgrp(0x0) sched_rr_get_interval(r0, &(0x7f0000000080)) r1 = getpgrp(r0) sched_rr_get_interval(r1, &(0x7f00000000c0)) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000100)={[0x5ab]}, &(0x7f0000000140), &(0x7f0000000200)={r2, r3+60000000}, 0x8) r4 = getpgrp(r1) waitid(0x3, r4, &(0x7f0000000240), 0x20000000, &(0x7f00000002c0)) sched_rr_get_interval(r4, &(0x7f0000000380)) clock_nanosleep(0x2, 0x0, &(0x7f00000003c0)={0x77359400}, &(0x7f0000000400)) timer_create(0x0, &(0x7f0000000440)={0x0, 0x3c, 0x4, @tid=r0}, &(0x7f0000000480)) wait4(r0, &(0x7f00000004c0), 0x8, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000a40)=[{{&(0x7f0000000500), 0x80, &(0x7f0000000600)=[{&(0x7f0000000580)=""/92, 0x5c}], 0x1, &(0x7f0000000640)=""/61, 0x3d}, 0x1}, {{&(0x7f0000000680)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000700)=""/217, 0xd9}, {&(0x7f0000000800)=""/165, 0xa5}, {&(0x7f00000008c0)}, {&(0x7f0000000900)=""/247, 0xf7}], 0x4}, 0x10000}], 0x2, 0x12041, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r4) r5 = gettid() waitid(0x2, r5, &(0x7f0000000ac0), 0x2, &(0x7f0000000b40)) ioctl$sock_ifreq(0xffffffffffffffff, 0x8932, &(0x7f0000000c00)={'veth1_to_batadv\x00', @ifru_names}) sched_rr_get_interval(r5, &(0x7f0000000c40)) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000008, 0x10, 0xffffffffffffffff, 0x10000000) 13:14:53 executing program 4: ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000000)={0x5, 0x1, 0x4, 0x1, 0x6}) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0x80, 0x80) socket$inet(0x2, 0x800, 0x4) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000080)=""/4096) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000001100)={'ip6gre0\x00', &(0x7f0000001080)={'syztnl0\x00', 0x0, 0x2f, 0x72, 0x4, 0x7f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, 0x40, 0x40, 0x5, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000011c0)={'ip6gre0\x00', &(0x7f0000001140)={'syztnl2\x00', r1, 0x2f, 0xf7, 0xfe, 0x4, 0x8, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x20, 0xfe2, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000001280)={'syztnl0\x00', &(0x7f0000001200)={'ip6gre0\x00', r2, 0x4, 0x2, 0x4, 0xffffffff, 0x12, @mcast1, @loopback, 0x7800, 0x8, 0xbc, 0xd96}}) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001300), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x38, r4, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x402c890}, 0x40000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r5}}, 0x21) r6 = syz_genetlink_get_family_id$team(&(0x7f0000001480), r0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000015c0)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={0x90, r6, 0x12, 0x70bd26, 0x25dfdbfc, {}, [{{0x8, 0x1, r3}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x8000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001740)={'ip_vti0\x00', &(0x7f0000001600)={'ip_vti0\x00', r2, 0x7800, 0x0, 0x7ba6, 0x3, {{0x3f, 0x4, 0x0, 0x23, 0xfc, 0x67, 0x0, 0xff, 0x4, 0x0, @private=0xa010100, @empty, {[@generic={0x0, 0xa, "40ebf02080ba2927"}, @timestamp_prespec={0x44, 0xc, 0x43, 0x3, 0x4, [{@loopback, 0x100}]}, @cipso={0x86, 0x51, 0x2, [{0x2, 0x4, "ca84"}, {0x1, 0xe, "0fb6e4ebf725212a1f4921ab"}, {0x0, 0x10, "4e91c861d05464ee62c7e2524b76"}, {0x0, 0x12, "b421989cb68da381e74d9a94bb264171"}, {0x2, 0x8, "0c43715770af"}, {0x7, 0xf, "3af348b6e9faa379f4f34958e2"}]}, @rr={0x7, 0xf, 0x65, [@empty, @dev={0xac, 0x14, 0x14, 0x10}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_prespec={0x44, 0x34, 0xbd, 0x3, 0x2, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1ff}, {@multicast2, 0xbc}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x1}, {@rand_addr=0x64010102, 0xa5f}, {@remote}, {@private=0xa010101, 0x2}]}, @timestamp_prespec={0x44, 0x14, 0x52, 0x3, 0xc, [{@local, 0xff}, {@loopback, 0x7ff}]}, @ssrr={0x89, 0xb, 0x67, [@remote, @empty]}, @cipso={0x86, 0x1c, 0x0, [{0x1, 0x8, "09576fd99f05"}, {0x5, 0xe, "3b7b886315736799754d0f1e"}]}, @noop]}}}}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_VLAN(r7, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x24, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x401}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x80000001}]}, 0x24}, 0x1, 0x0, 0x0, 0x8}, 0x20000000) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001940)={&(0x7f00000018c0)={0x44, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x11}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0xa}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x9}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000044}, 0x804) r8 = socket(0x2c, 0x6, 0x7ff) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r8, 0x89fa, &(0x7f0000001a40)={'syztnl0\x00', &(0x7f00000019c0)={'ip6_vti0\x00', r2, 0x4, 0x8, 0x3, 0x7, 0xa, @mcast1, @loopback, 0x7, 0x7800, 0x0, 0xffff}}) io_uring_setup(0x4cfd, &(0x7f0000001a80)={0x0, 0xe6d8, 0x2, 0x1, 0x150}) 13:14:53 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000002d40)={'syztnl1\x00', &(0x7f0000002cc0)={'syztnl1\x00', 0x0, 0x29, 0xe0, 0x9, 0x3, 0x20, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8, 0x7, 0x5, 0xad3}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000002e00)={'syztnl1\x00', &(0x7f0000002d80)={'syztnl2\x00', r1, 0x29, 0x1f, 0x8, 0x5a34e2c7, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x20, 0x7800, 0xd83, 0x1f}}) r2 = accept(r0, &(0x7f0000002e40)=@nfc_llcp, &(0x7f0000002ec0)=0x80) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, &(0x7f0000002f80)={'syztnl1\x00', &(0x7f0000002f00)={'syztnl0\x00', r1, 0x0, 0xff, 0x0, 0x9, 0x2, @loopback, @mcast2, 0x1, 0x700, 0xfffffff7, 0x3}}) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000002fc0)) sysinfo(&(0x7f0000003000)=""/97) rt_sigtimedwait(&(0x7f0000003080)={[0x1]}, &(0x7f00000030c0), &(0x7f0000003140), 0x8) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000003180)={'wlan0\x00', 0x0}) r6 = socket(0xb, 0x7, 0xfffffffc) sendmsg$NL80211_CMD_NEW_KEY(r6, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x24, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "ad60d5f4b1"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x20000000) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f00000032c0)) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000003300)='/sys/kernel/slab', 0x4040, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000033c0)={'syztnl1\x00', &(0x7f0000003340)={'ip6_vti0\x00', 0x0, 0x29, 0x9, 0x7, 0xfffff3f4, 0x3c, @private2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x40, 0xab7, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r7, 0x89f7, &(0x7f0000003480)={'syztnl1\x00', &(0x7f0000003400)={'ip6_vti0\x00', r8, 0x29, 0x80, 0x1, 0x2, 0x8, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @local, 0x1, 0x20, 0x1, 0x9}}) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000034c0)='/sys/module/nf_conntrack', 0x610001, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r9, &(0x7f00000035c0)={&(0x7f0000003500)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003580)={&(0x7f0000003540)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x840) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000003680)={'ip6_vti0\x00', &(0x7f0000003600)={'ip6_vti0\x00', r1, 0x29, 0x7f, 0x1e, 0x513, 0x30, @rand_addr=' \x01\x00', @mcast1, 0x20, 0x10, 0x4, 0x81000000}}) [ 64.183507] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 64.187253] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 64.189985] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 64.195873] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 64.198642] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 64.202963] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 64.208534] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 64.216359] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 64.219545] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 64.224044] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 64.308317] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 64.317846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 64.319894] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 64.321405] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 64.324838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 64.326179] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 64.331838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 64.336828] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 64.342728] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 64.343948] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 64.347938] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 64.349995] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 64.352186] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 64.358706] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 64.369898] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 64.376763] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 64.392311] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 64.396842] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 64.400879] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 64.402433] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 64.405901] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 64.407145] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 64.408803] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 64.408943] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 64.417712] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 64.419335] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 64.421844] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 64.423569] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 64.443889] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 64.446841] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 66.273251] Bluetooth: hci0: command tx timeout [ 66.273258] Bluetooth: hci1: command tx timeout [ 66.402662] Bluetooth: hci2: command tx timeout [ 66.464795] Bluetooth: hci5: command tx timeout [ 66.464906] Bluetooth: hci4: command tx timeout [ 66.466251] Bluetooth: hci7: command tx timeout [ 66.466268] Bluetooth: hci3: command tx timeout [ 66.528693] Bluetooth: hci6: command tx timeout [ 68.321169] Bluetooth: hci1: command tx timeout [ 68.322664] Bluetooth: hci0: command tx timeout [ 68.450704] Bluetooth: hci2: command tx timeout [ 68.513058] Bluetooth: hci7: command tx timeout [ 68.514901] Bluetooth: hci5: command tx timeout [ 68.515289] Bluetooth: hci3: command tx timeout [ 68.515896] Bluetooth: hci4: command tx timeout [ 68.578789] Bluetooth: hci6: command tx timeout [ 70.370691] Bluetooth: hci1: command tx timeout [ 70.371514] Bluetooth: hci0: command tx timeout [ 70.497961] Bluetooth: hci2: command tx timeout [ 70.560808] Bluetooth: hci4: command tx timeout [ 70.561523] Bluetooth: hci5: command tx timeout [ 70.562345] Bluetooth: hci3: command tx timeout [ 70.562635] Bluetooth: hci7: command tx timeout [ 70.624728] Bluetooth: hci6: command tx timeout [ 72.416716] Bluetooth: hci0: command tx timeout [ 72.417176] Bluetooth: hci1: command tx timeout [ 72.544691] Bluetooth: hci2: command tx timeout [ 72.608839] Bluetooth: hci5: command tx timeout [ 72.608922] Bluetooth: hci3: command tx timeout [ 72.609246] Bluetooth: hci7: command tx timeout [ 72.610224] Bluetooth: hci4: command tx timeout [ 72.672642] Bluetooth: hci6: command tx timeout [ 103.470691] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.471342] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.727118] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.728009] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.031499] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.032263] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.147926] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.148547] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.241688] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.242985] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.319111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.319750] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.462089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.463237] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.493505] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.495378] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.526032] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.527117] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.611405] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.612503] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.668177] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.668903] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.772547] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.773703] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 13:15:35 executing program 7: ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000001040)={&(0x7f0000000000), &(0x7f0000000040)=""/4096, 0x1000}) tkill(0x0, 0x13) waitid(0x1, 0xffffffffffffffff, &(0x7f0000001080), 0x1, &(0x7f0000001100)) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001280)={&(0x7f0000001200)={0x60, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x400, 0x60}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xe}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xb}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x9}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xf}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x40004}, 0x10) r0 = syz_open_dev$usbmon(&(0x7f0000001300), 0x1, 0x52401) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000002380)={&(0x7f0000001340), &(0x7f0000001380)=""/4096, 0x1000}) r1 = gettid() r2 = getpgrp(r1) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000002480)={&(0x7f00000023c0), &(0x7f0000002400)=""/97, 0x61}) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f0000002600)={&(0x7f00000024c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000002500)=""/226, 0xe2}) r3 = accept(0xffffffffffffffff, 0x0, &(0x7f0000002640)) clock_gettime(0x0, &(0x7f0000006e00)={0x0, 0x0}) recvmmsg(r3, &(0x7f0000006c80)=[{{&(0x7f0000002680)=@l2, 0x80, &(0x7f0000002800)=[{&(0x7f0000002700)=""/218, 0xda}], 0x1, &(0x7f0000002840)=""/31, 0x1f}, 0x40}, {{&(0x7f0000002880)=@generic, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002900)=""/4096, 0x1000}, {&(0x7f0000003900)=""/16, 0x10}, {&(0x7f0000003940)=""/205, 0xcd}, {&(0x7f0000003a40)=""/157, 0x9d}, {&(0x7f0000003b00)=""/140, 0x8c}, {&(0x7f0000003bc0)=""/192, 0xc0}, {&(0x7f0000003c80)=""/4096, 0x1000}], 0x7, &(0x7f0000004d00)=""/148, 0x94}, 0xd5}, {{&(0x7f0000004dc0)=@can, 0x80, &(0x7f0000004f80)=[{&(0x7f0000004e40)=""/17, 0x11}, {&(0x7f0000004e80)=""/241, 0xf1}], 0x2}, 0xa0}, {{&(0x7f0000004fc0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000005440)=[{&(0x7f0000005040)=""/229, 0xe5}, {&(0x7f0000005140)=""/140, 0x8c}, {&(0x7f0000005200)=""/246, 0xf6}, {&(0x7f0000005300)=""/223, 0xdf}, {&(0x7f0000005400)=""/41, 0x29}], 0x5, &(0x7f00000054c0)=""/44, 0x2c}, 0x101}, {{&(0x7f0000005500)=@qipcrtr, 0x80, &(0x7f0000006a80)=[{&(0x7f0000005580)=""/4096, 0x1000}, {&(0x7f0000006580)=""/252, 0xfc}, {&(0x7f0000006680)=""/241, 0xf1}, {&(0x7f0000006780)=""/87, 0x57}, {&(0x7f0000006800)=""/254, 0xfe}, {&(0x7f0000006900)=""/90, 0x5a}, {&(0x7f0000006980)=""/225, 0xe1}], 0x7}}, {{0x0, 0x0, &(0x7f0000006bc0)=[{&(0x7f0000006b00)=""/145, 0x91}], 0x1, &(0x7f0000006c00)=""/81, 0x51}, 0x3ff}], 0x6, 0x1, &(0x7f0000006e40)={r4, r5+10000000}) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f0000006fc0)={&(0x7f0000006e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000006ec0)=""/206, 0xce}) sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f0000007140)={&(0x7f0000007000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000007100)={&(0x7f0000007040)={0x88, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x88}, 0x1, 0x0, 0x0, 0xc800}, 0x240088d0) waitid(0x1, r2, &(0x7f0000007180), 0x8, 0x0) getpgrp(r1) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10010, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r6, 0x0, &(0x7f0000007200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x3, 0x2004, @fd_index=0x9, 0x10001, 0x0, 0x0, 0x17, 0x1, {0x3}}, 0x30) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000007380)={'syztnl1\x00', &(0x7f0000007300)={'syztnl2\x00', 0x0, 0x80, 0x7, 0x41, 0x100, {{0xf, 0x4, 0x2, 0x1, 0x3c, 0x66, 0x0, 0x1, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x28}, @empty, {[@timestamp_addr={0x44, 0x24, 0x52, 0x1, 0x8, [{@rand_addr=0x64010102, 0x5}, {@empty, 0x8}, {@rand_addr=0x64010100, 0x7}, {@multicast1, 0x3}]}, @end]}}}}}) 13:15:35 executing program 7: ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000001040)={&(0x7f0000000000), &(0x7f0000000040)=""/4096, 0x1000}) tkill(0x0, 0x13) waitid(0x1, 0xffffffffffffffff, &(0x7f0000001080), 0x1, &(0x7f0000001100)) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001280)={&(0x7f0000001200)={0x60, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x400, 0x60}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xe}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xb}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x9}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xf}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x40004}, 0x10) r0 = syz_open_dev$usbmon(&(0x7f0000001300), 0x1, 0x52401) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000002380)={&(0x7f0000001340), &(0x7f0000001380)=""/4096, 0x1000}) r1 = gettid() r2 = getpgrp(r1) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000002480)={&(0x7f00000023c0), &(0x7f0000002400)=""/97, 0x61}) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f0000002600)={&(0x7f00000024c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000002500)=""/226, 0xe2}) r3 = accept(0xffffffffffffffff, 0x0, &(0x7f0000002640)) clock_gettime(0x0, &(0x7f0000006e00)={0x0, 0x0}) recvmmsg(r3, &(0x7f0000006c80)=[{{&(0x7f0000002680)=@l2, 0x80, &(0x7f0000002800)=[{&(0x7f0000002700)=""/218, 0xda}], 0x1, &(0x7f0000002840)=""/31, 0x1f}, 0x40}, {{&(0x7f0000002880)=@generic, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002900)=""/4096, 0x1000}, {&(0x7f0000003900)=""/16, 0x10}, {&(0x7f0000003940)=""/205, 0xcd}, {&(0x7f0000003a40)=""/157, 0x9d}, {&(0x7f0000003b00)=""/140, 0x8c}, {&(0x7f0000003bc0)=""/192, 0xc0}, {&(0x7f0000003c80)=""/4096, 0x1000}], 0x7, &(0x7f0000004d00)=""/148, 0x94}, 0xd5}, {{&(0x7f0000004dc0)=@can, 0x80, &(0x7f0000004f80)=[{&(0x7f0000004e40)=""/17, 0x11}, {&(0x7f0000004e80)=""/241, 0xf1}], 0x2}, 0xa0}, {{&(0x7f0000004fc0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000005440)=[{&(0x7f0000005040)=""/229, 0xe5}, {&(0x7f0000005140)=""/140, 0x8c}, {&(0x7f0000005200)=""/246, 0xf6}, {&(0x7f0000005300)=""/223, 0xdf}, {&(0x7f0000005400)=""/41, 0x29}], 0x5, &(0x7f00000054c0)=""/44, 0x2c}, 0x101}, {{&(0x7f0000005500)=@qipcrtr, 0x80, &(0x7f0000006a80)=[{&(0x7f0000005580)=""/4096, 0x1000}, {&(0x7f0000006580)=""/252, 0xfc}, {&(0x7f0000006680)=""/241, 0xf1}, {&(0x7f0000006780)=""/87, 0x57}, {&(0x7f0000006800)=""/254, 0xfe}, {&(0x7f0000006900)=""/90, 0x5a}, {&(0x7f0000006980)=""/225, 0xe1}], 0x7}}, {{0x0, 0x0, &(0x7f0000006bc0)=[{&(0x7f0000006b00)=""/145, 0x91}], 0x1, &(0x7f0000006c00)=""/81, 0x51}, 0x3ff}], 0x6, 0x1, &(0x7f0000006e40)={r4, r5+10000000}) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f0000006fc0)={&(0x7f0000006e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000006ec0)=""/206, 0xce}) sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f0000007140)={&(0x7f0000007000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000007100)={&(0x7f0000007040)={0x88, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x88}, 0x1, 0x0, 0x0, 0xc800}, 0x240088d0) waitid(0x1, r2, &(0x7f0000007180), 0x8, 0x0) getpgrp(r1) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10010, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r6, 0x0, &(0x7f0000007200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x3, 0x2004, @fd_index=0x9, 0x10001, 0x0, 0x0, 0x17, 0x1, {0x3}}, 0x30) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000007380)={'syztnl1\x00', &(0x7f0000007300)={'syztnl2\x00', 0x0, 0x80, 0x7, 0x41, 0x100, {{0xf, 0x4, 0x2, 0x1, 0x3c, 0x66, 0x0, 0x1, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x28}, @empty, {[@timestamp_addr={0x44, 0x24, 0x52, 0x1, 0x8, [{@rand_addr=0x64010102, 0x5}, {@empty, 0x8}, {@rand_addr=0x64010100, 0x7}, {@multicast1, 0x3}]}, @end]}}}}}) [ 105.054018] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.058067] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.061373] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.062557] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 13:15:35 executing program 7: ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000001040)={&(0x7f0000000000), &(0x7f0000000040)=""/4096, 0x1000}) tkill(0x0, 0x13) waitid(0x1, 0xffffffffffffffff, &(0x7f0000001080), 0x1, &(0x7f0000001100)) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001280)={&(0x7f0000001200)={0x60, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x400, 0x60}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xe}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xb}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x9}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xf}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x40004}, 0x10) r0 = syz_open_dev$usbmon(&(0x7f0000001300), 0x1, 0x52401) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000002380)={&(0x7f0000001340), &(0x7f0000001380)=""/4096, 0x1000}) r1 = gettid() r2 = getpgrp(r1) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000002480)={&(0x7f00000023c0), &(0x7f0000002400)=""/97, 0x61}) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f0000002600)={&(0x7f00000024c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000002500)=""/226, 0xe2}) r3 = accept(0xffffffffffffffff, 0x0, &(0x7f0000002640)) clock_gettime(0x0, &(0x7f0000006e00)={0x0, 0x0}) recvmmsg(r3, &(0x7f0000006c80)=[{{&(0x7f0000002680)=@l2, 0x80, &(0x7f0000002800)=[{&(0x7f0000002700)=""/218, 0xda}], 0x1, &(0x7f0000002840)=""/31, 0x1f}, 0x40}, {{&(0x7f0000002880)=@generic, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002900)=""/4096, 0x1000}, {&(0x7f0000003900)=""/16, 0x10}, {&(0x7f0000003940)=""/205, 0xcd}, {&(0x7f0000003a40)=""/157, 0x9d}, {&(0x7f0000003b00)=""/140, 0x8c}, {&(0x7f0000003bc0)=""/192, 0xc0}, {&(0x7f0000003c80)=""/4096, 0x1000}], 0x7, &(0x7f0000004d00)=""/148, 0x94}, 0xd5}, {{&(0x7f0000004dc0)=@can, 0x80, &(0x7f0000004f80)=[{&(0x7f0000004e40)=""/17, 0x11}, {&(0x7f0000004e80)=""/241, 0xf1}], 0x2}, 0xa0}, {{&(0x7f0000004fc0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000005440)=[{&(0x7f0000005040)=""/229, 0xe5}, {&(0x7f0000005140)=""/140, 0x8c}, {&(0x7f0000005200)=""/246, 0xf6}, {&(0x7f0000005300)=""/223, 0xdf}, {&(0x7f0000005400)=""/41, 0x29}], 0x5, &(0x7f00000054c0)=""/44, 0x2c}, 0x101}, {{&(0x7f0000005500)=@qipcrtr, 0x80, &(0x7f0000006a80)=[{&(0x7f0000005580)=""/4096, 0x1000}, {&(0x7f0000006580)=""/252, 0xfc}, {&(0x7f0000006680)=""/241, 0xf1}, {&(0x7f0000006780)=""/87, 0x57}, {&(0x7f0000006800)=""/254, 0xfe}, {&(0x7f0000006900)=""/90, 0x5a}, {&(0x7f0000006980)=""/225, 0xe1}], 0x7}}, {{0x0, 0x0, &(0x7f0000006bc0)=[{&(0x7f0000006b00)=""/145, 0x91}], 0x1, &(0x7f0000006c00)=""/81, 0x51}, 0x3ff}], 0x6, 0x1, &(0x7f0000006e40)={r4, r5+10000000}) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f0000006fc0)={&(0x7f0000006e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000006ec0)=""/206, 0xce}) sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f0000007140)={&(0x7f0000007000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000007100)={&(0x7f0000007040)={0x88, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x88}, 0x1, 0x0, 0x0, 0xc800}, 0x240088d0) waitid(0x1, r2, &(0x7f0000007180), 0x8, 0x0) getpgrp(r1) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10010, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r6, 0x0, &(0x7f0000007200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x3, 0x2004, @fd_index=0x9, 0x10001, 0x0, 0x0, 0x17, 0x1, {0x3}}, 0x30) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000007380)={'syztnl1\x00', &(0x7f0000007300)={'syztnl2\x00', 0x0, 0x80, 0x7, 0x41, 0x100, {{0xf, 0x4, 0x2, 0x1, 0x3c, 0x66, 0x0, 0x1, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x28}, @empty, {[@timestamp_addr={0x44, 0x24, 0x52, 0x1, 0x8, [{@rand_addr=0x64010102, 0x5}, {@empty, 0x8}, {@rand_addr=0x64010100, 0x7}, {@multicast1, 0x3}]}, @end]}}}}}) [ 105.161163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.162909] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 13:15:35 executing program 7: ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000001040)={&(0x7f0000000000), &(0x7f0000000040)=""/4096, 0x1000}) tkill(0x0, 0x13) waitid(0x1, 0xffffffffffffffff, &(0x7f0000001080), 0x1, &(0x7f0000001100)) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001280)={&(0x7f0000001200)={0x60, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x400, 0x60}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xe}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xb}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x9}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xf}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x40004}, 0x10) r0 = syz_open_dev$usbmon(&(0x7f0000001300), 0x1, 0x52401) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000002380)={&(0x7f0000001340), &(0x7f0000001380)=""/4096, 0x1000}) r1 = gettid() r2 = getpgrp(r1) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000002480)={&(0x7f00000023c0), &(0x7f0000002400)=""/97, 0x61}) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f0000002600)={&(0x7f00000024c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000002500)=""/226, 0xe2}) r3 = accept(0xffffffffffffffff, 0x0, &(0x7f0000002640)) clock_gettime(0x0, &(0x7f0000006e00)={0x0, 0x0}) recvmmsg(r3, &(0x7f0000006c80)=[{{&(0x7f0000002680)=@l2, 0x80, &(0x7f0000002800)=[{&(0x7f0000002700)=""/218, 0xda}], 0x1, &(0x7f0000002840)=""/31, 0x1f}, 0x40}, {{&(0x7f0000002880)=@generic, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002900)=""/4096, 0x1000}, {&(0x7f0000003900)=""/16, 0x10}, {&(0x7f0000003940)=""/205, 0xcd}, {&(0x7f0000003a40)=""/157, 0x9d}, {&(0x7f0000003b00)=""/140, 0x8c}, {&(0x7f0000003bc0)=""/192, 0xc0}, {&(0x7f0000003c80)=""/4096, 0x1000}], 0x7, &(0x7f0000004d00)=""/148, 0x94}, 0xd5}, {{&(0x7f0000004dc0)=@can, 0x80, &(0x7f0000004f80)=[{&(0x7f0000004e40)=""/17, 0x11}, {&(0x7f0000004e80)=""/241, 0xf1}], 0x2}, 0xa0}, {{&(0x7f0000004fc0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000005440)=[{&(0x7f0000005040)=""/229, 0xe5}, {&(0x7f0000005140)=""/140, 0x8c}, {&(0x7f0000005200)=""/246, 0xf6}, {&(0x7f0000005300)=""/223, 0xdf}, {&(0x7f0000005400)=""/41, 0x29}], 0x5, &(0x7f00000054c0)=""/44, 0x2c}, 0x101}, {{&(0x7f0000005500)=@qipcrtr, 0x80, &(0x7f0000006a80)=[{&(0x7f0000005580)=""/4096, 0x1000}, {&(0x7f0000006580)=""/252, 0xfc}, {&(0x7f0000006680)=""/241, 0xf1}, {&(0x7f0000006780)=""/87, 0x57}, {&(0x7f0000006800)=""/254, 0xfe}, {&(0x7f0000006900)=""/90, 0x5a}, {&(0x7f0000006980)=""/225, 0xe1}], 0x7}}, {{0x0, 0x0, &(0x7f0000006bc0)=[{&(0x7f0000006b00)=""/145, 0x91}], 0x1, &(0x7f0000006c00)=""/81, 0x51}, 0x3ff}], 0x6, 0x1, &(0x7f0000006e40)={r4, r5+10000000}) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f0000006fc0)={&(0x7f0000006e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000006ec0)=""/206, 0xce}) sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f0000007140)={&(0x7f0000007000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000007100)={&(0x7f0000007040)={0x88, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x88}, 0x1, 0x0, 0x0, 0xc800}, 0x240088d0) waitid(0x1, r2, &(0x7f0000007180), 0x8, 0x0) getpgrp(r1) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10010, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r6, 0x0, &(0x7f0000007200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x3, 0x2004, @fd_index=0x9, 0x10001, 0x0, 0x0, 0x17, 0x1, {0x3}}, 0x30) [ 105.197033] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.197591] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 13:15:35 executing program 4: ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000000)={0x5, 0x1, 0x4, 0x1, 0x6}) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0x80, 0x80) socket$inet(0x2, 0x800, 0x4) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000080)=""/4096) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000001100)={'ip6gre0\x00', &(0x7f0000001080)={'syztnl0\x00', 0x0, 0x2f, 0x72, 0x4, 0x7f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, 0x40, 0x40, 0x5, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000011c0)={'ip6gre0\x00', &(0x7f0000001140)={'syztnl2\x00', r1, 0x2f, 0xf7, 0xfe, 0x4, 0x8, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x20, 0xfe2, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000001280)={'syztnl0\x00', &(0x7f0000001200)={'ip6gre0\x00', r2, 0x4, 0x2, 0x4, 0xffffffff, 0x12, @mcast1, @loopback, 0x7800, 0x8, 0xbc, 0xd96}}) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001300), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x38, r4, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x402c890}, 0x40000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r5}}, 0x21) r6 = syz_genetlink_get_family_id$team(&(0x7f0000001480), r0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000015c0)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={0x90, r6, 0x12, 0x70bd26, 0x25dfdbfc, {}, [{{0x8, 0x1, r3}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x8000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001740)={'ip_vti0\x00', &(0x7f0000001600)={'ip_vti0\x00', r2, 0x7800, 0x0, 0x7ba6, 0x3, {{0x3f, 0x4, 0x0, 0x23, 0xfc, 0x67, 0x0, 0xff, 0x4, 0x0, @private=0xa010100, @empty, {[@generic={0x0, 0xa, "40ebf02080ba2927"}, @timestamp_prespec={0x44, 0xc, 0x43, 0x3, 0x4, [{@loopback, 0x100}]}, @cipso={0x86, 0x51, 0x2, [{0x2, 0x4, "ca84"}, {0x1, 0xe, "0fb6e4ebf725212a1f4921ab"}, {0x0, 0x10, "4e91c861d05464ee62c7e2524b76"}, {0x0, 0x12, "b421989cb68da381e74d9a94bb264171"}, {0x2, 0x8, "0c43715770af"}, {0x7, 0xf, "3af348b6e9faa379f4f34958e2"}]}, @rr={0x7, 0xf, 0x65, [@empty, @dev={0xac, 0x14, 0x14, 0x10}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_prespec={0x44, 0x34, 0xbd, 0x3, 0x2, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1ff}, {@multicast2, 0xbc}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x1}, {@rand_addr=0x64010102, 0xa5f}, {@remote}, {@private=0xa010101, 0x2}]}, @timestamp_prespec={0x44, 0x14, 0x52, 0x3, 0xc, [{@local, 0xff}, {@loopback, 0x7ff}]}, @ssrr={0x89, 0xb, 0x67, [@remote, @empty]}, @cipso={0x86, 0x1c, 0x0, [{0x1, 0x8, "09576fd99f05"}, {0x5, 0xe, "3b7b886315736799754d0f1e"}]}, @noop]}}}}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_VLAN(r7, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x24, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x401}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x80000001}]}, 0x24}, 0x1, 0x0, 0x0, 0x8}, 0x20000000) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001940)={&(0x7f00000018c0)={0x44, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x11}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0xa}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x9}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000044}, 0x804) r8 = socket(0x2c, 0x6, 0x7ff) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r8, 0x89fa, &(0x7f0000001a40)={'syztnl0\x00', &(0x7f00000019c0)={'ip6_vti0\x00', r2, 0x4, 0x8, 0x3, 0x7, 0xa, @mcast1, @loopback, 0x7, 0x7800, 0x0, 0xffff}}) io_uring_setup(0x4cfd, &(0x7f0000001a80)={0x0, 0xe6d8, 0x2, 0x1, 0x150}) 13:15:35 executing program 7: ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000001040)={&(0x7f0000000000), &(0x7f0000000040)=""/4096, 0x1000}) tkill(0x0, 0x13) waitid(0x1, 0xffffffffffffffff, &(0x7f0000001080), 0x1, &(0x7f0000001100)) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001280)={&(0x7f0000001200)={0x60, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x400, 0x60}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xe}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xb}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x9}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xf}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x40004}, 0x10) r0 = syz_open_dev$usbmon(&(0x7f0000001300), 0x1, 0x52401) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000002380)={&(0x7f0000001340), &(0x7f0000001380)=""/4096, 0x1000}) r1 = gettid() r2 = getpgrp(r1) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000002480)={&(0x7f00000023c0), &(0x7f0000002400)=""/97, 0x61}) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f0000002600)={&(0x7f00000024c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000002500)=""/226, 0xe2}) r3 = accept(0xffffffffffffffff, 0x0, &(0x7f0000002640)) clock_gettime(0x0, &(0x7f0000006e00)={0x0, 0x0}) recvmmsg(r3, &(0x7f0000006c80)=[{{&(0x7f0000002680)=@l2, 0x80, &(0x7f0000002800)=[{&(0x7f0000002700)=""/218, 0xda}], 0x1, &(0x7f0000002840)=""/31, 0x1f}, 0x40}, {{&(0x7f0000002880)=@generic, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002900)=""/4096, 0x1000}, {&(0x7f0000003900)=""/16, 0x10}, {&(0x7f0000003940)=""/205, 0xcd}, {&(0x7f0000003a40)=""/157, 0x9d}, {&(0x7f0000003b00)=""/140, 0x8c}, {&(0x7f0000003bc0)=""/192, 0xc0}, {&(0x7f0000003c80)=""/4096, 0x1000}], 0x7, &(0x7f0000004d00)=""/148, 0x94}, 0xd5}, {{&(0x7f0000004dc0)=@can, 0x80, &(0x7f0000004f80)=[{&(0x7f0000004e40)=""/17, 0x11}, {&(0x7f0000004e80)=""/241, 0xf1}], 0x2}, 0xa0}, {{&(0x7f0000004fc0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000005440)=[{&(0x7f0000005040)=""/229, 0xe5}, {&(0x7f0000005140)=""/140, 0x8c}, {&(0x7f0000005200)=""/246, 0xf6}, {&(0x7f0000005300)=""/223, 0xdf}, {&(0x7f0000005400)=""/41, 0x29}], 0x5, &(0x7f00000054c0)=""/44, 0x2c}, 0x101}, {{&(0x7f0000005500)=@qipcrtr, 0x80, &(0x7f0000006a80)=[{&(0x7f0000005580)=""/4096, 0x1000}, {&(0x7f0000006580)=""/252, 0xfc}, {&(0x7f0000006680)=""/241, 0xf1}, {&(0x7f0000006780)=""/87, 0x57}, {&(0x7f0000006800)=""/254, 0xfe}, {&(0x7f0000006900)=""/90, 0x5a}, {&(0x7f0000006980)=""/225, 0xe1}], 0x7}}, {{0x0, 0x0, &(0x7f0000006bc0)=[{&(0x7f0000006b00)=""/145, 0x91}], 0x1, &(0x7f0000006c00)=""/81, 0x51}, 0x3ff}], 0x6, 0x1, &(0x7f0000006e40)={r4, r5+10000000}) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f0000006fc0)={&(0x7f0000006e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000006ec0)=""/206, 0xce}) sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f0000007140)={&(0x7f0000007000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000007100)={&(0x7f0000007040)={0x88, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x88}, 0x1, 0x0, 0x0, 0xc800}, 0x240088d0) waitid(0x1, r2, &(0x7f0000007180), 0x8, 0x0) getpgrp(r1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000007200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x3, 0x2004, @fd_index=0x9, 0x10001, 0x0, 0x0, 0x17, 0x1, {0x3}}, 0x30) 13:15:35 executing program 2: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)="3c83aba66cc4e07e77a76c5edaaaeb2c142196dcb4948d1bea7cc7c56c0522d946cb5ac4231e337744cd43286b5d06c909b77ba0b1dfa735763b470323ffa9785312df86d54ab56c63f169c855da890385e79ba7c12224570381988ffe8d2b65a733b2b77981ee7865d86a0dd49f2d3d71ba26e167eb653682c8fb6d85ea2cee1876e5e45d8d6f35f9920ea42fd04de7fa1e08de2e345b5c79da16e0f38f87b93c79d554bdf32aa1cdf40cebec88412bea62d90d3915360fdeab0e5ac3a9df3b64a91136855c82d51ab174ac5cd6bd6b9d223bcd6f79ffce263b54bd9999c01459a72d54dffa20773c8d28d00c5e0ea136538365", 0xf4}, 0x1, 0x0, 0x0, 0x4000}, 0x20000001) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000180)) sysinfo(&(0x7f00000001c0)=""/142) ioctl$sock_ifreq(r1, 0x8931, &(0x7f0000000280)={'batadv_slave_0\x00', @ifru_addrs=@in={0x2, 0x0, @local}}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/bus/platform', 0x16001, 0x9) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r3, 0x2, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000090) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f00000004c0)={0x14c, r3, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x81, 0x6}, {0xe9, 0x1}, {0x6, 0x5}, {0x2d, 0x6}, {0x81, 0x2}, {0x3f, 0x6}, {0x8, 0x2}, {0x1, 0x7}, {0x48, 0x5}, {0x80, 0x5}, {0xff, 0x6}, {0x2, 0x5}], "c1060bf1205e1788"}}, @NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x5, 0x6}, {0x2, 0x5}, {0x5, 0x7}, {0xff, 0x7}, {0x0, 0x5}, {0x3, 0x2}, {0xfa, 0x2}, {0x1, 0x7}, {0x0, 0x2}, {0x6f}, {}, {0x7, 0x7}, {0x81, 0x7}, {0x6, 0x7}, {0x7, 0x7}, {0x4, 0x5}, {0x1f}, {0x5, 0x4}], "98cb2e5ab9500d0c"}}, @NL80211_ATTR_QOS_MAP={0xe, 0xc7, {[{0x81, 0x6}], "57fcf5f60644f176"}}, @NL80211_ATTR_QOS_MAP={0x34, 0xc7, {[{0x1, 0x7}, {0xff, 0x3}, {0x4, 0x1}, {0x40}, {0x8, 0x6}, {0x6, 0x2}, {0x5b, 0x6}, {0x40, 0x6}, {0x5, 0x2}, {0x2, 0x3}, {0xff, 0x1}, {0x7, 0x5}, {0x81, 0x6}, {0x1}, {0xfa, 0x7}, {0xb2, 0x7}, {0x6, 0x7}, {0x2, 0x5}, {0x7f, 0x4}, {0x9}], "c94f799edde58374"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "71a679bb7dfeab0b"}}, @NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0x3f, 0x3}, {0x15, 0x1}, {0xc0, 0x4}, {0x3}, {0x1, 0x7}, {0x9, 0x7}, {0x6}, {0x4, 0x3}, {0x0, 0x3}, {0x7, 0x2}, {0xd4, 0x7}, {0x1, 0x4}, {0x4}, {0x6, 0x7}], "73aa28212d51194b"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0xff, 0x5}, {0x2, 0x1}, {0x7, 0x5}, {0x2, 0x2}, {0x1, 0x6}, {0x6, 0x5}, {0xa1}, {0x1, 0x1}], "402ab314775a4ac1"}}, @NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0x40, 0x3}, {0x20, 0x7}, {0x9, 0x1}, {0x3, 0x2}, {0x40, 0x6}, {0x2, 0x4}, {0x3a, 0x6}, {0x20, 0x6}, {0x0, 0x4}, {0x7f, 0x7}, {0x1, 0x7}, {0x8, 0x3}, {0x7, 0x4}, {0x3f, 0x1}, {0x3, 0x4}, {0x2}, {0x1f, 0x1}, {0xf8, 0x3}, {0x1, 0x5}], "2f10c13b1320f82b"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0x3, 0x7}, {0x7, 0x4}, {0x4, 0x7}, {0x2, 0x1}, {0x1f, 0x7}, {0xa5, 0x4}, {0x65, 0x4}, {0x9, 0x7}], "be02396e2de23506"}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) ioctl$CDROM_MEDIA_CHANGED(r2, 0x5325, 0x8) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x42000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x24, r3, 0x4, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_STA_TX_POWER={0x6}]}, 0x24}}, 0x4850) ioctl$sock_ifreq(r1, 0xa9, &(0x7f0000000800)={'syzkaller0\x00', @ifru_settings={0x0, 0x0, @te1=&(0x7f00000007c0)={0x9, 0x3, 0x3, 0x48}}}) sysinfo(&(0x7f0000000840)=""/122) syz_genetlink_get_family_id$team(&(0x7f00000008c0), r2) r5 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000900)) sendmsg$802154_raw(r5, &(0x7f0000000a80)={0xfffffffffffffffe, 0x0, &(0x7f0000000a40)={&(0x7f0000000940)="b76454b20b7ab7f1c8f2524461f12070545d1eaac1636e80e8b1fed838f1018c6633b7d8e36172997d2afb57dcab6a5f1cd483e57e6b4697785a368b03b102b25fde82e84038f42064c7cad207a57446f8ed4eb3e6dc4b6760792505f5cc2e345b10dc6d4d6ab4cc364d4cfb1601034f43aa75fd6ac2549b0998f57de30e4c64aaf217669dcb49b67c92f4a65144ff327c13128c159f09d4ca472303d76af4b7fd7c200e74ababf9c8fb3b777ed62c0aec7491bda64fb32af670f2f69d437f8fd16ca9e3290ea83118ee05a7a6e61742eaca354a89760c8be7a15d65c1ce1e91589eac53386e2680992aaa57", 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x4001) accept(r0, &(0x7f0000000ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000b40)=0x80) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000e00)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, r5, 0x0, &(0x7f0000000dc0)={&(0x7f0000000b80)=@nl=@proc, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000c00)=""/219, 0xdb}, {&(0x7f0000000d00)=""/31, 0x1f}], 0x2, &(0x7f0000000d80)=""/60, 0x3c}, 0x0, 0x12100, 0x1, {0x1}}, 0x7) 13:15:35 executing program 7: ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000001040)={&(0x7f0000000000), &(0x7f0000000040)=""/4096, 0x1000}) tkill(0x0, 0x13) waitid(0x1, 0xffffffffffffffff, &(0x7f0000001080), 0x1, &(0x7f0000001100)) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001280)={&(0x7f0000001200)={0x60, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x400, 0x60}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xe}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xb}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x9}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xf}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x40004}, 0x10) r0 = syz_open_dev$usbmon(&(0x7f0000001300), 0x1, 0x52401) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000002380)={&(0x7f0000001340), &(0x7f0000001380)=""/4096, 0x1000}) r1 = gettid() r2 = getpgrp(r1) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000002480)={&(0x7f00000023c0), &(0x7f0000002400)=""/97, 0x61}) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f0000002600)={&(0x7f00000024c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000002500)=""/226, 0xe2}) r3 = accept(0xffffffffffffffff, 0x0, &(0x7f0000002640)) clock_gettime(0x0, &(0x7f0000006e00)={0x0, 0x0}) recvmmsg(r3, &(0x7f0000006c80)=[{{&(0x7f0000002680)=@l2, 0x80, &(0x7f0000002800)=[{&(0x7f0000002700)=""/218, 0xda}], 0x1, &(0x7f0000002840)=""/31, 0x1f}, 0x40}, {{&(0x7f0000002880)=@generic, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002900)=""/4096, 0x1000}, {&(0x7f0000003900)=""/16, 0x10}, {&(0x7f0000003940)=""/205, 0xcd}, {&(0x7f0000003a40)=""/157, 0x9d}, {&(0x7f0000003b00)=""/140, 0x8c}, {&(0x7f0000003bc0)=""/192, 0xc0}, {&(0x7f0000003c80)=""/4096, 0x1000}], 0x7, &(0x7f0000004d00)=""/148, 0x94}, 0xd5}, {{&(0x7f0000004dc0)=@can, 0x80, &(0x7f0000004f80)=[{&(0x7f0000004e40)=""/17, 0x11}, {&(0x7f0000004e80)=""/241, 0xf1}], 0x2}, 0xa0}, {{&(0x7f0000004fc0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000005440)=[{&(0x7f0000005040)=""/229, 0xe5}, {&(0x7f0000005140)=""/140, 0x8c}, {&(0x7f0000005200)=""/246, 0xf6}, {&(0x7f0000005300)=""/223, 0xdf}, {&(0x7f0000005400)=""/41, 0x29}], 0x5, &(0x7f00000054c0)=""/44, 0x2c}, 0x101}, {{&(0x7f0000005500)=@qipcrtr, 0x80, &(0x7f0000006a80)=[{&(0x7f0000005580)=""/4096, 0x1000}, {&(0x7f0000006580)=""/252, 0xfc}, {&(0x7f0000006680)=""/241, 0xf1}, {&(0x7f0000006780)=""/87, 0x57}, {&(0x7f0000006800)=""/254, 0xfe}, {&(0x7f0000006900)=""/90, 0x5a}, {&(0x7f0000006980)=""/225, 0xe1}], 0x7}}, {{0x0, 0x0, &(0x7f0000006bc0)=[{&(0x7f0000006b00)=""/145, 0x91}], 0x1, &(0x7f0000006c00)=""/81, 0x51}, 0x3ff}], 0x6, 0x1, &(0x7f0000006e40)={r4, r5+10000000}) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f0000006fc0)={&(0x7f0000006e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000006ec0)=""/206, 0xce}) sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f0000007140)={&(0x7f0000007000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000007100)={&(0x7f0000007040)={0x88, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x88}, 0x1, 0x0, 0x0, 0xc800}, 0x240088d0) waitid(0x1, r2, &(0x7f0000007180), 0x8, 0x0) getpgrp(r1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000007200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x3, 0x2004, @fd_index=0x9, 0x10001, 0x0, 0x0, 0x17, 0x1, {0x3}}, 0x30) [ 105.526630] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list 13:15:48 executing program 6: prctl$PR_SET_IO_FLUSHER(0x39, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) clock_gettime(0x5, &(0x7f0000000000)) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000040)) clock_nanosleep(0x5, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x80, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x5c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xe0}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "60ba389c00a5ea1d6dd65713749c7a02"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x3f}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x49}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3d3e46fd6bbaaa3c6a156013bb6a5a36"}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x10) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) setfsgid(0xee00) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, r1, 0x12, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xffff, 0x36}}}}, [@NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x9}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x9}, @NL80211_ATTR_P2P_CTWINDOW={0x5}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0xd800}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x20}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) rt_sigtimedwait(&(0x7f0000000400)={[0x7fff]}, 0x0, &(0x7f0000000440)={0x77359400}, 0x8) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x1) sched_rr_get_interval(0x0, &(0x7f0000000480)) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}}, 0x404) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) clock_nanosleep(0x0, 0x1, &(0x7f00000005c0), &(0x7f0000000600)) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x1) 13:15:48 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/processor', 0x0, 0x9) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x20008824) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2) r1 = io_uring_setup(0x37c5, &(0x7f0000000140)={0x0, 0x708f, 0x0, 0x1, 0x15}) socketpair(0x27, 0x5, 0xf8, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000200)={'ip6tnl0\x00', 0x0, 0x29, 0x8, 0x0, 0x3, 0x45, @mcast1, @remote, 0x80, 0x80, 0x1f, 0x800}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000400)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r3, 0x4, 0xb4, 0x6, 0x7, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, 0x40, 0x40, 0x3, 0x3ff}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000440)={'syztnl2\x00', r4, 0x4, 0x5f, 0x61, 0x0, 0x70, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x80, 0x8000, 0x81, 0x3ff}}) r5 = shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ff9000/0x4000)=nil) shmctl$SHM_UNLOCK(r5, 0xc) waitid(0x1, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000500)) timer_create(0x2, &(0x7f00000005c0)={0x0, 0x2b, 0x2}, &(0x7f0000000600)=0x0) timer_gettime(r6, &(0x7f0000000640)) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x110, r1, 0x8000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000680)) waitid(0x0, 0x0, &(0x7f00000006c0), 0x1, &(0x7f0000000740)) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/module/snd_pcm', 0x14001, 0xc0) ioctl$EVIOCGKEYCODE_V2(r8, 0x80284504, &(0x7f0000000840)=""/171) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) syz_io_uring_submit(r7, 0x0, &(0x7f0000000a40)=@IORING_OP_STATX={0x15, 0x4, 0x0, r8, &(0x7f0000000900), &(0x7f0000000a00)='./file0\x00', 0x20, 0x2000}, 0x3) 13:15:48 executing program 7: ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000001040)={&(0x7f0000000000), &(0x7f0000000040)=""/4096, 0x1000}) tkill(0x0, 0x13) waitid(0x1, 0xffffffffffffffff, &(0x7f0000001080), 0x1, &(0x7f0000001100)) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001280)={&(0x7f0000001200)={0x60, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x400, 0x60}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xe}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xb}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x9}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xf}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x40004}, 0x10) r0 = syz_open_dev$usbmon(&(0x7f0000001300), 0x1, 0x52401) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000002380)={&(0x7f0000001340), &(0x7f0000001380)=""/4096, 0x1000}) r1 = gettid() r2 = getpgrp(r1) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000002480)={&(0x7f00000023c0), &(0x7f0000002400)=""/97, 0x61}) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f0000002600)={&(0x7f00000024c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000002500)=""/226, 0xe2}) r3 = accept(0xffffffffffffffff, 0x0, &(0x7f0000002640)) clock_gettime(0x0, &(0x7f0000006e00)={0x0, 0x0}) recvmmsg(r3, &(0x7f0000006c80)=[{{&(0x7f0000002680)=@l2, 0x80, &(0x7f0000002800)=[{&(0x7f0000002700)=""/218, 0xda}], 0x1, &(0x7f0000002840)=""/31, 0x1f}, 0x40}, {{&(0x7f0000002880)=@generic, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002900)=""/4096, 0x1000}, {&(0x7f0000003900)=""/16, 0x10}, {&(0x7f0000003940)=""/205, 0xcd}, {&(0x7f0000003a40)=""/157, 0x9d}, {&(0x7f0000003b00)=""/140, 0x8c}, {&(0x7f0000003bc0)=""/192, 0xc0}, {&(0x7f0000003c80)=""/4096, 0x1000}], 0x7, &(0x7f0000004d00)=""/148, 0x94}, 0xd5}, {{&(0x7f0000004dc0)=@can, 0x80, &(0x7f0000004f80)=[{&(0x7f0000004e40)=""/17, 0x11}, {&(0x7f0000004e80)=""/241, 0xf1}], 0x2}, 0xa0}, {{&(0x7f0000004fc0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000005440)=[{&(0x7f0000005040)=""/229, 0xe5}, {&(0x7f0000005140)=""/140, 0x8c}, {&(0x7f0000005200)=""/246, 0xf6}, {&(0x7f0000005300)=""/223, 0xdf}, {&(0x7f0000005400)=""/41, 0x29}], 0x5, &(0x7f00000054c0)=""/44, 0x2c}, 0x101}, {{&(0x7f0000005500)=@qipcrtr, 0x80, &(0x7f0000006a80)=[{&(0x7f0000005580)=""/4096, 0x1000}, {&(0x7f0000006580)=""/252, 0xfc}, {&(0x7f0000006680)=""/241, 0xf1}, {&(0x7f0000006780)=""/87, 0x57}, {&(0x7f0000006800)=""/254, 0xfe}, {&(0x7f0000006900)=""/90, 0x5a}, {&(0x7f0000006980)=""/225, 0xe1}], 0x7}}, {{0x0, 0x0, &(0x7f0000006bc0)=[{&(0x7f0000006b00)=""/145, 0x91}], 0x1, &(0x7f0000006c00)=""/81, 0x51}, 0x3ff}], 0x6, 0x1, &(0x7f0000006e40)={r4, r5+10000000}) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f0000006fc0)={&(0x7f0000006e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000006ec0)=""/206, 0xce}) sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f0000007140)={&(0x7f0000007000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000007100)={&(0x7f0000007040)={0x88, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x88}, 0x1, 0x0, 0x0, 0xc800}, 0x240088d0) waitid(0x1, r2, &(0x7f0000007180), 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000007200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x3, 0x2004, @fd_index=0x9, 0x10001, 0x0, 0x0, 0x17, 0x1, {0x3}}, 0x30) 13:15:48 executing program 2: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)="3c83aba66cc4e07e77a76c5edaaaeb2c142196dcb4948d1bea7cc7c56c0522d946cb5ac4231e337744cd43286b5d06c909b77ba0b1dfa735763b470323ffa9785312df86d54ab56c63f169c855da890385e79ba7c12224570381988ffe8d2b65a733b2b77981ee7865d86a0dd49f2d3d71ba26e167eb653682c8fb6d85ea2cee1876e5e45d8d6f35f9920ea42fd04de7fa1e08de2e345b5c79da16e0f38f87b93c79d554bdf32aa1cdf40cebec88412bea62d90d3915360fdeab0e5ac3a9df3b64a91136855c82d51ab174ac5cd6bd6b9d223bcd6f79ffce263b54bd9999c01459a72d54dffa20773c8d28d00c5e0ea136538365", 0xf4}, 0x1, 0x0, 0x0, 0x4000}, 0x20000001) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000180)) sysinfo(&(0x7f00000001c0)=""/142) ioctl$sock_ifreq(r1, 0x8931, &(0x7f0000000280)={'batadv_slave_0\x00', @ifru_addrs=@in={0x2, 0x0, @local}}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/bus/platform', 0x16001, 0x9) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r3, 0x2, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000090) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f00000004c0)={0x14c, r3, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x81, 0x6}, {0xe9, 0x1}, {0x6, 0x5}, {0x2d, 0x6}, {0x81, 0x2}, {0x3f, 0x6}, {0x8, 0x2}, {0x1, 0x7}, {0x48, 0x5}, {0x80, 0x5}, {0xff, 0x6}, {0x2, 0x5}], "c1060bf1205e1788"}}, @NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x5, 0x6}, {0x2, 0x5}, {0x5, 0x7}, {0xff, 0x7}, {0x0, 0x5}, {0x3, 0x2}, {0xfa, 0x2}, {0x1, 0x7}, {0x0, 0x2}, {0x6f}, {}, {0x7, 0x7}, {0x81, 0x7}, {0x6, 0x7}, {0x7, 0x7}, {0x4, 0x5}, {0x1f}, {0x5, 0x4}], "98cb2e5ab9500d0c"}}, @NL80211_ATTR_QOS_MAP={0xe, 0xc7, {[{0x81, 0x6}], "57fcf5f60644f176"}}, @NL80211_ATTR_QOS_MAP={0x34, 0xc7, {[{0x1, 0x7}, {0xff, 0x3}, {0x4, 0x1}, {0x40}, {0x8, 0x6}, {0x6, 0x2}, {0x5b, 0x6}, {0x40, 0x6}, {0x5, 0x2}, {0x2, 0x3}, {0xff, 0x1}, {0x7, 0x5}, {0x81, 0x6}, {0x1}, {0xfa, 0x7}, {0xb2, 0x7}, {0x6, 0x7}, {0x2, 0x5}, {0x7f, 0x4}, {0x9}], "c94f799edde58374"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "71a679bb7dfeab0b"}}, @NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0x3f, 0x3}, {0x15, 0x1}, {0xc0, 0x4}, {0x3}, {0x1, 0x7}, {0x9, 0x7}, {0x6}, {0x4, 0x3}, {0x0, 0x3}, {0x7, 0x2}, {0xd4, 0x7}, {0x1, 0x4}, {0x4}, {0x6, 0x7}], "73aa28212d51194b"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0xff, 0x5}, {0x2, 0x1}, {0x7, 0x5}, {0x2, 0x2}, {0x1, 0x6}, {0x6, 0x5}, {0xa1}, {0x1, 0x1}], "402ab314775a4ac1"}}, @NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0x40, 0x3}, {0x20, 0x7}, {0x9, 0x1}, {0x3, 0x2}, {0x40, 0x6}, {0x2, 0x4}, {0x3a, 0x6}, {0x20, 0x6}, {0x0, 0x4}, {0x7f, 0x7}, {0x1, 0x7}, {0x8, 0x3}, {0x7, 0x4}, {0x3f, 0x1}, {0x3, 0x4}, {0x2}, {0x1f, 0x1}, {0xf8, 0x3}, {0x1, 0x5}], "2f10c13b1320f82b"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0x3, 0x7}, {0x7, 0x4}, {0x4, 0x7}, {0x2, 0x1}, {0x1f, 0x7}, {0xa5, 0x4}, {0x65, 0x4}, {0x9, 0x7}], "be02396e2de23506"}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) ioctl$CDROM_MEDIA_CHANGED(r2, 0x5325, 0x8) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x42000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x24, r3, 0x4, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_STA_TX_POWER={0x6}]}, 0x24}}, 0x4850) ioctl$sock_ifreq(r1, 0xa9, &(0x7f0000000800)={'syzkaller0\x00', @ifru_settings={0x0, 0x0, @te1=&(0x7f00000007c0)={0x9, 0x3, 0x3, 0x48}}}) sysinfo(&(0x7f0000000840)=""/122) syz_genetlink_get_family_id$team(&(0x7f00000008c0), r2) r5 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000900)) sendmsg$802154_raw(r5, &(0x7f0000000a80)={0xfffffffffffffffe, 0x0, &(0x7f0000000a40)={&(0x7f0000000940)="b76454b20b7ab7f1c8f2524461f12070545d1eaac1636e80e8b1fed838f1018c6633b7d8e36172997d2afb57dcab6a5f1cd483e57e6b4697785a368b03b102b25fde82e84038f42064c7cad207a57446f8ed4eb3e6dc4b6760792505f5cc2e345b10dc6d4d6ab4cc364d4cfb1601034f43aa75fd6ac2549b0998f57de30e4c64aaf217669dcb49b67c92f4a65144ff327c13128c159f09d4ca472303d76af4b7fd7c200e74ababf9c8fb3b777ed62c0aec7491bda64fb32af670f2f69d437f8fd16ca9e3290ea83118ee05a7a6e61742eaca354a89760c8be7a15d65c1ce1e91589eac53386e2680992aaa57", 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x4001) accept(r0, &(0x7f0000000ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000b40)=0x80) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000e00)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, r5, 0x0, &(0x7f0000000dc0)={&(0x7f0000000b80)=@nl=@proc, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000c00)=""/219, 0xdb}, {&(0x7f0000000d00)=""/31, 0x1f}], 0x2, &(0x7f0000000d80)=""/60, 0x3c}, 0x0, 0x12100, 0x1, {0x1}}, 0x7) 13:15:48 executing program 1: socketpair(0x2, 0x4, 0xfffffe9b, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x40, 0x0, 0x5, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x18}, 0x7800, 0x8000, 0xfffffffa, 0x233a}}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000100)={0x0, @loopback, @loopback}, &(0x7f0000000140)=0xc) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xad) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000200)) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/hci_vhci', 0x30000, 0x8) getsockopt$inet6_tcp_int(r4, 0x6, 0x5, &(0x7f0000000280), &(0x7f00000002c0)=0x4) recvmmsg(r0, &(0x7f0000003ac0)=[{{&(0x7f0000000300)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/238, 0xee}, {&(0x7f0000000480)=""/16, 0x10}, {&(0x7f00000004c0)=""/194, 0xc2}, {&(0x7f00000005c0)=""/206, 0xce}, {&(0x7f00000006c0)=""/52, 0x34}, {&(0x7f0000000700)=""/180, 0xb4}], 0x6, &(0x7f0000000840)=""/48, 0x30}, 0xbe4}, {{&(0x7f0000000880)=@can, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/55, 0x37}, {&(0x7f0000000940)=""/159, 0x9f}, {&(0x7f0000000a00)=""/72, 0x48}, {&(0x7f0000000a80)=""/165, 0xa5}, {&(0x7f0000000b40)=""/214, 0xd6}, {&(0x7f0000000c40)=""/120, 0x78}, {&(0x7f0000000cc0)=""/4096, 0x1000}], 0x7, &(0x7f0000001d40)=""/55, 0x37}}, {{&(0x7f0000001d80)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000001fc0)=[{&(0x7f0000001e00)=""/246, 0xf6}, {&(0x7f0000001f00)=""/142, 0x8e}], 0x2, &(0x7f0000002000)=""/216, 0xd8}, 0x7}, {{0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000002140)=""/221, 0xdd}, 0x3}, {{&(0x7f0000002240)=@tipc=@name, 0x80, &(0x7f0000003500)=[{&(0x7f00000022c0)=""/122, 0x7a}, {&(0x7f0000002340)=""/184, 0xb8}, {&(0x7f0000002400)=""/68, 0x44}, {&(0x7f0000002480)=""/18, 0x12}, {&(0x7f00000024c0)=""/10, 0xa}, {&(0x7f0000002500)=""/4096, 0x1000}], 0x6, &(0x7f0000003580)=""/247, 0xf7}, 0x101}, {{&(0x7f0000003680)=@in={0x2, 0x0, @initdev}, 0x80, &(0x7f00000039c0)=[{&(0x7f0000003700)=""/142, 0x8e}, {&(0x7f00000037c0)=""/55, 0x37}, {&(0x7f0000003800)=""/226, 0xe2}, {&(0x7f0000003900)=""/129, 0x81}], 0x4, &(0x7f0000003a00)=""/175, 0xaf}, 0x9}], 0x6, 0x40000100, 0x0) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000003d40)={&(0x7f0000003c40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000003d00)={&(0x7f0000003c80)={0x5c, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x28}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_DOMAIN={0x9, 0x1, '!$(\xd2\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4014}, 0x20008080) r5 = socket(0x11, 0x3, 0x1) ioctl$sock_SIOCGIFCONF(r5, 0x8912, &(0x7f0000003dc0)=@req={0x28, &(0x7f0000003d80)={'veth0_to_hsr\x00', @ifru_flags}}) socketpair(0x2, 0x3, 0x80, &(0x7f0000003e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000004000)={'ip6tnl0\x00', &(0x7f0000003f80)={'syztnl2\x00', r3, 0x4, 0x0, 0x48, 0x8, 0x6c, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', 0x40, 0x40, 0x8001, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r7, 0x89f4, &(0x7f00000040c0)={'ip6_vti0\x00', &(0x7f0000004040)={'syztnl2\x00', r8, 0x29, 0x8, 0x0, 0x9, 0x64, @mcast1, @mcast2, 0x80, 0x8, 0x2, 0x9}}) r9 = accept(r6, &(0x7f0000004100)=@qipcrtr, &(0x7f0000004180)=0x80) getsockopt$inet6_tcp_buf(r9, 0x6, 0x1f, &(0x7f00000041c0)=""/113, &(0x7f0000004240)=0x71) syz_genetlink_get_family_id$nl80211(&(0x7f0000004280), r9) setsockopt$inet6_tcp_buf(r9, 0x6, 0x1c, &(0x7f00000042c0)="f13752d8c5aaf6511ad2b6c65e384ff767a81b2be50d70c8e190960799cc0afaa6d28ef4d68dd6241cb010aebfb78ed748cb2509b012ae3a6aaaf06a09631e9fb137ea2789b35e0ede25ed4f82fe846c350cdce613e43eab52f36e83dfe4b36c4ce1acbde6ab32a8307d54bd4e8a8bbd85dc32b084275897a7a63c4689f74ceac6d2289a82b4dcfe337a0700425af7c44d4915cd7fe2fa7ad36620760376c2fc4534c7f27228f7d839f7da9d8b76118b1c0413421fcc068ccbe2d9808395f4fcd3afa112c54a7d20ea2f806168c315522ea000af71218ab486a299749d8960b5d45e2b50402ce850a812b4e0dde3fd5e8a1242d066c3bf", 0xf7) 13:15:48 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000002d40)={'syztnl1\x00', &(0x7f0000002cc0)={'syztnl1\x00', 0x0, 0x29, 0xe0, 0x9, 0x3, 0x20, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8, 0x7, 0x5, 0xad3}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000002e00)={'syztnl1\x00', &(0x7f0000002d80)={'syztnl2\x00', r1, 0x29, 0x1f, 0x8, 0x5a34e2c7, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x20, 0x7800, 0xd83, 0x1f}}) r2 = accept(r0, &(0x7f0000002e40)=@nfc_llcp, &(0x7f0000002ec0)=0x80) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, &(0x7f0000002f80)={'syztnl1\x00', &(0x7f0000002f00)={'syztnl0\x00', r1, 0x0, 0xff, 0x0, 0x9, 0x2, @loopback, @mcast2, 0x1, 0x700, 0xfffffff7, 0x3}}) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000002fc0)) sysinfo(&(0x7f0000003000)=""/97) rt_sigtimedwait(&(0x7f0000003080)={[0x1]}, &(0x7f00000030c0), &(0x7f0000003140), 0x8) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000003180)={'wlan0\x00', 0x0}) r6 = socket(0xb, 0x7, 0xfffffffc) sendmsg$NL80211_CMD_NEW_KEY(r6, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x24, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "ad60d5f4b1"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x20000000) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f00000032c0)) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000003300)='/sys/kernel/slab', 0x4040, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000033c0)={'syztnl1\x00', &(0x7f0000003340)={'ip6_vti0\x00', 0x0, 0x29, 0x9, 0x7, 0xfffff3f4, 0x3c, @private2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x40, 0xab7, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r7, 0x89f7, &(0x7f0000003480)={'syztnl1\x00', &(0x7f0000003400)={'ip6_vti0\x00', r8, 0x29, 0x80, 0x1, 0x2, 0x8, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @local, 0x1, 0x20, 0x1, 0x9}}) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000034c0)='/sys/module/nf_conntrack', 0x610001, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r9, &(0x7f00000035c0)={&(0x7f0000003500)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003580)={&(0x7f0000003540)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x840) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000003680)={'ip6_vti0\x00', &(0x7f0000003600)={'ip6_vti0\x00', r1, 0x29, 0x7f, 0x1e, 0x513, 0x30, @rand_addr=' \x01\x00', @mcast1, 0x20, 0x10, 0x4, 0x81000000}}) 13:15:48 executing program 3: clock_nanosleep(0x1, 0x1, &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f0000000040)) r0 = getpgrp(0x0) sched_rr_get_interval(r0, &(0x7f0000000080)) r1 = getpgrp(r0) sched_rr_get_interval(r1, &(0x7f00000000c0)) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000100)={[0x5ab]}, &(0x7f0000000140), &(0x7f0000000200)={r2, r3+60000000}, 0x8) r4 = getpgrp(r1) waitid(0x3, r4, &(0x7f0000000240), 0x20000000, &(0x7f00000002c0)) sched_rr_get_interval(r4, &(0x7f0000000380)) clock_nanosleep(0x2, 0x0, &(0x7f00000003c0)={0x77359400}, &(0x7f0000000400)) timer_create(0x0, &(0x7f0000000440)={0x0, 0x3c, 0x4, @tid=r0}, &(0x7f0000000480)) wait4(r0, &(0x7f00000004c0), 0x8, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000a40)=[{{&(0x7f0000000500), 0x80, &(0x7f0000000600)=[{&(0x7f0000000580)=""/92, 0x5c}], 0x1, &(0x7f0000000640)=""/61, 0x3d}, 0x1}, {{&(0x7f0000000680)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000700)=""/217, 0xd9}, {&(0x7f0000000800)=""/165, 0xa5}, {&(0x7f00000008c0)}, {&(0x7f0000000900)=""/247, 0xf7}], 0x4}, 0x10000}], 0x2, 0x12041, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r4) r5 = gettid() waitid(0x2, r5, &(0x7f0000000ac0), 0x2, &(0x7f0000000b40)) ioctl$sock_ifreq(0xffffffffffffffff, 0x8932, &(0x7f0000000c00)={'veth1_to_batadv\x00', @ifru_names}) sched_rr_get_interval(r5, &(0x7f0000000c40)) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000008, 0x10, 0xffffffffffffffff, 0x10000000) 13:15:48 executing program 4: ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000000)={0x5, 0x1, 0x4, 0x1, 0x6}) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0x80, 0x80) socket$inet(0x2, 0x800, 0x4) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000080)=""/4096) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000001100)={'ip6gre0\x00', &(0x7f0000001080)={'syztnl0\x00', 0x0, 0x2f, 0x72, 0x4, 0x7f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, 0x40, 0x40, 0x5, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000011c0)={'ip6gre0\x00', &(0x7f0000001140)={'syztnl2\x00', r1, 0x2f, 0xf7, 0xfe, 0x4, 0x8, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x20, 0xfe2, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000001280)={'syztnl0\x00', &(0x7f0000001200)={'ip6gre0\x00', r2, 0x4, 0x2, 0x4, 0xffffffff, 0x12, @mcast1, @loopback, 0x7800, 0x8, 0xbc, 0xd96}}) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001300), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x38, r4, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x402c890}, 0x40000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r5}}, 0x21) r6 = syz_genetlink_get_family_id$team(&(0x7f0000001480), r0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000015c0)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={0x90, r6, 0x12, 0x70bd26, 0x25dfdbfc, {}, [{{0x8, 0x1, r3}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x8000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001740)={'ip_vti0\x00', &(0x7f0000001600)={'ip_vti0\x00', r2, 0x7800, 0x0, 0x7ba6, 0x3, {{0x3f, 0x4, 0x0, 0x23, 0xfc, 0x67, 0x0, 0xff, 0x4, 0x0, @private=0xa010100, @empty, {[@generic={0x0, 0xa, "40ebf02080ba2927"}, @timestamp_prespec={0x44, 0xc, 0x43, 0x3, 0x4, [{@loopback, 0x100}]}, @cipso={0x86, 0x51, 0x2, [{0x2, 0x4, "ca84"}, {0x1, 0xe, "0fb6e4ebf725212a1f4921ab"}, {0x0, 0x10, "4e91c861d05464ee62c7e2524b76"}, {0x0, 0x12, "b421989cb68da381e74d9a94bb264171"}, {0x2, 0x8, "0c43715770af"}, {0x7, 0xf, "3af348b6e9faa379f4f34958e2"}]}, @rr={0x7, 0xf, 0x65, [@empty, @dev={0xac, 0x14, 0x14, 0x10}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_prespec={0x44, 0x34, 0xbd, 0x3, 0x2, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1ff}, {@multicast2, 0xbc}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x1}, {@rand_addr=0x64010102, 0xa5f}, {@remote}, {@private=0xa010101, 0x2}]}, @timestamp_prespec={0x44, 0x14, 0x52, 0x3, 0xc, [{@local, 0xff}, {@loopback, 0x7ff}]}, @ssrr={0x89, 0xb, 0x67, [@remote, @empty]}, @cipso={0x86, 0x1c, 0x0, [{0x1, 0x8, "09576fd99f05"}, {0x5, 0xe, "3b7b886315736799754d0f1e"}]}, @noop]}}}}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_VLAN(r7, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x24, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x401}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x80000001}]}, 0x24}, 0x1, 0x0, 0x0, 0x8}, 0x20000000) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001940)={&(0x7f00000018c0)={0x44, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x11}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0xa}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x9}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000044}, 0x804) r8 = socket(0x2c, 0x6, 0x7ff) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r8, 0x89fa, &(0x7f0000001a40)={'syztnl0\x00', &(0x7f00000019c0)={'ip6_vti0\x00', r2, 0x4, 0x8, 0x3, 0x7, 0xa, @mcast1, @loopback, 0x7, 0x7800, 0x0, 0xffff}}) io_uring_setup(0x4cfd, &(0x7f0000001a80)={0x0, 0xe6d8, 0x2, 0x1, 0x150}) 13:15:48 executing program 7: ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000001040)={&(0x7f0000000000), &(0x7f0000000040)=""/4096, 0x1000}) tkill(0x0, 0x13) waitid(0x1, 0xffffffffffffffff, &(0x7f0000001080), 0x1, &(0x7f0000001100)) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001280)={&(0x7f0000001200)={0x60, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x400, 0x60}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xe}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xb}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x9}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xf}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x40004}, 0x10) r0 = syz_open_dev$usbmon(&(0x7f0000001300), 0x1, 0x52401) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000002380)={&(0x7f0000001340), &(0x7f0000001380)=""/4096, 0x1000}) r1 = gettid() getpgrp(r1) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000002480)={&(0x7f00000023c0), &(0x7f0000002400)=""/97, 0x61}) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f0000002600)={&(0x7f00000024c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000002500)=""/226, 0xe2}) r2 = accept(0xffffffffffffffff, 0x0, &(0x7f0000002640)) clock_gettime(0x0, &(0x7f0000006e00)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000006c80)=[{{&(0x7f0000002680)=@l2, 0x80, &(0x7f0000002800)=[{&(0x7f0000002700)=""/218, 0xda}], 0x1, &(0x7f0000002840)=""/31, 0x1f}, 0x40}, {{&(0x7f0000002880)=@generic, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002900)=""/4096, 0x1000}, {&(0x7f0000003900)=""/16, 0x10}, {&(0x7f0000003940)=""/205, 0xcd}, {&(0x7f0000003a40)=""/157, 0x9d}, {&(0x7f0000003b00)=""/140, 0x8c}, {&(0x7f0000003bc0)=""/192, 0xc0}, {&(0x7f0000003c80)=""/4096, 0x1000}], 0x7, &(0x7f0000004d00)=""/148, 0x94}, 0xd5}, {{&(0x7f0000004dc0)=@can, 0x80, &(0x7f0000004f80)=[{&(0x7f0000004e40)=""/17, 0x11}, {&(0x7f0000004e80)=""/241, 0xf1}], 0x2}, 0xa0}, {{&(0x7f0000004fc0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000005440)=[{&(0x7f0000005040)=""/229, 0xe5}, {&(0x7f0000005140)=""/140, 0x8c}, {&(0x7f0000005200)=""/246, 0xf6}, {&(0x7f0000005300)=""/223, 0xdf}, {&(0x7f0000005400)=""/41, 0x29}], 0x5, &(0x7f00000054c0)=""/44, 0x2c}, 0x101}, {{&(0x7f0000005500)=@qipcrtr, 0x80, &(0x7f0000006a80)=[{&(0x7f0000005580)=""/4096, 0x1000}, {&(0x7f0000006580)=""/252, 0xfc}, {&(0x7f0000006680)=""/241, 0xf1}, {&(0x7f0000006780)=""/87, 0x57}, {&(0x7f0000006800)=""/254, 0xfe}, {&(0x7f0000006900)=""/90, 0x5a}, {&(0x7f0000006980)=""/225, 0xe1}], 0x7}}, {{0x0, 0x0, &(0x7f0000006bc0)=[{&(0x7f0000006b00)=""/145, 0x91}], 0x1, &(0x7f0000006c00)=""/81, 0x51}, 0x3ff}], 0x6, 0x1, &(0x7f0000006e40)={r3, r4+10000000}) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f0000006fc0)={&(0x7f0000006e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000006ec0)=""/206, 0xce}) sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f0000007140)={&(0x7f0000007000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000007100)={&(0x7f0000007040)={0x88, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x88}, 0x1, 0x0, 0x0, 0xc800}, 0x240088d0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000007200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x3, 0x2004, @fd_index=0x9, 0x10001, 0x0, 0x0, 0x17, 0x1, {0x3}}, 0x30) 13:15:48 executing program 1: socketpair(0x2, 0x4, 0xfffffe9b, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x40, 0x0, 0x5, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x18}, 0x7800, 0x8000, 0xfffffffa, 0x233a}}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000100)={0x0, @loopback, @loopback}, &(0x7f0000000140)=0xc) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xad) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000200)) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/hci_vhci', 0x30000, 0x8) getsockopt$inet6_tcp_int(r4, 0x6, 0x5, &(0x7f0000000280), &(0x7f00000002c0)=0x4) recvmmsg(r0, &(0x7f0000003ac0)=[{{&(0x7f0000000300)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/238, 0xee}, {&(0x7f0000000480)=""/16, 0x10}, {&(0x7f00000004c0)=""/194, 0xc2}, {&(0x7f00000005c0)=""/206, 0xce}, {&(0x7f00000006c0)=""/52, 0x34}, {&(0x7f0000000700)=""/180, 0xb4}], 0x6, &(0x7f0000000840)=""/48, 0x30}, 0xbe4}, {{&(0x7f0000000880)=@can, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/55, 0x37}, {&(0x7f0000000940)=""/159, 0x9f}, {&(0x7f0000000a00)=""/72, 0x48}, {&(0x7f0000000a80)=""/165, 0xa5}, {&(0x7f0000000b40)=""/214, 0xd6}, {&(0x7f0000000c40)=""/120, 0x78}, {&(0x7f0000000cc0)=""/4096, 0x1000}], 0x7, &(0x7f0000001d40)=""/55, 0x37}}, {{&(0x7f0000001d80)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000001fc0)=[{&(0x7f0000001e00)=""/246, 0xf6}, {&(0x7f0000001f00)=""/142, 0x8e}], 0x2, &(0x7f0000002000)=""/216, 0xd8}, 0x7}, {{0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000002140)=""/221, 0xdd}, 0x3}, {{&(0x7f0000002240)=@tipc=@name, 0x80, &(0x7f0000003500)=[{&(0x7f00000022c0)=""/122, 0x7a}, {&(0x7f0000002340)=""/184, 0xb8}, {&(0x7f0000002400)=""/68, 0x44}, {&(0x7f0000002480)=""/18, 0x12}, {&(0x7f00000024c0)=""/10, 0xa}, {&(0x7f0000002500)=""/4096, 0x1000}], 0x6, &(0x7f0000003580)=""/247, 0xf7}, 0x101}, {{&(0x7f0000003680)=@in={0x2, 0x0, @initdev}, 0x80, &(0x7f00000039c0)=[{&(0x7f0000003700)=""/142, 0x8e}, {&(0x7f00000037c0)=""/55, 0x37}, {&(0x7f0000003800)=""/226, 0xe2}, {&(0x7f0000003900)=""/129, 0x81}], 0x4, &(0x7f0000003a00)=""/175, 0xaf}, 0x9}], 0x6, 0x40000100, 0x0) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000003d40)={&(0x7f0000003c40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000003d00)={&(0x7f0000003c80)={0x5c, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x28}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_DOMAIN={0x9, 0x1, '!$(\xd2\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4014}, 0x20008080) r5 = socket(0x11, 0x3, 0x1) ioctl$sock_SIOCGIFCONF(r5, 0x8912, &(0x7f0000003dc0)=@req={0x28, &(0x7f0000003d80)={'veth0_to_hsr\x00', @ifru_flags}}) socketpair(0x2, 0x3, 0x80, &(0x7f0000003e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000004000)={'ip6tnl0\x00', &(0x7f0000003f80)={'syztnl2\x00', r3, 0x4, 0x0, 0x48, 0x8, 0x6c, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', 0x40, 0x40, 0x8001, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r7, 0x89f4, &(0x7f00000040c0)={'ip6_vti0\x00', &(0x7f0000004040)={'syztnl2\x00', r8, 0x29, 0x8, 0x0, 0x9, 0x64, @mcast1, @mcast2, 0x80, 0x8, 0x2, 0x9}}) r9 = accept(r6, &(0x7f0000004100)=@qipcrtr, &(0x7f0000004180)=0x80) getsockopt$inet6_tcp_buf(r9, 0x6, 0x1f, &(0x7f00000041c0)=""/113, &(0x7f0000004240)=0x71) syz_genetlink_get_family_id$nl80211(&(0x7f0000004280), r9) setsockopt$inet6_tcp_buf(r9, 0x6, 0x1c, &(0x7f00000042c0)="f13752d8c5aaf6511ad2b6c65e384ff767a81b2be50d70c8e190960799cc0afaa6d28ef4d68dd6241cb010aebfb78ed748cb2509b012ae3a6aaaf06a09631e9fb137ea2789b35e0ede25ed4f82fe846c350cdce613e43eab52f36e83dfe4b36c4ce1acbde6ab32a8307d54bd4e8a8bbd85dc32b084275897a7a63c4689f74ceac6d2289a82b4dcfe337a0700425af7c44d4915cd7fe2fa7ad36620760376c2fc4534c7f27228f7d839f7da9d8b76118b1c0413421fcc068ccbe2d9808395f4fcd3afa112c54a7d20ea2f806168c315522ea000af71218ab486a299749d8960b5d45e2b50402ce850a812b4e0dde3fd5e8a1242d066c3bf", 0xf7) 13:15:48 executing program 2: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)="3c83aba66cc4e07e77a76c5edaaaeb2c142196dcb4948d1bea7cc7c56c0522d946cb5ac4231e337744cd43286b5d06c909b77ba0b1dfa735763b470323ffa9785312df86d54ab56c63f169c855da890385e79ba7c12224570381988ffe8d2b65a733b2b77981ee7865d86a0dd49f2d3d71ba26e167eb653682c8fb6d85ea2cee1876e5e45d8d6f35f9920ea42fd04de7fa1e08de2e345b5c79da16e0f38f87b93c79d554bdf32aa1cdf40cebec88412bea62d90d3915360fdeab0e5ac3a9df3b64a91136855c82d51ab174ac5cd6bd6b9d223bcd6f79ffce263b54bd9999c01459a72d54dffa20773c8d28d00c5e0ea136538365", 0xf4}, 0x1, 0x0, 0x0, 0x4000}, 0x20000001) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000180)) sysinfo(&(0x7f00000001c0)=""/142) ioctl$sock_ifreq(r1, 0x8931, &(0x7f0000000280)={'batadv_slave_0\x00', @ifru_addrs=@in={0x2, 0x0, @local}}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/bus/platform', 0x16001, 0x9) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r3, 0x2, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000090) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f00000004c0)={0x14c, r3, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x81, 0x6}, {0xe9, 0x1}, {0x6, 0x5}, {0x2d, 0x6}, {0x81, 0x2}, {0x3f, 0x6}, {0x8, 0x2}, {0x1, 0x7}, {0x48, 0x5}, {0x80, 0x5}, {0xff, 0x6}, {0x2, 0x5}], "c1060bf1205e1788"}}, @NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x5, 0x6}, {0x2, 0x5}, {0x5, 0x7}, {0xff, 0x7}, {0x0, 0x5}, {0x3, 0x2}, {0xfa, 0x2}, {0x1, 0x7}, {0x0, 0x2}, {0x6f}, {}, {0x7, 0x7}, {0x81, 0x7}, {0x6, 0x7}, {0x7, 0x7}, {0x4, 0x5}, {0x1f}, {0x5, 0x4}], "98cb2e5ab9500d0c"}}, @NL80211_ATTR_QOS_MAP={0xe, 0xc7, {[{0x81, 0x6}], "57fcf5f60644f176"}}, @NL80211_ATTR_QOS_MAP={0x34, 0xc7, {[{0x1, 0x7}, {0xff, 0x3}, {0x4, 0x1}, {0x40}, {0x8, 0x6}, {0x6, 0x2}, {0x5b, 0x6}, {0x40, 0x6}, {0x5, 0x2}, {0x2, 0x3}, {0xff, 0x1}, {0x7, 0x5}, {0x81, 0x6}, {0x1}, {0xfa, 0x7}, {0xb2, 0x7}, {0x6, 0x7}, {0x2, 0x5}, {0x7f, 0x4}, {0x9}], "c94f799edde58374"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "71a679bb7dfeab0b"}}, @NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0x3f, 0x3}, {0x15, 0x1}, {0xc0, 0x4}, {0x3}, {0x1, 0x7}, {0x9, 0x7}, {0x6}, {0x4, 0x3}, {0x0, 0x3}, {0x7, 0x2}, {0xd4, 0x7}, {0x1, 0x4}, {0x4}, {0x6, 0x7}], "73aa28212d51194b"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0xff, 0x5}, {0x2, 0x1}, {0x7, 0x5}, {0x2, 0x2}, {0x1, 0x6}, {0x6, 0x5}, {0xa1}, {0x1, 0x1}], "402ab314775a4ac1"}}, @NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0x40, 0x3}, {0x20, 0x7}, {0x9, 0x1}, {0x3, 0x2}, {0x40, 0x6}, {0x2, 0x4}, {0x3a, 0x6}, {0x20, 0x6}, {0x0, 0x4}, {0x7f, 0x7}, {0x1, 0x7}, {0x8, 0x3}, {0x7, 0x4}, {0x3f, 0x1}, {0x3, 0x4}, {0x2}, {0x1f, 0x1}, {0xf8, 0x3}, {0x1, 0x5}], "2f10c13b1320f82b"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0x3, 0x7}, {0x7, 0x4}, {0x4, 0x7}, {0x2, 0x1}, {0x1f, 0x7}, {0xa5, 0x4}, {0x65, 0x4}, {0x9, 0x7}], "be02396e2de23506"}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) ioctl$CDROM_MEDIA_CHANGED(r2, 0x5325, 0x8) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x42000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x24, r3, 0x4, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_STA_TX_POWER={0x6}]}, 0x24}}, 0x4850) ioctl$sock_ifreq(r1, 0xa9, &(0x7f0000000800)={'syzkaller0\x00', @ifru_settings={0x0, 0x0, @te1=&(0x7f00000007c0)={0x9, 0x3, 0x3, 0x48}}}) sysinfo(&(0x7f0000000840)=""/122) syz_genetlink_get_family_id$team(&(0x7f00000008c0), r2) r5 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000900)) sendmsg$802154_raw(r5, &(0x7f0000000a80)={0xfffffffffffffffe, 0x0, &(0x7f0000000a40)={&(0x7f0000000940)="b76454b20b7ab7f1c8f2524461f12070545d1eaac1636e80e8b1fed838f1018c6633b7d8e36172997d2afb57dcab6a5f1cd483e57e6b4697785a368b03b102b25fde82e84038f42064c7cad207a57446f8ed4eb3e6dc4b6760792505f5cc2e345b10dc6d4d6ab4cc364d4cfb1601034f43aa75fd6ac2549b0998f57de30e4c64aaf217669dcb49b67c92f4a65144ff327c13128c159f09d4ca472303d76af4b7fd7c200e74ababf9c8fb3b777ed62c0aec7491bda64fb32af670f2f69d437f8fd16ca9e3290ea83118ee05a7a6e61742eaca354a89760c8be7a15d65c1ce1e91589eac53386e2680992aaa57", 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x4001) accept(r0, &(0x7f0000000ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000b40)=0x80) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000e00)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, r5, 0x0, &(0x7f0000000dc0)={&(0x7f0000000b80)=@nl=@proc, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000c00)=""/219, 0xdb}, {&(0x7f0000000d00)=""/31, 0x1f}], 0x2, &(0x7f0000000d80)=""/60, 0x3c}, 0x0, 0x12100, 0x1, {0x1}}, 0x7) 13:15:48 executing program 7: ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000001040)={&(0x7f0000000000), &(0x7f0000000040)=""/4096, 0x1000}) tkill(0x0, 0x13) waitid(0x1, 0xffffffffffffffff, &(0x7f0000001080), 0x1, &(0x7f0000001100)) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001280)={&(0x7f0000001200)={0x60, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x400, 0x60}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xe}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xb}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x9}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xf}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x40004}, 0x10) r0 = syz_open_dev$usbmon(&(0x7f0000001300), 0x1, 0x52401) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000002380)={&(0x7f0000001340), &(0x7f0000001380)=""/4096, 0x1000}) r1 = gettid() getpgrp(r1) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000002480)={&(0x7f00000023c0), &(0x7f0000002400)=""/97, 0x61}) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f0000002600)={&(0x7f00000024c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000002500)=""/226, 0xe2}) r2 = accept(0xffffffffffffffff, 0x0, &(0x7f0000002640)) clock_gettime(0x0, &(0x7f0000006e00)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000006c80)=[{{&(0x7f0000002680)=@l2, 0x80, &(0x7f0000002800)=[{&(0x7f0000002700)=""/218, 0xda}], 0x1, &(0x7f0000002840)=""/31, 0x1f}, 0x40}, {{&(0x7f0000002880)=@generic, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002900)=""/4096, 0x1000}, {&(0x7f0000003900)=""/16, 0x10}, {&(0x7f0000003940)=""/205, 0xcd}, {&(0x7f0000003a40)=""/157, 0x9d}, {&(0x7f0000003b00)=""/140, 0x8c}, {&(0x7f0000003bc0)=""/192, 0xc0}, {&(0x7f0000003c80)=""/4096, 0x1000}], 0x7, &(0x7f0000004d00)=""/148, 0x94}, 0xd5}, {{&(0x7f0000004dc0)=@can, 0x80, &(0x7f0000004f80)=[{&(0x7f0000004e40)=""/17, 0x11}, {&(0x7f0000004e80)=""/241, 0xf1}], 0x2}, 0xa0}, {{&(0x7f0000004fc0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000005440)=[{&(0x7f0000005040)=""/229, 0xe5}, {&(0x7f0000005140)=""/140, 0x8c}, {&(0x7f0000005200)=""/246, 0xf6}, {&(0x7f0000005300)=""/223, 0xdf}, {&(0x7f0000005400)=""/41, 0x29}], 0x5, &(0x7f00000054c0)=""/44, 0x2c}, 0x101}, {{&(0x7f0000005500)=@qipcrtr, 0x80, &(0x7f0000006a80)=[{&(0x7f0000005580)=""/4096, 0x1000}, {&(0x7f0000006580)=""/252, 0xfc}, {&(0x7f0000006680)=""/241, 0xf1}, {&(0x7f0000006780)=""/87, 0x57}, {&(0x7f0000006800)=""/254, 0xfe}, {&(0x7f0000006900)=""/90, 0x5a}, {&(0x7f0000006980)=""/225, 0xe1}], 0x7}}, {{0x0, 0x0, &(0x7f0000006bc0)=[{&(0x7f0000006b00)=""/145, 0x91}], 0x1, &(0x7f0000006c00)=""/81, 0x51}, 0x3ff}], 0x6, 0x1, &(0x7f0000006e40)={r3, r4+10000000}) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f0000006fc0)={&(0x7f0000006e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000006ec0)=""/206, 0xce}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000007200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x3, 0x2004, @fd_index=0x9, 0x10001, 0x0, 0x0, 0x17, 0x1, {0x3}}, 0x30) 13:15:48 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/processor', 0x0, 0x9) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x20008824) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2) r1 = io_uring_setup(0x37c5, &(0x7f0000000140)={0x0, 0x708f, 0x0, 0x1, 0x15}) socketpair(0x27, 0x5, 0xf8, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000200)={'ip6tnl0\x00', 0x0, 0x29, 0x8, 0x0, 0x3, 0x45, @mcast1, @remote, 0x80, 0x80, 0x1f, 0x800}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000400)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r3, 0x4, 0xb4, 0x6, 0x7, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, 0x40, 0x40, 0x3, 0x3ff}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000440)={'syztnl2\x00', r4, 0x4, 0x5f, 0x61, 0x0, 0x70, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x80, 0x8000, 0x81, 0x3ff}}) r5 = shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ff9000/0x4000)=nil) shmctl$SHM_UNLOCK(r5, 0xc) waitid(0x1, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000500)) timer_create(0x2, &(0x7f00000005c0)={0x0, 0x2b, 0x2}, &(0x7f0000000600)=0x0) timer_gettime(r6, &(0x7f0000000640)) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x110, r1, 0x8000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000680)) waitid(0x0, 0x0, &(0x7f00000006c0), 0x1, &(0x7f0000000740)) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/module/snd_pcm', 0x14001, 0xc0) ioctl$EVIOCGKEYCODE_V2(r8, 0x80284504, &(0x7f0000000840)=""/171) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) syz_io_uring_submit(r7, 0x0, &(0x7f0000000a40)=@IORING_OP_STATX={0x15, 0x4, 0x0, r8, &(0x7f0000000900), &(0x7f0000000a00)='./file0\x00', 0x20, 0x2000}, 0x3) 13:15:48 executing program 4: ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000000)={0x5, 0x1, 0x4, 0x1, 0x6}) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0x80, 0x80) socket$inet(0x2, 0x800, 0x4) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000080)=""/4096) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000001100)={'ip6gre0\x00', &(0x7f0000001080)={'syztnl0\x00', 0x0, 0x2f, 0x72, 0x4, 0x7f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, 0x40, 0x40, 0x5, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000011c0)={'ip6gre0\x00', &(0x7f0000001140)={'syztnl2\x00', r1, 0x2f, 0xf7, 0xfe, 0x4, 0x8, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x20, 0xfe2, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000001280)={'syztnl0\x00', &(0x7f0000001200)={'ip6gre0\x00', r2, 0x4, 0x2, 0x4, 0xffffffff, 0x12, @mcast1, @loopback, 0x7800, 0x8, 0xbc, 0xd96}}) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001300), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x38, r4, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x402c890}, 0x40000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r5}}, 0x21) r6 = syz_genetlink_get_family_id$team(&(0x7f0000001480), r0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000015c0)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={0x90, r6, 0x12, 0x70bd26, 0x25dfdbfc, {}, [{{0x8, 0x1, r3}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x8000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001740)={'ip_vti0\x00', &(0x7f0000001600)={'ip_vti0\x00', r2, 0x7800, 0x0, 0x7ba6, 0x3, {{0x3f, 0x4, 0x0, 0x23, 0xfc, 0x67, 0x0, 0xff, 0x4, 0x0, @private=0xa010100, @empty, {[@generic={0x0, 0xa, "40ebf02080ba2927"}, @timestamp_prespec={0x44, 0xc, 0x43, 0x3, 0x4, [{@loopback, 0x100}]}, @cipso={0x86, 0x51, 0x2, [{0x2, 0x4, "ca84"}, {0x1, 0xe, "0fb6e4ebf725212a1f4921ab"}, {0x0, 0x10, "4e91c861d05464ee62c7e2524b76"}, {0x0, 0x12, "b421989cb68da381e74d9a94bb264171"}, {0x2, 0x8, "0c43715770af"}, {0x7, 0xf, "3af348b6e9faa379f4f34958e2"}]}, @rr={0x7, 0xf, 0x65, [@empty, @dev={0xac, 0x14, 0x14, 0x10}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_prespec={0x44, 0x34, 0xbd, 0x3, 0x2, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1ff}, {@multicast2, 0xbc}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x1}, {@rand_addr=0x64010102, 0xa5f}, {@remote}, {@private=0xa010101, 0x2}]}, @timestamp_prespec={0x44, 0x14, 0x52, 0x3, 0xc, [{@local, 0xff}, {@loopback, 0x7ff}]}, @ssrr={0x89, 0xb, 0x67, [@remote, @empty]}, @cipso={0x86, 0x1c, 0x0, [{0x1, 0x8, "09576fd99f05"}, {0x5, 0xe, "3b7b886315736799754d0f1e"}]}, @noop]}}}}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_VLAN(r7, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x24, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x401}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x80000001}]}, 0x24}, 0x1, 0x0, 0x0, 0x8}, 0x20000000) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001940)={&(0x7f00000018c0)={0x44, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x11}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0xa}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x9}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000044}, 0x804) r8 = socket(0x2c, 0x6, 0x7ff) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r8, 0x89fa, &(0x7f0000001a40)={'syztnl0\x00', &(0x7f00000019c0)={'ip6_vti0\x00', r2, 0x4, 0x8, 0x3, 0x7, 0xa, @mcast1, @loopback, 0x7, 0x7800, 0x0, 0xffff}}) io_uring_setup(0x4cfd, &(0x7f0000001a80)={0x0, 0xe6d8, 0x2, 0x1, 0x150}) 13:15:48 executing program 1: socketpair(0x2, 0x4, 0xfffffe9b, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x40, 0x0, 0x5, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x18}, 0x7800, 0x8000, 0xfffffffa, 0x233a}}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000100)={0x0, @loopback, @loopback}, &(0x7f0000000140)=0xc) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xad) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000200)) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/hci_vhci', 0x30000, 0x8) getsockopt$inet6_tcp_int(r4, 0x6, 0x5, &(0x7f0000000280), &(0x7f00000002c0)=0x4) recvmmsg(r0, &(0x7f0000003ac0)=[{{&(0x7f0000000300)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/238, 0xee}, {&(0x7f0000000480)=""/16, 0x10}, {&(0x7f00000004c0)=""/194, 0xc2}, {&(0x7f00000005c0)=""/206, 0xce}, {&(0x7f00000006c0)=""/52, 0x34}, {&(0x7f0000000700)=""/180, 0xb4}], 0x6, &(0x7f0000000840)=""/48, 0x30}, 0xbe4}, {{&(0x7f0000000880)=@can, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/55, 0x37}, {&(0x7f0000000940)=""/159, 0x9f}, {&(0x7f0000000a00)=""/72, 0x48}, {&(0x7f0000000a80)=""/165, 0xa5}, {&(0x7f0000000b40)=""/214, 0xd6}, {&(0x7f0000000c40)=""/120, 0x78}, {&(0x7f0000000cc0)=""/4096, 0x1000}], 0x7, &(0x7f0000001d40)=""/55, 0x37}}, {{&(0x7f0000001d80)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000001fc0)=[{&(0x7f0000001e00)=""/246, 0xf6}, {&(0x7f0000001f00)=""/142, 0x8e}], 0x2, &(0x7f0000002000)=""/216, 0xd8}, 0x7}, {{0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000002140)=""/221, 0xdd}, 0x3}, {{&(0x7f0000002240)=@tipc=@name, 0x80, &(0x7f0000003500)=[{&(0x7f00000022c0)=""/122, 0x7a}, {&(0x7f0000002340)=""/184, 0xb8}, {&(0x7f0000002400)=""/68, 0x44}, {&(0x7f0000002480)=""/18, 0x12}, {&(0x7f00000024c0)=""/10, 0xa}, {&(0x7f0000002500)=""/4096, 0x1000}], 0x6, &(0x7f0000003580)=""/247, 0xf7}, 0x101}, {{&(0x7f0000003680)=@in={0x2, 0x0, @initdev}, 0x80, &(0x7f00000039c0)=[{&(0x7f0000003700)=""/142, 0x8e}, {&(0x7f00000037c0)=""/55, 0x37}, {&(0x7f0000003800)=""/226, 0xe2}, {&(0x7f0000003900)=""/129, 0x81}], 0x4, &(0x7f0000003a00)=""/175, 0xaf}, 0x9}], 0x6, 0x40000100, 0x0) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000003d40)={&(0x7f0000003c40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000003d00)={&(0x7f0000003c80)={0x5c, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x28}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_DOMAIN={0x9, 0x1, '!$(\xd2\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4014}, 0x20008080) r5 = socket(0x11, 0x3, 0x1) ioctl$sock_SIOCGIFCONF(r5, 0x8912, &(0x7f0000003dc0)=@req={0x28, &(0x7f0000003d80)={'veth0_to_hsr\x00', @ifru_flags}}) socketpair(0x2, 0x3, 0x80, &(0x7f0000003e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000004000)={'ip6tnl0\x00', &(0x7f0000003f80)={'syztnl2\x00', r3, 0x4, 0x0, 0x48, 0x8, 0x6c, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', 0x40, 0x40, 0x8001, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r7, 0x89f4, &(0x7f00000040c0)={'ip6_vti0\x00', &(0x7f0000004040)={'syztnl2\x00', r8, 0x29, 0x8, 0x0, 0x9, 0x64, @mcast1, @mcast2, 0x80, 0x8, 0x2, 0x9}}) r9 = accept(r6, &(0x7f0000004100)=@qipcrtr, &(0x7f0000004180)=0x80) getsockopt$inet6_tcp_buf(r9, 0x6, 0x1f, &(0x7f00000041c0)=""/113, &(0x7f0000004240)=0x71) syz_genetlink_get_family_id$nl80211(&(0x7f0000004280), r9) setsockopt$inet6_tcp_buf(r9, 0x6, 0x1c, &(0x7f00000042c0)="f13752d8c5aaf6511ad2b6c65e384ff767a81b2be50d70c8e190960799cc0afaa6d28ef4d68dd6241cb010aebfb78ed748cb2509b012ae3a6aaaf06a09631e9fb137ea2789b35e0ede25ed4f82fe846c350cdce613e43eab52f36e83dfe4b36c4ce1acbde6ab32a8307d54bd4e8a8bbd85dc32b084275897a7a63c4689f74ceac6d2289a82b4dcfe337a0700425af7c44d4915cd7fe2fa7ad36620760376c2fc4534c7f27228f7d839f7da9d8b76118b1c0413421fcc068ccbe2d9808395f4fcd3afa112c54a7d20ea2f806168c315522ea000af71218ab486a299749d8960b5d45e2b50402ce850a812b4e0dde3fd5e8a1242d066c3bf", 0xf7) 13:15:48 executing program 2: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)="3c83aba66cc4e07e77a76c5edaaaeb2c142196dcb4948d1bea7cc7c56c0522d946cb5ac4231e337744cd43286b5d06c909b77ba0b1dfa735763b470323ffa9785312df86d54ab56c63f169c855da890385e79ba7c12224570381988ffe8d2b65a733b2b77981ee7865d86a0dd49f2d3d71ba26e167eb653682c8fb6d85ea2cee1876e5e45d8d6f35f9920ea42fd04de7fa1e08de2e345b5c79da16e0f38f87b93c79d554bdf32aa1cdf40cebec88412bea62d90d3915360fdeab0e5ac3a9df3b64a91136855c82d51ab174ac5cd6bd6b9d223bcd6f79ffce263b54bd9999c01459a72d54dffa20773c8d28d00c5e0ea136538365", 0xf4}, 0x1, 0x0, 0x0, 0x4000}, 0x20000001) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000180)) sysinfo(&(0x7f00000001c0)=""/142) ioctl$sock_ifreq(r1, 0x8931, &(0x7f0000000280)={'batadv_slave_0\x00', @ifru_addrs=@in={0x2, 0x0, @local}}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/bus/platform', 0x16001, 0x9) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r3, 0x2, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000090) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f00000004c0)={0x14c, r3, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x81, 0x6}, {0xe9, 0x1}, {0x6, 0x5}, {0x2d, 0x6}, {0x81, 0x2}, {0x3f, 0x6}, {0x8, 0x2}, {0x1, 0x7}, {0x48, 0x5}, {0x80, 0x5}, {0xff, 0x6}, {0x2, 0x5}], "c1060bf1205e1788"}}, @NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x5, 0x6}, {0x2, 0x5}, {0x5, 0x7}, {0xff, 0x7}, {0x0, 0x5}, {0x3, 0x2}, {0xfa, 0x2}, {0x1, 0x7}, {0x0, 0x2}, {0x6f}, {}, {0x7, 0x7}, {0x81, 0x7}, {0x6, 0x7}, {0x7, 0x7}, {0x4, 0x5}, {0x1f}, {0x5, 0x4}], "98cb2e5ab9500d0c"}}, @NL80211_ATTR_QOS_MAP={0xe, 0xc7, {[{0x81, 0x6}], "57fcf5f60644f176"}}, @NL80211_ATTR_QOS_MAP={0x34, 0xc7, {[{0x1, 0x7}, {0xff, 0x3}, {0x4, 0x1}, {0x40}, {0x8, 0x6}, {0x6, 0x2}, {0x5b, 0x6}, {0x40, 0x6}, {0x5, 0x2}, {0x2, 0x3}, {0xff, 0x1}, {0x7, 0x5}, {0x81, 0x6}, {0x1}, {0xfa, 0x7}, {0xb2, 0x7}, {0x6, 0x7}, {0x2, 0x5}, {0x7f, 0x4}, {0x9}], "c94f799edde58374"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "71a679bb7dfeab0b"}}, @NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0x3f, 0x3}, {0x15, 0x1}, {0xc0, 0x4}, {0x3}, {0x1, 0x7}, {0x9, 0x7}, {0x6}, {0x4, 0x3}, {0x0, 0x3}, {0x7, 0x2}, {0xd4, 0x7}, {0x1, 0x4}, {0x4}, {0x6, 0x7}], "73aa28212d51194b"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0xff, 0x5}, {0x2, 0x1}, {0x7, 0x5}, {0x2, 0x2}, {0x1, 0x6}, {0x6, 0x5}, {0xa1}, {0x1, 0x1}], "402ab314775a4ac1"}}, @NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0x40, 0x3}, {0x20, 0x7}, {0x9, 0x1}, {0x3, 0x2}, {0x40, 0x6}, {0x2, 0x4}, {0x3a, 0x6}, {0x20, 0x6}, {0x0, 0x4}, {0x7f, 0x7}, {0x1, 0x7}, {0x8, 0x3}, {0x7, 0x4}, {0x3f, 0x1}, {0x3, 0x4}, {0x2}, {0x1f, 0x1}, {0xf8, 0x3}, {0x1, 0x5}], "2f10c13b1320f82b"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0x3, 0x7}, {0x7, 0x4}, {0x4, 0x7}, {0x2, 0x1}, {0x1f, 0x7}, {0xa5, 0x4}, {0x65, 0x4}, {0x9, 0x7}], "be02396e2de23506"}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) ioctl$CDROM_MEDIA_CHANGED(r2, 0x5325, 0x8) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x42000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x24, r3, 0x4, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_STA_TX_POWER={0x6}]}, 0x24}}, 0x4850) ioctl$sock_ifreq(r1, 0xa9, &(0x7f0000000800)={'syzkaller0\x00', @ifru_settings={0x0, 0x0, @te1=&(0x7f00000007c0)={0x9, 0x3, 0x3, 0x48}}}) sysinfo(&(0x7f0000000840)=""/122) syz_genetlink_get_family_id$team(&(0x7f00000008c0), r2) r5 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000900)) sendmsg$802154_raw(r5, &(0x7f0000000a80)={0xfffffffffffffffe, 0x0, &(0x7f0000000a40)={&(0x7f0000000940)="b76454b20b7ab7f1c8f2524461f12070545d1eaac1636e80e8b1fed838f1018c6633b7d8e36172997d2afb57dcab6a5f1cd483e57e6b4697785a368b03b102b25fde82e84038f42064c7cad207a57446f8ed4eb3e6dc4b6760792505f5cc2e345b10dc6d4d6ab4cc364d4cfb1601034f43aa75fd6ac2549b0998f57de30e4c64aaf217669dcb49b67c92f4a65144ff327c13128c159f09d4ca472303d76af4b7fd7c200e74ababf9c8fb3b777ed62c0aec7491bda64fb32af670f2f69d437f8fd16ca9e3290ea83118ee05a7a6e61742eaca354a89760c8be7a15d65c1ce1e91589eac53386e2680992aaa57", 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x4001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000e00)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, r5, 0x0, &(0x7f0000000dc0)={&(0x7f0000000b80)=@nl=@proc, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000c00)=""/219, 0xdb}, {&(0x7f0000000d00)=""/31, 0x1f}], 0x2, &(0x7f0000000d80)=""/60, 0x3c}, 0x0, 0x12100, 0x1, {0x1}}, 0x7) 13:15:57 executing program 6: prctl$PR_SET_IO_FLUSHER(0x39, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) clock_gettime(0x5, &(0x7f0000000000)) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000040)) clock_nanosleep(0x5, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x80, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x5c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xe0}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "60ba389c00a5ea1d6dd65713749c7a02"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x3f}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x49}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3d3e46fd6bbaaa3c6a156013bb6a5a36"}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x10) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) setfsgid(0xee00) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, r1, 0x12, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xffff, 0x36}}}}, [@NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x9}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x9}, @NL80211_ATTR_P2P_CTWINDOW={0x5}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0xd800}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x20}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) rt_sigtimedwait(&(0x7f0000000400)={[0x7fff]}, 0x0, &(0x7f0000000440)={0x77359400}, 0x8) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x1) sched_rr_get_interval(0x0, &(0x7f0000000480)) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}}, 0x404) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) clock_nanosleep(0x0, 0x1, &(0x7f00000005c0), &(0x7f0000000600)) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x1) 13:15:57 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/processor', 0x0, 0x9) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x20008824) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2) r1 = io_uring_setup(0x37c5, &(0x7f0000000140)={0x0, 0x708f, 0x0, 0x1, 0x15}) socketpair(0x27, 0x5, 0xf8, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000200)={'ip6tnl0\x00', 0x0, 0x29, 0x8, 0x0, 0x3, 0x45, @mcast1, @remote, 0x80, 0x80, 0x1f, 0x800}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000400)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r3, 0x4, 0xb4, 0x6, 0x7, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, 0x40, 0x40, 0x3, 0x3ff}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000440)={'syztnl2\x00', r4, 0x4, 0x5f, 0x61, 0x0, 0x70, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x80, 0x8000, 0x81, 0x3ff}}) r5 = shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ff9000/0x4000)=nil) shmctl$SHM_UNLOCK(r5, 0xc) waitid(0x1, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000500)) timer_create(0x2, &(0x7f00000005c0)={0x0, 0x2b, 0x2}, &(0x7f0000000600)=0x0) timer_gettime(r6, &(0x7f0000000640)) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x110, r1, 0x8000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000680)) waitid(0x0, 0x0, &(0x7f00000006c0), 0x1, &(0x7f0000000740)) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/module/snd_pcm', 0x14001, 0xc0) ioctl$EVIOCGKEYCODE_V2(r8, 0x80284504, &(0x7f0000000840)=""/171) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) syz_io_uring_submit(r7, 0x0, &(0x7f0000000a40)=@IORING_OP_STATX={0x15, 0x4, 0x0, r8, &(0x7f0000000900), &(0x7f0000000a00)='./file0\x00', 0x20, 0x2000}, 0x3) 13:15:57 executing program 4: ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000000)={0x5, 0x1, 0x4, 0x1, 0x6}) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0x80, 0x80) socket$inet(0x2, 0x800, 0x4) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000080)=""/4096) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000001100)={'ip6gre0\x00', &(0x7f0000001080)={'syztnl0\x00', 0x0, 0x2f, 0x72, 0x4, 0x7f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, 0x40, 0x40, 0x5, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000011c0)={'ip6gre0\x00', &(0x7f0000001140)={'syztnl2\x00', r1, 0x2f, 0xf7, 0xfe, 0x4, 0x8, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x20, 0xfe2, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000001280)={'syztnl0\x00', &(0x7f0000001200)={'ip6gre0\x00', r2, 0x4, 0x2, 0x4, 0xffffffff, 0x12, @mcast1, @loopback, 0x7800, 0x8, 0xbc, 0xd96}}) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001300), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x38, r4, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x402c890}, 0x40000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r5}}, 0x21) r6 = syz_genetlink_get_family_id$team(&(0x7f0000001480), r0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000015c0)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={0x90, r6, 0x12, 0x70bd26, 0x25dfdbfc, {}, [{{0x8, 0x1, r3}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x8000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001740)={'ip_vti0\x00', &(0x7f0000001600)={'ip_vti0\x00', r2, 0x7800, 0x0, 0x7ba6, 0x3, {{0x3f, 0x4, 0x0, 0x23, 0xfc, 0x67, 0x0, 0xff, 0x4, 0x0, @private=0xa010100, @empty, {[@generic={0x0, 0xa, "40ebf02080ba2927"}, @timestamp_prespec={0x44, 0xc, 0x43, 0x3, 0x4, [{@loopback, 0x100}]}, @cipso={0x86, 0x51, 0x2, [{0x2, 0x4, "ca84"}, {0x1, 0xe, "0fb6e4ebf725212a1f4921ab"}, {0x0, 0x10, "4e91c861d05464ee62c7e2524b76"}, {0x0, 0x12, "b421989cb68da381e74d9a94bb264171"}, {0x2, 0x8, "0c43715770af"}, {0x7, 0xf, "3af348b6e9faa379f4f34958e2"}]}, @rr={0x7, 0xf, 0x65, [@empty, @dev={0xac, 0x14, 0x14, 0x10}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_prespec={0x44, 0x34, 0xbd, 0x3, 0x2, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1ff}, {@multicast2, 0xbc}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x1}, {@rand_addr=0x64010102, 0xa5f}, {@remote}, {@private=0xa010101, 0x2}]}, @timestamp_prespec={0x44, 0x14, 0x52, 0x3, 0xc, [{@local, 0xff}, {@loopback, 0x7ff}]}, @ssrr={0x89, 0xb, 0x67, [@remote, @empty]}, @cipso={0x86, 0x1c, 0x0, [{0x1, 0x8, "09576fd99f05"}, {0x5, 0xe, "3b7b886315736799754d0f1e"}]}, @noop]}}}}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_VLAN(r7, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x24, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x401}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x80000001}]}, 0x24}, 0x1, 0x0, 0x0, 0x8}, 0x20000000) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001940)={&(0x7f00000018c0)={0x44, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x11}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0xa}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x9}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000044}, 0x804) socket(0x2c, 0x6, 0x7ff) io_uring_setup(0x4cfd, &(0x7f0000001a80)={0x0, 0xe6d8, 0x2, 0x1, 0x150}) 13:15:57 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000002d40)={'syztnl1\x00', &(0x7f0000002cc0)={'syztnl1\x00', 0x0, 0x29, 0xe0, 0x9, 0x3, 0x20, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8, 0x7, 0x5, 0xad3}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000002e00)={'syztnl1\x00', &(0x7f0000002d80)={'syztnl2\x00', r1, 0x29, 0x1f, 0x8, 0x5a34e2c7, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x20, 0x7800, 0xd83, 0x1f}}) r2 = accept(r0, &(0x7f0000002e40)=@nfc_llcp, &(0x7f0000002ec0)=0x80) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, &(0x7f0000002f80)={'syztnl1\x00', &(0x7f0000002f00)={'syztnl0\x00', r1, 0x0, 0xff, 0x0, 0x9, 0x2, @loopback, @mcast2, 0x1, 0x700, 0xfffffff7, 0x3}}) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000002fc0)) sysinfo(&(0x7f0000003000)=""/97) rt_sigtimedwait(&(0x7f0000003080)={[0x1]}, &(0x7f00000030c0), &(0x7f0000003140), 0x8) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000003180)={'wlan0\x00', 0x0}) r6 = socket(0xb, 0x7, 0xfffffffc) sendmsg$NL80211_CMD_NEW_KEY(r6, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x24, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "ad60d5f4b1"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x20000000) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f00000032c0)) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000003300)='/sys/kernel/slab', 0x4040, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000033c0)={'syztnl1\x00', &(0x7f0000003340)={'ip6_vti0\x00', 0x0, 0x29, 0x9, 0x7, 0xfffff3f4, 0x3c, @private2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x40, 0xab7, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r7, 0x89f7, &(0x7f0000003480)={'syztnl1\x00', &(0x7f0000003400)={'ip6_vti0\x00', r8, 0x29, 0x80, 0x1, 0x2, 0x8, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @local, 0x1, 0x20, 0x1, 0x9}}) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000034c0)='/sys/module/nf_conntrack', 0x610001, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r9, &(0x7f00000035c0)={&(0x7f0000003500)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003580)={&(0x7f0000003540)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x840) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000003680)={'ip6_vti0\x00', &(0x7f0000003600)={'ip6_vti0\x00', r1, 0x29, 0x7f, 0x1e, 0x513, 0x30, @rand_addr=' \x01\x00', @mcast1, 0x20, 0x10, 0x4, 0x81000000}}) 13:15:57 executing program 7: ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000001040)={&(0x7f0000000000), &(0x7f0000000040)=""/4096, 0x1000}) tkill(0x0, 0x13) waitid(0x1, 0xffffffffffffffff, &(0x7f0000001080), 0x1, &(0x7f0000001100)) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001280)={&(0x7f0000001200)={0x60, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x400, 0x60}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xe}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xb}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x9}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xf}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x40004}, 0x10) r0 = syz_open_dev$usbmon(&(0x7f0000001300), 0x1, 0x52401) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000002380)={&(0x7f0000001340), &(0x7f0000001380)=""/4096, 0x1000}) r1 = gettid() getpgrp(r1) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000002480)={&(0x7f00000023c0), &(0x7f0000002400)=""/97, 0x61}) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f0000002600)={&(0x7f00000024c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000002500)=""/226, 0xe2}) r2 = accept(0xffffffffffffffff, 0x0, &(0x7f0000002640)) clock_gettime(0x0, &(0x7f0000006e00)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000006c80)=[{{&(0x7f0000002680)=@l2, 0x80, &(0x7f0000002800)=[{&(0x7f0000002700)=""/218, 0xda}], 0x1, &(0x7f0000002840)=""/31, 0x1f}, 0x40}, {{&(0x7f0000002880)=@generic, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002900)=""/4096, 0x1000}, {&(0x7f0000003900)=""/16, 0x10}, {&(0x7f0000003940)=""/205, 0xcd}, {&(0x7f0000003a40)=""/157, 0x9d}, {&(0x7f0000003b00)=""/140, 0x8c}, {&(0x7f0000003bc0)=""/192, 0xc0}, {&(0x7f0000003c80)=""/4096, 0x1000}], 0x7, &(0x7f0000004d00)=""/148, 0x94}, 0xd5}, {{&(0x7f0000004dc0)=@can, 0x80, &(0x7f0000004f80)=[{&(0x7f0000004e40)=""/17, 0x11}, {&(0x7f0000004e80)=""/241, 0xf1}], 0x2}, 0xa0}, {{&(0x7f0000004fc0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000005440)=[{&(0x7f0000005040)=""/229, 0xe5}, {&(0x7f0000005140)=""/140, 0x8c}, {&(0x7f0000005200)=""/246, 0xf6}, {&(0x7f0000005300)=""/223, 0xdf}, {&(0x7f0000005400)=""/41, 0x29}], 0x5, &(0x7f00000054c0)=""/44, 0x2c}, 0x101}, {{&(0x7f0000005500)=@qipcrtr, 0x80, &(0x7f0000006a80)=[{&(0x7f0000005580)=""/4096, 0x1000}, {&(0x7f0000006580)=""/252, 0xfc}, {&(0x7f0000006680)=""/241, 0xf1}, {&(0x7f0000006780)=""/87, 0x57}, {&(0x7f0000006800)=""/254, 0xfe}, {&(0x7f0000006900)=""/90, 0x5a}, {&(0x7f0000006980)=""/225, 0xe1}], 0x7}}, {{0x0, 0x0, &(0x7f0000006bc0)=[{&(0x7f0000006b00)=""/145, 0x91}], 0x1, &(0x7f0000006c00)=""/81, 0x51}, 0x3ff}], 0x6, 0x1, &(0x7f0000006e40)={r3, r4+10000000}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000007200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x3, 0x2004, @fd_index=0x9, 0x10001, 0x0, 0x0, 0x17, 0x1, {0x3}}, 0x30) 13:15:57 executing program 2: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)="3c83aba66cc4e07e77a76c5edaaaeb2c142196dcb4948d1bea7cc7c56c0522d946cb5ac4231e337744cd43286b5d06c909b77ba0b1dfa735763b470323ffa9785312df86d54ab56c63f169c855da890385e79ba7c12224570381988ffe8d2b65a733b2b77981ee7865d86a0dd49f2d3d71ba26e167eb653682c8fb6d85ea2cee1876e5e45d8d6f35f9920ea42fd04de7fa1e08de2e345b5c79da16e0f38f87b93c79d554bdf32aa1cdf40cebec88412bea62d90d3915360fdeab0e5ac3a9df3b64a91136855c82d51ab174ac5cd6bd6b9d223bcd6f79ffce263b54bd9999c01459a72d54dffa20773c8d28d00c5e0ea136538365", 0xf4}, 0x1, 0x0, 0x0, 0x4000}, 0x20000001) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000180)) sysinfo(&(0x7f00000001c0)=""/142) ioctl$sock_ifreq(r1, 0x8931, &(0x7f0000000280)={'batadv_slave_0\x00', @ifru_addrs=@in={0x2, 0x0, @local}}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/bus/platform', 0x16001, 0x9) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r3, 0x2, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000090) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f00000004c0)={0x14c, r3, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x81, 0x6}, {0xe9, 0x1}, {0x6, 0x5}, {0x2d, 0x6}, {0x81, 0x2}, {0x3f, 0x6}, {0x8, 0x2}, {0x1, 0x7}, {0x48, 0x5}, {0x80, 0x5}, {0xff, 0x6}, {0x2, 0x5}], "c1060bf1205e1788"}}, @NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x5, 0x6}, {0x2, 0x5}, {0x5, 0x7}, {0xff, 0x7}, {0x0, 0x5}, {0x3, 0x2}, {0xfa, 0x2}, {0x1, 0x7}, {0x0, 0x2}, {0x6f}, {}, {0x7, 0x7}, {0x81, 0x7}, {0x6, 0x7}, {0x7, 0x7}, {0x4, 0x5}, {0x1f}, {0x5, 0x4}], "98cb2e5ab9500d0c"}}, @NL80211_ATTR_QOS_MAP={0xe, 0xc7, {[{0x81, 0x6}], "57fcf5f60644f176"}}, @NL80211_ATTR_QOS_MAP={0x34, 0xc7, {[{0x1, 0x7}, {0xff, 0x3}, {0x4, 0x1}, {0x40}, {0x8, 0x6}, {0x6, 0x2}, {0x5b, 0x6}, {0x40, 0x6}, {0x5, 0x2}, {0x2, 0x3}, {0xff, 0x1}, {0x7, 0x5}, {0x81, 0x6}, {0x1}, {0xfa, 0x7}, {0xb2, 0x7}, {0x6, 0x7}, {0x2, 0x5}, {0x7f, 0x4}, {0x9}], "c94f799edde58374"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "71a679bb7dfeab0b"}}, @NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0x3f, 0x3}, {0x15, 0x1}, {0xc0, 0x4}, {0x3}, {0x1, 0x7}, {0x9, 0x7}, {0x6}, {0x4, 0x3}, {0x0, 0x3}, {0x7, 0x2}, {0xd4, 0x7}, {0x1, 0x4}, {0x4}, {0x6, 0x7}], "73aa28212d51194b"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0xff, 0x5}, {0x2, 0x1}, {0x7, 0x5}, {0x2, 0x2}, {0x1, 0x6}, {0x6, 0x5}, {0xa1}, {0x1, 0x1}], "402ab314775a4ac1"}}, @NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0x40, 0x3}, {0x20, 0x7}, {0x9, 0x1}, {0x3, 0x2}, {0x40, 0x6}, {0x2, 0x4}, {0x3a, 0x6}, {0x20, 0x6}, {0x0, 0x4}, {0x7f, 0x7}, {0x1, 0x7}, {0x8, 0x3}, {0x7, 0x4}, {0x3f, 0x1}, {0x3, 0x4}, {0x2}, {0x1f, 0x1}, {0xf8, 0x3}, {0x1, 0x5}], "2f10c13b1320f82b"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0x3, 0x7}, {0x7, 0x4}, {0x4, 0x7}, {0x2, 0x1}, {0x1f, 0x7}, {0xa5, 0x4}, {0x65, 0x4}, {0x9, 0x7}], "be02396e2de23506"}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) ioctl$CDROM_MEDIA_CHANGED(r2, 0x5325, 0x8) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x42000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x24, r3, 0x4, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_STA_TX_POWER={0x6}]}, 0x24}}, 0x4850) ioctl$sock_ifreq(r1, 0xa9, &(0x7f0000000800)={'syzkaller0\x00', @ifru_settings={0x0, 0x0, @te1=&(0x7f00000007c0)={0x9, 0x3, 0x3, 0x48}}}) sysinfo(&(0x7f0000000840)=""/122) syz_genetlink_get_family_id$team(&(0x7f00000008c0), r2) r5 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000900)) sendmsg$802154_raw(r5, &(0x7f0000000a80)={0xfffffffffffffffe, 0x0, &(0x7f0000000a40)={&(0x7f0000000940)="b76454b20b7ab7f1c8f2524461f12070545d1eaac1636e80e8b1fed838f1018c6633b7d8e36172997d2afb57dcab6a5f1cd483e57e6b4697785a368b03b102b25fde82e84038f42064c7cad207a57446f8ed4eb3e6dc4b6760792505f5cc2e345b10dc6d4d6ab4cc364d4cfb1601034f43aa75fd6ac2549b0998f57de30e4c64aaf217669dcb49b67c92f4a65144ff327c13128c159f09d4ca472303d76af4b7fd7c200e74ababf9c8fb3b777ed62c0aec7491bda64fb32af670f2f69d437f8fd16ca9e3290ea83118ee05a7a6e61742eaca354a89760c8be7a15d65c1ce1e91589eac53386e2680992aaa57", 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x4001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000e00)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, r5, 0x0, &(0x7f0000000dc0)={&(0x7f0000000b80)=@nl=@proc, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000c00)=""/219, 0xdb}, {&(0x7f0000000d00)=""/31, 0x1f}], 0x2, &(0x7f0000000d80)=""/60, 0x3c}, 0x0, 0x12100, 0x1, {0x1}}, 0x7) 13:15:57 executing program 1: socketpair(0x2, 0x4, 0xfffffe9b, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x40, 0x0, 0x5, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x18}, 0x7800, 0x8000, 0xfffffffa, 0x233a}}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000100)={0x0, @loopback, @loopback}, &(0x7f0000000140)=0xc) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xad) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000200)) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/hci_vhci', 0x30000, 0x8) getsockopt$inet6_tcp_int(r4, 0x6, 0x5, &(0x7f0000000280), &(0x7f00000002c0)=0x4) recvmmsg(r0, &(0x7f0000003ac0)=[{{&(0x7f0000000300)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/238, 0xee}, {&(0x7f0000000480)=""/16, 0x10}, {&(0x7f00000004c0)=""/194, 0xc2}, {&(0x7f00000005c0)=""/206, 0xce}, {&(0x7f00000006c0)=""/52, 0x34}, {&(0x7f0000000700)=""/180, 0xb4}], 0x6, &(0x7f0000000840)=""/48, 0x30}, 0xbe4}, {{&(0x7f0000000880)=@can, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/55, 0x37}, {&(0x7f0000000940)=""/159, 0x9f}, {&(0x7f0000000a00)=""/72, 0x48}, {&(0x7f0000000a80)=""/165, 0xa5}, {&(0x7f0000000b40)=""/214, 0xd6}, {&(0x7f0000000c40)=""/120, 0x78}, {&(0x7f0000000cc0)=""/4096, 0x1000}], 0x7, &(0x7f0000001d40)=""/55, 0x37}}, {{&(0x7f0000001d80)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000001fc0)=[{&(0x7f0000001e00)=""/246, 0xf6}, {&(0x7f0000001f00)=""/142, 0x8e}], 0x2, &(0x7f0000002000)=""/216, 0xd8}, 0x7}, {{0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000002140)=""/221, 0xdd}, 0x3}, {{&(0x7f0000002240)=@tipc=@name, 0x80, &(0x7f0000003500)=[{&(0x7f00000022c0)=""/122, 0x7a}, {&(0x7f0000002340)=""/184, 0xb8}, {&(0x7f0000002400)=""/68, 0x44}, {&(0x7f0000002480)=""/18, 0x12}, {&(0x7f00000024c0)=""/10, 0xa}, {&(0x7f0000002500)=""/4096, 0x1000}], 0x6, &(0x7f0000003580)=""/247, 0xf7}, 0x101}, {{&(0x7f0000003680)=@in={0x2, 0x0, @initdev}, 0x80, &(0x7f00000039c0)=[{&(0x7f0000003700)=""/142, 0x8e}, {&(0x7f00000037c0)=""/55, 0x37}, {&(0x7f0000003800)=""/226, 0xe2}, {&(0x7f0000003900)=""/129, 0x81}], 0x4, &(0x7f0000003a00)=""/175, 0xaf}, 0x9}], 0x6, 0x40000100, 0x0) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000003d40)={&(0x7f0000003c40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000003d00)={&(0x7f0000003c80)={0x5c, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x28}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_DOMAIN={0x9, 0x1, '!$(\xd2\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4014}, 0x20008080) r5 = socket(0x11, 0x3, 0x1) ioctl$sock_SIOCGIFCONF(r5, 0x8912, &(0x7f0000003dc0)=@req={0x28, &(0x7f0000003d80)={'veth0_to_hsr\x00', @ifru_flags}}) socketpair(0x2, 0x3, 0x80, &(0x7f0000003e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000004000)={'ip6tnl0\x00', &(0x7f0000003f80)={'syztnl2\x00', r3, 0x4, 0x0, 0x48, 0x8, 0x6c, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', 0x40, 0x40, 0x8001, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r7, 0x89f4, &(0x7f00000040c0)={'ip6_vti0\x00', &(0x7f0000004040)={'syztnl2\x00', r8, 0x29, 0x8, 0x0, 0x9, 0x64, @mcast1, @mcast2, 0x80, 0x8, 0x2, 0x9}}) r9 = accept(r6, &(0x7f0000004100)=@qipcrtr, &(0x7f0000004180)=0x80) getsockopt$inet6_tcp_buf(r9, 0x6, 0x1f, &(0x7f00000041c0)=""/113, &(0x7f0000004240)=0x71) setsockopt$inet6_tcp_buf(r9, 0x6, 0x1c, &(0x7f00000042c0)="f13752d8c5aaf6511ad2b6c65e384ff767a81b2be50d70c8e190960799cc0afaa6d28ef4d68dd6241cb010aebfb78ed748cb2509b012ae3a6aaaf06a09631e9fb137ea2789b35e0ede25ed4f82fe846c350cdce613e43eab52f36e83dfe4b36c4ce1acbde6ab32a8307d54bd4e8a8bbd85dc32b084275897a7a63c4689f74ceac6d2289a82b4dcfe337a0700425af7c44d4915cd7fe2fa7ad36620760376c2fc4534c7f27228f7d839f7da9d8b76118b1c0413421fcc068ccbe2d9808395f4fcd3afa112c54a7d20ea2f806168c315522ea000af71218ab486a299749d8960b5d45e2b50402ce850a812b4e0dde3fd5e8a1242d066c3bf", 0xf7) 13:15:57 executing program 3: clock_nanosleep(0x1, 0x1, &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f0000000040)) r0 = getpgrp(0x0) sched_rr_get_interval(r0, &(0x7f0000000080)) r1 = getpgrp(r0) sched_rr_get_interval(r1, &(0x7f00000000c0)) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000100)={[0x5ab]}, &(0x7f0000000140), &(0x7f0000000200)={r2, r3+60000000}, 0x8) r4 = getpgrp(r1) waitid(0x3, r4, &(0x7f0000000240), 0x20000000, &(0x7f00000002c0)) sched_rr_get_interval(r4, &(0x7f0000000380)) clock_nanosleep(0x2, 0x0, &(0x7f00000003c0)={0x77359400}, &(0x7f0000000400)) timer_create(0x0, &(0x7f0000000440)={0x0, 0x3c, 0x4, @tid=r0}, &(0x7f0000000480)) wait4(r0, &(0x7f00000004c0), 0x8, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000a40)=[{{&(0x7f0000000500), 0x80, &(0x7f0000000600)=[{&(0x7f0000000580)=""/92, 0x5c}], 0x1, &(0x7f0000000640)=""/61, 0x3d}, 0x1}, {{&(0x7f0000000680)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000700)=""/217, 0xd9}, {&(0x7f0000000800)=""/165, 0xa5}, {&(0x7f00000008c0)}, {&(0x7f0000000900)=""/247, 0xf7}], 0x4}, 0x10000}], 0x2, 0x12041, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r4) r5 = gettid() waitid(0x2, r5, &(0x7f0000000ac0), 0x2, &(0x7f0000000b40)) ioctl$sock_ifreq(0xffffffffffffffff, 0x8932, &(0x7f0000000c00)={'veth1_to_batadv\x00', @ifru_names}) sched_rr_get_interval(r5, &(0x7f0000000c40)) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000008, 0x10, 0xffffffffffffffff, 0x10000000) 13:15:57 executing program 1: socketpair(0x2, 0x4, 0xfffffe9b, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x40, 0x0, 0x5, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x18}, 0x7800, 0x8000, 0xfffffffa, 0x233a}}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000100)={0x0, @loopback, @loopback}, &(0x7f0000000140)=0xc) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xad) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000200)) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/hci_vhci', 0x30000, 0x8) getsockopt$inet6_tcp_int(r4, 0x6, 0x5, &(0x7f0000000280), &(0x7f00000002c0)=0x4) recvmmsg(r0, &(0x7f0000003ac0)=[{{&(0x7f0000000300)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/238, 0xee}, {&(0x7f0000000480)=""/16, 0x10}, {&(0x7f00000004c0)=""/194, 0xc2}, {&(0x7f00000005c0)=""/206, 0xce}, {&(0x7f00000006c0)=""/52, 0x34}, {&(0x7f0000000700)=""/180, 0xb4}], 0x6, &(0x7f0000000840)=""/48, 0x30}, 0xbe4}, {{&(0x7f0000000880)=@can, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/55, 0x37}, {&(0x7f0000000940)=""/159, 0x9f}, {&(0x7f0000000a00)=""/72, 0x48}, {&(0x7f0000000a80)=""/165, 0xa5}, {&(0x7f0000000b40)=""/214, 0xd6}, {&(0x7f0000000c40)=""/120, 0x78}, {&(0x7f0000000cc0)=""/4096, 0x1000}], 0x7, &(0x7f0000001d40)=""/55, 0x37}}, {{&(0x7f0000001d80)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000001fc0)=[{&(0x7f0000001e00)=""/246, 0xf6}, {&(0x7f0000001f00)=""/142, 0x8e}], 0x2, &(0x7f0000002000)=""/216, 0xd8}, 0x7}, {{0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000002140)=""/221, 0xdd}, 0x3}, {{&(0x7f0000002240)=@tipc=@name, 0x80, &(0x7f0000003500)=[{&(0x7f00000022c0)=""/122, 0x7a}, {&(0x7f0000002340)=""/184, 0xb8}, {&(0x7f0000002400)=""/68, 0x44}, {&(0x7f0000002480)=""/18, 0x12}, {&(0x7f00000024c0)=""/10, 0xa}, {&(0x7f0000002500)=""/4096, 0x1000}], 0x6, &(0x7f0000003580)=""/247, 0xf7}, 0x101}, {{&(0x7f0000003680)=@in={0x2, 0x0, @initdev}, 0x80, &(0x7f00000039c0)=[{&(0x7f0000003700)=""/142, 0x8e}, {&(0x7f00000037c0)=""/55, 0x37}, {&(0x7f0000003800)=""/226, 0xe2}, {&(0x7f0000003900)=""/129, 0x81}], 0x4, &(0x7f0000003a00)=""/175, 0xaf}, 0x9}], 0x6, 0x40000100, 0x0) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000003d40)={&(0x7f0000003c40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000003d00)={&(0x7f0000003c80)={0x5c, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x28}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_DOMAIN={0x9, 0x1, '!$(\xd2\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4014}, 0x20008080) r5 = socket(0x11, 0x3, 0x1) ioctl$sock_SIOCGIFCONF(r5, 0x8912, &(0x7f0000003dc0)=@req={0x28, &(0x7f0000003d80)={'veth0_to_hsr\x00', @ifru_flags}}) socketpair(0x2, 0x3, 0x80, &(0x7f0000003e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000004000)={'ip6tnl0\x00', &(0x7f0000003f80)={'syztnl2\x00', r3, 0x4, 0x0, 0x48, 0x8, 0x6c, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', 0x40, 0x40, 0x8001, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r7, 0x89f4, &(0x7f00000040c0)={'ip6_vti0\x00', &(0x7f0000004040)={'syztnl2\x00', r8, 0x29, 0x8, 0x0, 0x9, 0x64, @mcast1, @mcast2, 0x80, 0x8, 0x2, 0x9}}) r9 = accept(r6, &(0x7f0000004100)=@qipcrtr, &(0x7f0000004180)=0x80) setsockopt$inet6_tcp_buf(r9, 0x6, 0x1c, &(0x7f00000042c0)="f13752d8c5aaf6511ad2b6c65e384ff767a81b2be50d70c8e190960799cc0afaa6d28ef4d68dd6241cb010aebfb78ed748cb2509b012ae3a6aaaf06a09631e9fb137ea2789b35e0ede25ed4f82fe846c350cdce613e43eab52f36e83dfe4b36c4ce1acbde6ab32a8307d54bd4e8a8bbd85dc32b084275897a7a63c4689f74ceac6d2289a82b4dcfe337a0700425af7c44d4915cd7fe2fa7ad36620760376c2fc4534c7f27228f7d839f7da9d8b76118b1c0413421fcc068ccbe2d9808395f4fcd3afa112c54a7d20ea2f806168c315522ea000af71218ab486a299749d8960b5d45e2b50402ce850a812b4e0dde3fd5e8a1242d066c3bf", 0xf7) 13:15:57 executing program 1: socketpair(0x2, 0x4, 0xfffffe9b, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x40, 0x0, 0x5, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x18}, 0x7800, 0x8000, 0xfffffffa, 0x233a}}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000100)={0x0, @loopback, @loopback}, &(0x7f0000000140)=0xc) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xad) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000200)) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/hci_vhci', 0x30000, 0x8) getsockopt$inet6_tcp_int(r4, 0x6, 0x5, &(0x7f0000000280), &(0x7f00000002c0)=0x4) recvmmsg(r0, &(0x7f0000003ac0)=[{{&(0x7f0000000300)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/238, 0xee}, {&(0x7f0000000480)=""/16, 0x10}, {&(0x7f00000004c0)=""/194, 0xc2}, {&(0x7f00000005c0)=""/206, 0xce}, {&(0x7f00000006c0)=""/52, 0x34}, {&(0x7f0000000700)=""/180, 0xb4}], 0x6, &(0x7f0000000840)=""/48, 0x30}, 0xbe4}, {{&(0x7f0000000880)=@can, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/55, 0x37}, {&(0x7f0000000940)=""/159, 0x9f}, {&(0x7f0000000a00)=""/72, 0x48}, {&(0x7f0000000a80)=""/165, 0xa5}, {&(0x7f0000000b40)=""/214, 0xd6}, {&(0x7f0000000c40)=""/120, 0x78}, {&(0x7f0000000cc0)=""/4096, 0x1000}], 0x7, &(0x7f0000001d40)=""/55, 0x37}}, {{&(0x7f0000001d80)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000001fc0)=[{&(0x7f0000001e00)=""/246, 0xf6}, {&(0x7f0000001f00)=""/142, 0x8e}], 0x2, &(0x7f0000002000)=""/216, 0xd8}, 0x7}, {{0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000002140)=""/221, 0xdd}, 0x3}, {{&(0x7f0000002240)=@tipc=@name, 0x80, &(0x7f0000003500)=[{&(0x7f00000022c0)=""/122, 0x7a}, {&(0x7f0000002340)=""/184, 0xb8}, {&(0x7f0000002400)=""/68, 0x44}, {&(0x7f0000002480)=""/18, 0x12}, {&(0x7f00000024c0)=""/10, 0xa}, {&(0x7f0000002500)=""/4096, 0x1000}], 0x6, &(0x7f0000003580)=""/247, 0xf7}, 0x101}, {{&(0x7f0000003680)=@in={0x2, 0x0, @initdev}, 0x80, &(0x7f00000039c0)=[{&(0x7f0000003700)=""/142, 0x8e}, {&(0x7f00000037c0)=""/55, 0x37}, {&(0x7f0000003800)=""/226, 0xe2}, {&(0x7f0000003900)=""/129, 0x81}], 0x4, &(0x7f0000003a00)=""/175, 0xaf}, 0x9}], 0x6, 0x40000100, 0x0) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000003d40)={&(0x7f0000003c40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000003d00)={&(0x7f0000003c80)={0x5c, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x28}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_DOMAIN={0x9, 0x1, '!$(\xd2\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4014}, 0x20008080) r5 = socket(0x11, 0x3, 0x1) ioctl$sock_SIOCGIFCONF(r5, 0x8912, &(0x7f0000003dc0)=@req={0x28, &(0x7f0000003d80)={'veth0_to_hsr\x00', @ifru_flags}}) socketpair(0x2, 0x3, 0x80, &(0x7f0000003e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000004000)={'ip6tnl0\x00', &(0x7f0000003f80)={'syztnl2\x00', r3, 0x4, 0x0, 0x48, 0x8, 0x6c, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', 0x40, 0x40, 0x8001, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r6, 0x89f4, &(0x7f00000040c0)={'ip6_vti0\x00', &(0x7f0000004040)={'syztnl2\x00', r7, 0x29, 0x8, 0x0, 0x9, 0x64, @mcast1, @mcast2, 0x80, 0x8, 0x2, 0x9}}) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1c, &(0x7f00000042c0)="f13752d8c5aaf6511ad2b6c65e384ff767a81b2be50d70c8e190960799cc0afaa6d28ef4d68dd6241cb010aebfb78ed748cb2509b012ae3a6aaaf06a09631e9fb137ea2789b35e0ede25ed4f82fe846c350cdce613e43eab52f36e83dfe4b36c4ce1acbde6ab32a8307d54bd4e8a8bbd85dc32b084275897a7a63c4689f74ceac6d2289a82b4dcfe337a0700425af7c44d4915cd7fe2fa7ad36620760376c2fc4534c7f27228f7d839f7da9d8b76118b1c0413421fcc068ccbe2d9808395f4fcd3afa112c54a7d20ea2f806168c315522ea000af71218ab486a299749d8960b5d45e2b50402ce850a812b4e0dde3fd5e8a1242d066c3bf", 0xf7) 13:15:57 executing program 7: ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000001040)={&(0x7f0000000000), &(0x7f0000000040)=""/4096, 0x1000}) tkill(0x0, 0x13) waitid(0x1, 0xffffffffffffffff, &(0x7f0000001080), 0x1, &(0x7f0000001100)) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001280)={&(0x7f0000001200)={0x60, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x400, 0x60}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xe}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xb}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x9}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xf}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x40004}, 0x10) r0 = syz_open_dev$usbmon(&(0x7f0000001300), 0x1, 0x52401) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000002380)={&(0x7f0000001340), &(0x7f0000001380)=""/4096, 0x1000}) r1 = gettid() getpgrp(r1) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000002480)={&(0x7f00000023c0), &(0x7f0000002400)=""/97, 0x61}) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f0000002600)={&(0x7f00000024c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000002500)=""/226, 0xe2}) accept(0xffffffffffffffff, 0x0, &(0x7f0000002640)) clock_gettime(0x0, &(0x7f0000006e00)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000007200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x3, 0x2004, @fd_index=0x9, 0x10001, 0x0, 0x0, 0x17, 0x1, {0x3}}, 0x30) 13:16:05 executing program 3: clock_nanosleep(0x1, 0x1, &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f0000000040)) r0 = getpgrp(0x0) sched_rr_get_interval(r0, &(0x7f0000000080)) r1 = getpgrp(r0) sched_rr_get_interval(r1, &(0x7f00000000c0)) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000100)={[0x5ab]}, &(0x7f0000000140), &(0x7f0000000200)={r2, r3+60000000}, 0x8) r4 = getpgrp(r1) waitid(0x3, r4, &(0x7f0000000240), 0x20000000, &(0x7f00000002c0)) sched_rr_get_interval(r4, &(0x7f0000000380)) clock_nanosleep(0x2, 0x0, &(0x7f00000003c0)={0x77359400}, &(0x7f0000000400)) timer_create(0x0, &(0x7f0000000440)={0x0, 0x3c, 0x4, @tid=r0}, &(0x7f0000000480)) wait4(r0, &(0x7f00000004c0), 0x8, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000a40)=[{{&(0x7f0000000500), 0x80, &(0x7f0000000600)=[{&(0x7f0000000580)=""/92, 0x5c}], 0x1, &(0x7f0000000640)=""/61, 0x3d}, 0x1}, {{&(0x7f0000000680)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000700)=""/217, 0xd9}, {&(0x7f0000000800)=""/165, 0xa5}, {&(0x7f00000008c0)}, {&(0x7f0000000900)=""/247, 0xf7}], 0x4}, 0x10000}], 0x2, 0x12041, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r4) r5 = gettid() waitid(0x2, r5, &(0x7f0000000ac0), 0x2, &(0x7f0000000b40)) ioctl$sock_ifreq(0xffffffffffffffff, 0x8932, &(0x7f0000000c00)={'veth1_to_batadv\x00', @ifru_names}) sched_rr_get_interval(r5, &(0x7f0000000c40)) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000008, 0x10, 0xffffffffffffffff, 0x10000000) 13:16:05 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/processor', 0x0, 0x9) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x20008824) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2) r1 = io_uring_setup(0x37c5, &(0x7f0000000140)={0x0, 0x708f, 0x0, 0x1, 0x15}) socketpair(0x27, 0x5, 0xf8, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000200)={'ip6tnl0\x00', 0x0, 0x29, 0x8, 0x0, 0x3, 0x45, @mcast1, @remote, 0x80, 0x80, 0x1f, 0x800}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000400)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r3, 0x4, 0xb4, 0x6, 0x7, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, 0x40, 0x40, 0x3, 0x3ff}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000440)={'syztnl2\x00', r4, 0x4, 0x5f, 0x61, 0x0, 0x70, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x80, 0x8000, 0x81, 0x3ff}}) r5 = shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ff9000/0x4000)=nil) shmctl$SHM_UNLOCK(r5, 0xc) waitid(0x1, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000500)) timer_create(0x2, &(0x7f00000005c0)={0x0, 0x2b, 0x2}, &(0x7f0000000600)=0x0) timer_gettime(r6, &(0x7f0000000640)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x110, r1, 0x8000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000680)) waitid(0x0, 0x0, &(0x7f00000006c0), 0x1, &(0x7f0000000740)) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/module/snd_pcm', 0x14001, 0xc0) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000000840)=""/171) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) 13:16:05 executing program 6: prctl$PR_SET_IO_FLUSHER(0x39, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) clock_gettime(0x5, &(0x7f0000000000)) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000040)) clock_nanosleep(0x5, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x80, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x5c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xe0}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "60ba389c00a5ea1d6dd65713749c7a02"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x3f}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x49}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3d3e46fd6bbaaa3c6a156013bb6a5a36"}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x10) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) setfsgid(0xee00) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, r1, 0x12, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xffff, 0x36}}}}, [@NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x9}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x9}, @NL80211_ATTR_P2P_CTWINDOW={0x5}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0xd800}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x20}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) rt_sigtimedwait(&(0x7f0000000400)={[0x7fff]}, 0x0, &(0x7f0000000440)={0x77359400}, 0x8) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x1) sched_rr_get_interval(0x0, &(0x7f0000000480)) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}}, 0x404) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) clock_nanosleep(0x0, 0x1, &(0x7f00000005c0), &(0x7f0000000600)) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x1) 13:16:05 executing program 4: ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000000)={0x5, 0x1, 0x4, 0x1, 0x6}) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0x80, 0x80) socket$inet(0x2, 0x800, 0x4) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000080)=""/4096) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000001100)={'ip6gre0\x00', &(0x7f0000001080)={'syztnl0\x00', 0x0, 0x2f, 0x72, 0x4, 0x7f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, 0x40, 0x40, 0x5, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000011c0)={'ip6gre0\x00', &(0x7f0000001140)={'syztnl2\x00', r1, 0x2f, 0xf7, 0xfe, 0x4, 0x8, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x20, 0xfe2, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000001280)={'syztnl0\x00', &(0x7f0000001200)={'ip6gre0\x00', r2, 0x4, 0x2, 0x4, 0xffffffff, 0x12, @mcast1, @loopback, 0x7800, 0x8, 0xbc, 0xd96}}) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001300), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x38, r4, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x402c890}, 0x40000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r5}}, 0x21) r6 = syz_genetlink_get_family_id$team(&(0x7f0000001480), r0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000015c0)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={0x90, r6, 0x12, 0x70bd26, 0x25dfdbfc, {}, [{{0x8, 0x1, r3}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x8000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001740)={'ip_vti0\x00', &(0x7f0000001600)={'ip_vti0\x00', r2, 0x7800, 0x0, 0x7ba6, 0x3, {{0x3f, 0x4, 0x0, 0x23, 0xfc, 0x67, 0x0, 0xff, 0x4, 0x0, @private=0xa010100, @empty, {[@generic={0x0, 0xa, "40ebf02080ba2927"}, @timestamp_prespec={0x44, 0xc, 0x43, 0x3, 0x4, [{@loopback, 0x100}]}, @cipso={0x86, 0x51, 0x2, [{0x2, 0x4, "ca84"}, {0x1, 0xe, "0fb6e4ebf725212a1f4921ab"}, {0x0, 0x10, "4e91c861d05464ee62c7e2524b76"}, {0x0, 0x12, "b421989cb68da381e74d9a94bb264171"}, {0x2, 0x8, "0c43715770af"}, {0x7, 0xf, "3af348b6e9faa379f4f34958e2"}]}, @rr={0x7, 0xf, 0x65, [@empty, @dev={0xac, 0x14, 0x14, 0x10}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_prespec={0x44, 0x34, 0xbd, 0x3, 0x2, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1ff}, {@multicast2, 0xbc}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x1}, {@rand_addr=0x64010102, 0xa5f}, {@remote}, {@private=0xa010101, 0x2}]}, @timestamp_prespec={0x44, 0x14, 0x52, 0x3, 0xc, [{@local, 0xff}, {@loopback, 0x7ff}]}, @ssrr={0x89, 0xb, 0x67, [@remote, @empty]}, @cipso={0x86, 0x1c, 0x0, [{0x1, 0x8, "09576fd99f05"}, {0x5, 0xe, "3b7b886315736799754d0f1e"}]}, @noop]}}}}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_VLAN(r7, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x24, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x401}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x80000001}]}, 0x24}, 0x1, 0x0, 0x0, 0x8}, 0x20000000) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001940)={&(0x7f00000018c0)={0x44, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x11}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0xa}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x9}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000044}, 0x804) io_uring_setup(0x4cfd, &(0x7f0000001a80)={0x0, 0xe6d8, 0x2, 0x1, 0x150}) 13:16:05 executing program 7: ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000001040)={&(0x7f0000000000), &(0x7f0000000040)=""/4096, 0x1000}) tkill(0x0, 0x13) waitid(0x1, 0xffffffffffffffff, &(0x7f0000001080), 0x1, &(0x7f0000001100)) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001280)={&(0x7f0000001200)={0x60, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x400, 0x60}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xe}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xb}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x9}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xf}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x40004}, 0x10) r0 = syz_open_dev$usbmon(&(0x7f0000001300), 0x1, 0x52401) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000002380)={&(0x7f0000001340), &(0x7f0000001380)=""/4096, 0x1000}) r1 = gettid() getpgrp(r1) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000002480)={&(0x7f00000023c0), &(0x7f0000002400)=""/97, 0x61}) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f0000002600)={&(0x7f00000024c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000002500)=""/226, 0xe2}) accept(0xffffffffffffffff, 0x0, &(0x7f0000002640)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000007200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x3, 0x2004, @fd_index=0x9, 0x10001, 0x0, 0x0, 0x17, 0x1, {0x3}}, 0x30) 13:16:05 executing program 1: socketpair(0x2, 0x4, 0xfffffe9b, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x40, 0x0, 0x5, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x18}, 0x7800, 0x8000, 0xfffffffa, 0x233a}}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000100)={0x0, @loopback, @loopback}, &(0x7f0000000140)=0xc) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xad) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000200)) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/hci_vhci', 0x30000, 0x8) getsockopt$inet6_tcp_int(r4, 0x6, 0x5, &(0x7f0000000280), &(0x7f00000002c0)=0x4) recvmmsg(r0, &(0x7f0000003ac0)=[{{&(0x7f0000000300)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/238, 0xee}, {&(0x7f0000000480)=""/16, 0x10}, {&(0x7f00000004c0)=""/194, 0xc2}, {&(0x7f00000005c0)=""/206, 0xce}, {&(0x7f00000006c0)=""/52, 0x34}, {&(0x7f0000000700)=""/180, 0xb4}], 0x6, &(0x7f0000000840)=""/48, 0x30}, 0xbe4}, {{&(0x7f0000000880)=@can, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/55, 0x37}, {&(0x7f0000000940)=""/159, 0x9f}, {&(0x7f0000000a00)=""/72, 0x48}, {&(0x7f0000000a80)=""/165, 0xa5}, {&(0x7f0000000b40)=""/214, 0xd6}, {&(0x7f0000000c40)=""/120, 0x78}, {&(0x7f0000000cc0)=""/4096, 0x1000}], 0x7, &(0x7f0000001d40)=""/55, 0x37}}, {{&(0x7f0000001d80)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000001fc0)=[{&(0x7f0000001e00)=""/246, 0xf6}, {&(0x7f0000001f00)=""/142, 0x8e}], 0x2, &(0x7f0000002000)=""/216, 0xd8}, 0x7}, {{0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000002140)=""/221, 0xdd}, 0x3}, {{&(0x7f0000002240)=@tipc=@name, 0x80, &(0x7f0000003500)=[{&(0x7f00000022c0)=""/122, 0x7a}, {&(0x7f0000002340)=""/184, 0xb8}, {&(0x7f0000002400)=""/68, 0x44}, {&(0x7f0000002480)=""/18, 0x12}, {&(0x7f00000024c0)=""/10, 0xa}, {&(0x7f0000002500)=""/4096, 0x1000}], 0x6, &(0x7f0000003580)=""/247, 0xf7}, 0x101}, {{&(0x7f0000003680)=@in={0x2, 0x0, @initdev}, 0x80, &(0x7f00000039c0)=[{&(0x7f0000003700)=""/142, 0x8e}, {&(0x7f00000037c0)=""/55, 0x37}, {&(0x7f0000003800)=""/226, 0xe2}, {&(0x7f0000003900)=""/129, 0x81}], 0x4, &(0x7f0000003a00)=""/175, 0xaf}, 0x9}], 0x6, 0x40000100, 0x0) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000003d40)={&(0x7f0000003c40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000003d00)={&(0x7f0000003c80)={0x5c, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x28}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_DOMAIN={0x9, 0x1, '!$(\xd2\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4014}, 0x20008080) r5 = socket(0x11, 0x3, 0x1) ioctl$sock_SIOCGIFCONF(r5, 0x8912, &(0x7f0000003dc0)=@req={0x28, &(0x7f0000003d80)={'veth0_to_hsr\x00', @ifru_flags}}) socketpair(0x2, 0x3, 0x80, &(0x7f0000003e00)) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000004000)={'ip6tnl0\x00', &(0x7f0000003f80)={'syztnl2\x00', r3, 0x4, 0x0, 0x48, 0x8, 0x6c, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', 0x40, 0x40, 0x8001, 0x3}}) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1c, &(0x7f00000042c0)="f13752d8c5aaf6511ad2b6c65e384ff767a81b2be50d70c8e190960799cc0afaa6d28ef4d68dd6241cb010aebfb78ed748cb2509b012ae3a6aaaf06a09631e9fb137ea2789b35e0ede25ed4f82fe846c350cdce613e43eab52f36e83dfe4b36c4ce1acbde6ab32a8307d54bd4e8a8bbd85dc32b084275897a7a63c4689f74ceac6d2289a82b4dcfe337a0700425af7c44d4915cd7fe2fa7ad36620760376c2fc4534c7f27228f7d839f7da9d8b76118b1c0413421fcc068ccbe2d9808395f4fcd3afa112c54a7d20ea2f806168c315522ea000af71218ab486a299749d8960b5d45e2b50402ce850a812b4e0dde3fd5e8a1242d066c3bf", 0xf7) 13:16:06 executing program 2: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)="3c83aba66cc4e07e77a76c5edaaaeb2c142196dcb4948d1bea7cc7c56c0522d946cb5ac4231e337744cd43286b5d06c909b77ba0b1dfa735763b470323ffa9785312df86d54ab56c63f169c855da890385e79ba7c12224570381988ffe8d2b65a733b2b77981ee7865d86a0dd49f2d3d71ba26e167eb653682c8fb6d85ea2cee1876e5e45d8d6f35f9920ea42fd04de7fa1e08de2e345b5c79da16e0f38f87b93c79d554bdf32aa1cdf40cebec88412bea62d90d3915360fdeab0e5ac3a9df3b64a91136855c82d51ab174ac5cd6bd6b9d223bcd6f79ffce263b54bd9999c01459a72d54dffa20773c8d28d00c5e0ea136538365", 0xf4}, 0x1, 0x0, 0x0, 0x4000}, 0x20000001) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000180)) sysinfo(&(0x7f00000001c0)=""/142) ioctl$sock_ifreq(r1, 0x8931, &(0x7f0000000280)={'batadv_slave_0\x00', @ifru_addrs=@in={0x2, 0x0, @local}}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/bus/platform', 0x16001, 0x9) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r3, 0x2, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000090) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f00000004c0)={0x14c, r3, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x81, 0x6}, {0xe9, 0x1}, {0x6, 0x5}, {0x2d, 0x6}, {0x81, 0x2}, {0x3f, 0x6}, {0x8, 0x2}, {0x1, 0x7}, {0x48, 0x5}, {0x80, 0x5}, {0xff, 0x6}, {0x2, 0x5}], "c1060bf1205e1788"}}, @NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x5, 0x6}, {0x2, 0x5}, {0x5, 0x7}, {0xff, 0x7}, {0x0, 0x5}, {0x3, 0x2}, {0xfa, 0x2}, {0x1, 0x7}, {0x0, 0x2}, {0x6f}, {}, {0x7, 0x7}, {0x81, 0x7}, {0x6, 0x7}, {0x7, 0x7}, {0x4, 0x5}, {0x1f}, {0x5, 0x4}], "98cb2e5ab9500d0c"}}, @NL80211_ATTR_QOS_MAP={0xe, 0xc7, {[{0x81, 0x6}], "57fcf5f60644f176"}}, @NL80211_ATTR_QOS_MAP={0x34, 0xc7, {[{0x1, 0x7}, {0xff, 0x3}, {0x4, 0x1}, {0x40}, {0x8, 0x6}, {0x6, 0x2}, {0x5b, 0x6}, {0x40, 0x6}, {0x5, 0x2}, {0x2, 0x3}, {0xff, 0x1}, {0x7, 0x5}, {0x81, 0x6}, {0x1}, {0xfa, 0x7}, {0xb2, 0x7}, {0x6, 0x7}, {0x2, 0x5}, {0x7f, 0x4}, {0x9}], "c94f799edde58374"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "71a679bb7dfeab0b"}}, @NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0x3f, 0x3}, {0x15, 0x1}, {0xc0, 0x4}, {0x3}, {0x1, 0x7}, {0x9, 0x7}, {0x6}, {0x4, 0x3}, {0x0, 0x3}, {0x7, 0x2}, {0xd4, 0x7}, {0x1, 0x4}, {0x4}, {0x6, 0x7}], "73aa28212d51194b"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0xff, 0x5}, {0x2, 0x1}, {0x7, 0x5}, {0x2, 0x2}, {0x1, 0x6}, {0x6, 0x5}, {0xa1}, {0x1, 0x1}], "402ab314775a4ac1"}}, @NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0x40, 0x3}, {0x20, 0x7}, {0x9, 0x1}, {0x3, 0x2}, {0x40, 0x6}, {0x2, 0x4}, {0x3a, 0x6}, {0x20, 0x6}, {0x0, 0x4}, {0x7f, 0x7}, {0x1, 0x7}, {0x8, 0x3}, {0x7, 0x4}, {0x3f, 0x1}, {0x3, 0x4}, {0x2}, {0x1f, 0x1}, {0xf8, 0x3}, {0x1, 0x5}], "2f10c13b1320f82b"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0x3, 0x7}, {0x7, 0x4}, {0x4, 0x7}, {0x2, 0x1}, {0x1f, 0x7}, {0xa5, 0x4}, {0x65, 0x4}, {0x9, 0x7}], "be02396e2de23506"}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) ioctl$CDROM_MEDIA_CHANGED(r2, 0x5325, 0x8) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x42000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x24, r3, 0x4, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_STA_TX_POWER={0x6}]}, 0x24}}, 0x4850) ioctl$sock_ifreq(r1, 0xa9, &(0x7f0000000800)={'syzkaller0\x00', @ifru_settings={0x0, 0x0, @te1=&(0x7f00000007c0)={0x9, 0x3, 0x3, 0x48}}}) sysinfo(&(0x7f0000000840)=""/122) syz_genetlink_get_family_id$team(&(0x7f00000008c0), r2) r5 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000900)) sendmsg$802154_raw(r5, &(0x7f0000000a80)={0xfffffffffffffffe, 0x0, &(0x7f0000000a40)={&(0x7f0000000940)="b76454b20b7ab7f1c8f2524461f12070545d1eaac1636e80e8b1fed838f1018c6633b7d8e36172997d2afb57dcab6a5f1cd483e57e6b4697785a368b03b102b25fde82e84038f42064c7cad207a57446f8ed4eb3e6dc4b6760792505f5cc2e345b10dc6d4d6ab4cc364d4cfb1601034f43aa75fd6ac2549b0998f57de30e4c64aaf217669dcb49b67c92f4a65144ff327c13128c159f09d4ca472303d76af4b7fd7c200e74ababf9c8fb3b777ed62c0aec7491bda64fb32af670f2f69d437f8fd16ca9e3290ea83118ee05a7a6e61742eaca354a89760c8be7a15d65c1ce1e91589eac53386e2680992aaa57", 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x4001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000e00)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, r5, 0x0, &(0x7f0000000dc0)={&(0x7f0000000b80)=@nl=@proc, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000c00)=""/219, 0xdb}, {&(0x7f0000000d00)=""/31, 0x1f}], 0x2, &(0x7f0000000d80)=""/60, 0x3c}, 0x0, 0x12100, 0x1, {0x1}}, 0x7) 13:16:05 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000002d40)={'syztnl1\x00', &(0x7f0000002cc0)={'syztnl1\x00', 0x0, 0x29, 0xe0, 0x9, 0x3, 0x20, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8, 0x7, 0x5, 0xad3}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000002e00)={'syztnl1\x00', &(0x7f0000002d80)={'syztnl2\x00', r1, 0x29, 0x1f, 0x8, 0x5a34e2c7, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x20, 0x7800, 0xd83, 0x1f}}) r2 = accept(r0, &(0x7f0000002e40)=@nfc_llcp, &(0x7f0000002ec0)=0x80) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, &(0x7f0000002f80)={'syztnl1\x00', &(0x7f0000002f00)={'syztnl0\x00', r1, 0x0, 0xff, 0x0, 0x9, 0x2, @loopback, @mcast2, 0x1, 0x700, 0xfffffff7, 0x3}}) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000002fc0)) sysinfo(&(0x7f0000003000)=""/97) rt_sigtimedwait(&(0x7f0000003080)={[0x1]}, &(0x7f00000030c0), &(0x7f0000003140), 0x8) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000003180)={'wlan0\x00', 0x0}) r6 = socket(0xb, 0x7, 0xfffffffc) sendmsg$NL80211_CMD_NEW_KEY(r6, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x24, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "ad60d5f4b1"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x20000000) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f00000032c0)) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000003300)='/sys/kernel/slab', 0x4040, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000033c0)={'syztnl1\x00', &(0x7f0000003340)={'ip6_vti0\x00', 0x0, 0x29, 0x9, 0x7, 0xfffff3f4, 0x3c, @private2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x40, 0xab7, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r7, 0x89f7, &(0x7f0000003480)={'syztnl1\x00', &(0x7f0000003400)={'ip6_vti0\x00', r8, 0x29, 0x80, 0x1, 0x2, 0x8, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @local, 0x1, 0x20, 0x1, 0x9}}) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000034c0)='/sys/module/nf_conntrack', 0x610001, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r9, &(0x7f00000035c0)={&(0x7f0000003500)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003580)={&(0x7f0000003540)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x840) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000003680)={'ip6_vti0\x00', &(0x7f0000003600)={'ip6_vti0\x00', r1, 0x29, 0x7f, 0x1e, 0x513, 0x30, @rand_addr=' \x01\x00', @mcast1, 0x20, 0x10, 0x4, 0x81000000}}) 13:16:14 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/processor', 0x0, 0x9) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x20008824) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2) r1 = io_uring_setup(0x37c5, &(0x7f0000000140)={0x0, 0x708f, 0x0, 0x1, 0x15}) socketpair(0x27, 0x5, 0xf8, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000200)={'ip6tnl0\x00', 0x0, 0x29, 0x8, 0x0, 0x3, 0x45, @mcast1, @remote, 0x80, 0x80, 0x1f, 0x800}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000400)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r3, 0x4, 0xb4, 0x6, 0x7, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, 0x40, 0x40, 0x3, 0x3ff}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000440)={'syztnl2\x00', r4, 0x4, 0x5f, 0x61, 0x0, 0x70, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x80, 0x8000, 0x81, 0x3ff}}) r5 = shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ff9000/0x4000)=nil) shmctl$SHM_UNLOCK(r5, 0xc) waitid(0x1, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000500)) timer_create(0x2, &(0x7f00000005c0)={0x0, 0x2b, 0x2}, &(0x7f0000000600)=0x0) timer_gettime(r6, &(0x7f0000000640)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x110, r1, 0x8000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000680)) waitid(0x0, 0x0, &(0x7f00000006c0), 0x1, &(0x7f0000000740)) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/module/snd_pcm', 0x14001, 0xc0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) 13:16:14 executing program 1: socketpair(0x2, 0x4, 0xfffffe9b, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x40, 0x0, 0x5, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x18}, 0x7800, 0x8000, 0xfffffffa, 0x233a}}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000100)={0x0, @loopback, @loopback}, &(0x7f0000000140)=0xc) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xad) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000200)) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/hci_vhci', 0x30000, 0x8) getsockopt$inet6_tcp_int(r3, 0x6, 0x5, &(0x7f0000000280), &(0x7f00000002c0)=0x4) recvmmsg(r0, &(0x7f0000003ac0)=[{{&(0x7f0000000300)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/238, 0xee}, {&(0x7f0000000480)=""/16, 0x10}, {&(0x7f00000004c0)=""/194, 0xc2}, {&(0x7f00000005c0)=""/206, 0xce}, {&(0x7f00000006c0)=""/52, 0x34}, {&(0x7f0000000700)=""/180, 0xb4}], 0x6, &(0x7f0000000840)=""/48, 0x30}, 0xbe4}, {{&(0x7f0000000880)=@can, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/55, 0x37}, {&(0x7f0000000940)=""/159, 0x9f}, {&(0x7f0000000a00)=""/72, 0x48}, {&(0x7f0000000a80)=""/165, 0xa5}, {&(0x7f0000000b40)=""/214, 0xd6}, {&(0x7f0000000c40)=""/120, 0x78}, {&(0x7f0000000cc0)=""/4096, 0x1000}], 0x7, &(0x7f0000001d40)=""/55, 0x37}}, {{&(0x7f0000001d80)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000001fc0)=[{&(0x7f0000001e00)=""/246, 0xf6}, {&(0x7f0000001f00)=""/142, 0x8e}], 0x2, &(0x7f0000002000)=""/216, 0xd8}, 0x7}, {{0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000002140)=""/221, 0xdd}, 0x3}, {{&(0x7f0000002240)=@tipc=@name, 0x80, &(0x7f0000003500)=[{&(0x7f00000022c0)=""/122, 0x7a}, {&(0x7f0000002340)=""/184, 0xb8}, {&(0x7f0000002400)=""/68, 0x44}, {&(0x7f0000002480)=""/18, 0x12}, {&(0x7f00000024c0)=""/10, 0xa}, {&(0x7f0000002500)=""/4096, 0x1000}], 0x6, &(0x7f0000003580)=""/247, 0xf7}, 0x101}, {{&(0x7f0000003680)=@in={0x2, 0x0, @initdev}, 0x80, &(0x7f00000039c0)=[{&(0x7f0000003700)=""/142, 0x8e}, {&(0x7f00000037c0)=""/55, 0x37}, {&(0x7f0000003800)=""/226, 0xe2}, {&(0x7f0000003900)=""/129, 0x81}], 0x4, &(0x7f0000003a00)=""/175, 0xaf}, 0x9}], 0x6, 0x40000100, 0x0) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000003d40)={&(0x7f0000003c40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000003d00)={&(0x7f0000003c80)={0x5c, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x28}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_DOMAIN={0x9, 0x1, '!$(\xd2\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4014}, 0x20008080) r4 = socket(0x11, 0x3, 0x1) ioctl$sock_SIOCGIFCONF(r4, 0x8912, &(0x7f0000003dc0)=@req={0x28, &(0x7f0000003d80)={'veth0_to_hsr\x00', @ifru_flags}}) socketpair(0x2, 0x3, 0x80, &(0x7f0000003e00)) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1c, &(0x7f00000042c0)="f13752d8c5aaf6511ad2b6c65e384ff767a81b2be50d70c8e190960799cc0afaa6d28ef4d68dd6241cb010aebfb78ed748cb2509b012ae3a6aaaf06a09631e9fb137ea2789b35e0ede25ed4f82fe846c350cdce613e43eab52f36e83dfe4b36c4ce1acbde6ab32a8307d54bd4e8a8bbd85dc32b084275897a7a63c4689f74ceac6d2289a82b4dcfe337a0700425af7c44d4915cd7fe2fa7ad36620760376c2fc4534c7f27228f7d839f7da9d8b76118b1c0413421fcc068ccbe2d9808395f4fcd3afa112c54a7d20ea2f806168c315522ea000af71218ab486a299749d8960b5d45e2b50402ce850a812b4e0dde3fd5e8a1242d066c3bf", 0xf7) 13:16:14 executing program 3: clock_nanosleep(0x1, 0x1, &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f0000000040)) r0 = getpgrp(0x0) sched_rr_get_interval(r0, &(0x7f0000000080)) r1 = getpgrp(r0) sched_rr_get_interval(r1, &(0x7f00000000c0)) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000100)={[0x5ab]}, &(0x7f0000000140), &(0x7f0000000200)={r2, r3+60000000}, 0x8) r4 = getpgrp(r1) waitid(0x3, r4, &(0x7f0000000240), 0x20000000, &(0x7f00000002c0)) sched_rr_get_interval(r4, &(0x7f0000000380)) clock_nanosleep(0x2, 0x0, &(0x7f00000003c0)={0x77359400}, &(0x7f0000000400)) timer_create(0x0, &(0x7f0000000440)={0x0, 0x3c, 0x4, @tid=r0}, &(0x7f0000000480)) wait4(r0, &(0x7f00000004c0), 0x8, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000a40)=[{{&(0x7f0000000500), 0x80, &(0x7f0000000600)=[{&(0x7f0000000580)=""/92, 0x5c}], 0x1, &(0x7f0000000640)=""/61, 0x3d}, 0x1}, {{&(0x7f0000000680)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000700)=""/217, 0xd9}, {&(0x7f0000000800)=""/165, 0xa5}, {&(0x7f00000008c0)}, {&(0x7f0000000900)=""/247, 0xf7}], 0x4}, 0x10000}], 0x2, 0x12041, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r4) r5 = gettid() waitid(0x2, r5, &(0x7f0000000ac0), 0x2, &(0x7f0000000b40)) ioctl$sock_ifreq(0xffffffffffffffff, 0x8932, &(0x7f0000000c00)={'veth1_to_batadv\x00', @ifru_names}) sched_rr_get_interval(r5, &(0x7f0000000c40)) 13:16:14 executing program 6: prctl$PR_SET_IO_FLUSHER(0x39, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) clock_gettime(0x5, &(0x7f0000000000)) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000040)) clock_nanosleep(0x5, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x80, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x5c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xe0}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "60ba389c00a5ea1d6dd65713749c7a02"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x3f}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x49}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3d3e46fd6bbaaa3c6a156013bb6a5a36"}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x10) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) setfsgid(0xee00) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, r1, 0x12, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xffff, 0x36}}}}, [@NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x9}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x9}, @NL80211_ATTR_P2P_CTWINDOW={0x5}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0xd800}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x20}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) rt_sigtimedwait(&(0x7f0000000400)={[0x7fff]}, 0x0, &(0x7f0000000440)={0x77359400}, 0x8) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x1) sched_rr_get_interval(0x0, &(0x7f0000000480)) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}}, 0x404) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) clock_nanosleep(0x0, 0x1, &(0x7f00000005c0), &(0x7f0000000600)) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) 13:16:14 executing program 4: ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000000)={0x5, 0x1, 0x4, 0x1, 0x6}) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0x80, 0x80) socket$inet(0x2, 0x800, 0x4) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000080)=""/4096) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000001100)={'ip6gre0\x00', &(0x7f0000001080)={'syztnl0\x00', 0x0, 0x2f, 0x72, 0x4, 0x7f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, 0x40, 0x40, 0x5, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000011c0)={'ip6gre0\x00', &(0x7f0000001140)={'syztnl2\x00', r1, 0x2f, 0xf7, 0xfe, 0x4, 0x8, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x20, 0xfe2, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000001280)={'syztnl0\x00', &(0x7f0000001200)={'ip6gre0\x00', r2, 0x4, 0x2, 0x4, 0xffffffff, 0x12, @mcast1, @loopback, 0x7800, 0x8, 0xbc, 0xd96}}) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001300), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x38, r4, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x402c890}, 0x40000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r5}}, 0x21) r6 = syz_genetlink_get_family_id$team(&(0x7f0000001480), r0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000015c0)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={0x90, r6, 0x12, 0x70bd26, 0x25dfdbfc, {}, [{{0x8, 0x1, r3}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x8000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001740)={'ip_vti0\x00', &(0x7f0000001600)={'ip_vti0\x00', r2, 0x7800, 0x0, 0x7ba6, 0x3, {{0x3f, 0x4, 0x0, 0x23, 0xfc, 0x67, 0x0, 0xff, 0x4, 0x0, @private=0xa010100, @empty, {[@generic={0x0, 0xa, "40ebf02080ba2927"}, @timestamp_prespec={0x44, 0xc, 0x43, 0x3, 0x4, [{@loopback, 0x100}]}, @cipso={0x86, 0x51, 0x2, [{0x2, 0x4, "ca84"}, {0x1, 0xe, "0fb6e4ebf725212a1f4921ab"}, {0x0, 0x10, "4e91c861d05464ee62c7e2524b76"}, {0x0, 0x12, "b421989cb68da381e74d9a94bb264171"}, {0x2, 0x8, "0c43715770af"}, {0x7, 0xf, "3af348b6e9faa379f4f34958e2"}]}, @rr={0x7, 0xf, 0x65, [@empty, @dev={0xac, 0x14, 0x14, 0x10}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_prespec={0x44, 0x34, 0xbd, 0x3, 0x2, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1ff}, {@multicast2, 0xbc}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x1}, {@rand_addr=0x64010102, 0xa5f}, {@remote}, {@private=0xa010101, 0x2}]}, @timestamp_prespec={0x44, 0x14, 0x52, 0x3, 0xc, [{@local, 0xff}, {@loopback, 0x7ff}]}, @ssrr={0x89, 0xb, 0x67, [@remote, @empty]}, @cipso={0x86, 0x1c, 0x0, [{0x1, 0x8, "09576fd99f05"}, {0x5, 0xe, "3b7b886315736799754d0f1e"}]}, @noop]}}}}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_VLAN(r7, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x24, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x401}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x80000001}]}, 0x24}, 0x1, 0x0, 0x0, 0x8}, 0x20000000) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001940)={&(0x7f00000018c0)={0x44, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x11}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0xa}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x9}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000044}, 0x804) io_uring_setup(0x4cfd, &(0x7f0000001a80)={0x0, 0xe6d8, 0x2, 0x1, 0x150}) 13:16:14 executing program 2: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)="3c83aba66cc4e07e77a76c5edaaaeb2c142196dcb4948d1bea7cc7c56c0522d946cb5ac4231e337744cd43286b5d06c909b77ba0b1dfa735763b470323ffa9785312df86d54ab56c63f169c855da890385e79ba7c12224570381988ffe8d2b65a733b2b77981ee7865d86a0dd49f2d3d71ba26e167eb653682c8fb6d85ea2cee1876e5e45d8d6f35f9920ea42fd04de7fa1e08de2e345b5c79da16e0f38f87b93c79d554bdf32aa1cdf40cebec88412bea62d90d3915360fdeab0e5ac3a9df3b64a91136855c82d51ab174ac5cd6bd6b9d223bcd6f79ffce263b54bd9999c01459a72d54dffa20773c8d28d00c5e0ea136538365", 0xf4}, 0x1, 0x0, 0x0, 0x4000}, 0x20000001) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000180)) sysinfo(&(0x7f00000001c0)=""/142) ioctl$sock_ifreq(r1, 0x8931, &(0x7f0000000280)={'batadv_slave_0\x00', @ifru_addrs=@in={0x2, 0x0, @local}}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/bus/platform', 0x16001, 0x9) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r3, 0x2, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000090) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f00000004c0)={0x14c, r3, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x81, 0x6}, {0xe9, 0x1}, {0x6, 0x5}, {0x2d, 0x6}, {0x81, 0x2}, {0x3f, 0x6}, {0x8, 0x2}, {0x1, 0x7}, {0x48, 0x5}, {0x80, 0x5}, {0xff, 0x6}, {0x2, 0x5}], "c1060bf1205e1788"}}, @NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x5, 0x6}, {0x2, 0x5}, {0x5, 0x7}, {0xff, 0x7}, {0x0, 0x5}, {0x3, 0x2}, {0xfa, 0x2}, {0x1, 0x7}, {0x0, 0x2}, {0x6f}, {}, {0x7, 0x7}, {0x81, 0x7}, {0x6, 0x7}, {0x7, 0x7}, {0x4, 0x5}, {0x1f}, {0x5, 0x4}], "98cb2e5ab9500d0c"}}, @NL80211_ATTR_QOS_MAP={0xe, 0xc7, {[{0x81, 0x6}], "57fcf5f60644f176"}}, @NL80211_ATTR_QOS_MAP={0x34, 0xc7, {[{0x1, 0x7}, {0xff, 0x3}, {0x4, 0x1}, {0x40}, {0x8, 0x6}, {0x6, 0x2}, {0x5b, 0x6}, {0x40, 0x6}, {0x5, 0x2}, {0x2, 0x3}, {0xff, 0x1}, {0x7, 0x5}, {0x81, 0x6}, {0x1}, {0xfa, 0x7}, {0xb2, 0x7}, {0x6, 0x7}, {0x2, 0x5}, {0x7f, 0x4}, {0x9}], "c94f799edde58374"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "71a679bb7dfeab0b"}}, @NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0x3f, 0x3}, {0x15, 0x1}, {0xc0, 0x4}, {0x3}, {0x1, 0x7}, {0x9, 0x7}, {0x6}, {0x4, 0x3}, {0x0, 0x3}, {0x7, 0x2}, {0xd4, 0x7}, {0x1, 0x4}, {0x4}, {0x6, 0x7}], "73aa28212d51194b"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0xff, 0x5}, {0x2, 0x1}, {0x7, 0x5}, {0x2, 0x2}, {0x1, 0x6}, {0x6, 0x5}, {0xa1}, {0x1, 0x1}], "402ab314775a4ac1"}}, @NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0x40, 0x3}, {0x20, 0x7}, {0x9, 0x1}, {0x3, 0x2}, {0x40, 0x6}, {0x2, 0x4}, {0x3a, 0x6}, {0x20, 0x6}, {0x0, 0x4}, {0x7f, 0x7}, {0x1, 0x7}, {0x8, 0x3}, {0x7, 0x4}, {0x3f, 0x1}, {0x3, 0x4}, {0x2}, {0x1f, 0x1}, {0xf8, 0x3}, {0x1, 0x5}], "2f10c13b1320f82b"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0x3, 0x7}, {0x7, 0x4}, {0x4, 0x7}, {0x2, 0x1}, {0x1f, 0x7}, {0xa5, 0x4}, {0x65, 0x4}, {0x9, 0x7}], "be02396e2de23506"}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) ioctl$CDROM_MEDIA_CHANGED(r2, 0x5325, 0x8) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x42000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x24, r3, 0x4, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_STA_TX_POWER={0x6}]}, 0x24}}, 0x4850) ioctl$sock_ifreq(r1, 0xa9, &(0x7f0000000800)={'syzkaller0\x00', @ifru_settings={0x0, 0x0, @te1=&(0x7f00000007c0)={0x9, 0x3, 0x3, 0x48}}}) sysinfo(&(0x7f0000000840)=""/122) syz_genetlink_get_family_id$team(&(0x7f00000008c0), r2) r5 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000900)) accept(r0, &(0x7f0000000ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000b40)=0x80) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000e00)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, r5, 0x0, &(0x7f0000000dc0)={&(0x7f0000000b80)=@nl=@proc, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000c00)=""/219, 0xdb}, {&(0x7f0000000d00)=""/31, 0x1f}], 0x2, &(0x7f0000000d80)=""/60, 0x3c}, 0x0, 0x12100, 0x1, {0x1}}, 0x7) 13:16:14 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000002d40)={'syztnl1\x00', &(0x7f0000002cc0)={'syztnl1\x00', 0x0, 0x29, 0xe0, 0x9, 0x3, 0x20, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8, 0x7, 0x5, 0xad3}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000002e00)={'syztnl1\x00', &(0x7f0000002d80)={'syztnl2\x00', r1, 0x29, 0x1f, 0x8, 0x5a34e2c7, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x20, 0x7800, 0xd83, 0x1f}}) r2 = accept(r0, &(0x7f0000002e40)=@nfc_llcp, &(0x7f0000002ec0)=0x80) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, &(0x7f0000002f80)={'syztnl1\x00', &(0x7f0000002f00)={'syztnl0\x00', r1, 0x0, 0xff, 0x0, 0x9, 0x2, @loopback, @mcast2, 0x1, 0x700, 0xfffffff7, 0x3}}) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000002fc0)) sysinfo(&(0x7f0000003000)=""/97) rt_sigtimedwait(&(0x7f0000003080)={[0x1]}, &(0x7f00000030c0), &(0x7f0000003140), 0x8) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000003180)={'wlan0\x00'}) r5 = socket(0xb, 0x7, 0xfffffffc) sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x24, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "ad60d5f4b1"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x20000000) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f00000032c0)) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000003300)='/sys/kernel/slab', 0x4040, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000033c0)={'syztnl1\x00', &(0x7f0000003340)={'ip6_vti0\x00', 0x0, 0x29, 0x9, 0x7, 0xfffff3f4, 0x3c, @private2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x40, 0xab7, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r6, 0x89f7, &(0x7f0000003480)={'syztnl1\x00', &(0x7f0000003400)={'ip6_vti0\x00', r7, 0x29, 0x80, 0x1, 0x2, 0x8, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @local, 0x1, 0x20, 0x1, 0x9}}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000034c0)='/sys/module/nf_conntrack', 0x610001, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000003680)={'ip6_vti0\x00', &(0x7f0000003600)={'ip6_vti0\x00', r1, 0x29, 0x7f, 0x1e, 0x513, 0x30, @rand_addr=' \x01\x00', @mcast1, 0x20, 0x10, 0x4, 0x81000000}}) 13:16:14 executing program 7: ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000001040)={&(0x7f0000000000), &(0x7f0000000040)=""/4096, 0x1000}) tkill(0x0, 0x13) waitid(0x1, 0xffffffffffffffff, &(0x7f0000001080), 0x1, &(0x7f0000001100)) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001280)={&(0x7f0000001200)={0x60, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x400, 0x60}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xe}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xb}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x9}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xf}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x40004}, 0x10) r0 = syz_open_dev$usbmon(&(0x7f0000001300), 0x1, 0x52401) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000002380)={&(0x7f0000001340), &(0x7f0000001380)=""/4096, 0x1000}) r1 = gettid() getpgrp(r1) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000002480)={&(0x7f00000023c0), &(0x7f0000002400)=""/97, 0x61}) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f0000002600)={&(0x7f00000024c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000002500)=""/226, 0xe2}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000007200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x3, 0x2004, @fd_index=0x9, 0x10001, 0x0, 0x0, 0x17, 0x1, {0x3}}, 0x30) 13:16:14 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/processor', 0x0, 0x9) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x20008824) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2) r1 = io_uring_setup(0x37c5, &(0x7f0000000140)={0x0, 0x708f, 0x0, 0x1, 0x15}) socketpair(0x27, 0x5, 0xf8, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000200)={'ip6tnl0\x00', 0x0, 0x29, 0x8, 0x0, 0x3, 0x45, @mcast1, @remote, 0x80, 0x80, 0x1f, 0x800}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000400)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r3, 0x4, 0xb4, 0x6, 0x7, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, 0x40, 0x40, 0x3, 0x3ff}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000440)={'syztnl2\x00', r4, 0x4, 0x5f, 0x61, 0x0, 0x70, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x80, 0x8000, 0x81, 0x3ff}}) r5 = shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ff9000/0x4000)=nil) shmctl$SHM_UNLOCK(r5, 0xc) waitid(0x1, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000500)) timer_create(0x2, &(0x7f00000005c0)={0x0, 0x2b, 0x2}, &(0x7f0000000600)=0x0) timer_gettime(r6, &(0x7f0000000640)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x110, r1, 0x8000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000680)) waitid(0x0, 0x0, &(0x7f00000006c0), 0x1, &(0x7f0000000740)) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) 13:16:14 executing program 1: socketpair(0x2, 0x4, 0xfffffe9b, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x40, 0x0, 0x5, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x18}, 0x7800, 0x8000, 0xfffffffa, 0x233a}}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000100)={0x0, @loopback, @loopback}, &(0x7f0000000140)=0xc) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xad) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000200)) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/hci_vhci', 0x30000, 0x8) getsockopt$inet6_tcp_int(r3, 0x6, 0x5, &(0x7f0000000280), &(0x7f00000002c0)=0x4) recvmmsg(r0, &(0x7f0000003ac0)=[{{&(0x7f0000000300)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/238, 0xee}, {&(0x7f0000000480)=""/16, 0x10}, {&(0x7f00000004c0)=""/194, 0xc2}, {&(0x7f00000005c0)=""/206, 0xce}, {&(0x7f00000006c0)=""/52, 0x34}, {&(0x7f0000000700)=""/180, 0xb4}], 0x6, &(0x7f0000000840)=""/48, 0x30}, 0xbe4}, {{&(0x7f0000000880)=@can, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/55, 0x37}, {&(0x7f0000000940)=""/159, 0x9f}, {&(0x7f0000000a00)=""/72, 0x48}, {&(0x7f0000000a80)=""/165, 0xa5}, {&(0x7f0000000b40)=""/214, 0xd6}, {&(0x7f0000000c40)=""/120, 0x78}, {&(0x7f0000000cc0)=""/4096, 0x1000}], 0x7, &(0x7f0000001d40)=""/55, 0x37}}, {{&(0x7f0000001d80)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000001fc0)=[{&(0x7f0000001e00)=""/246, 0xf6}, {&(0x7f0000001f00)=""/142, 0x8e}], 0x2, &(0x7f0000002000)=""/216, 0xd8}, 0x7}, {{0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000002140)=""/221, 0xdd}, 0x3}, {{&(0x7f0000002240)=@tipc=@name, 0x80, &(0x7f0000003500)=[{&(0x7f00000022c0)=""/122, 0x7a}, {&(0x7f0000002340)=""/184, 0xb8}, {&(0x7f0000002400)=""/68, 0x44}, {&(0x7f0000002480)=""/18, 0x12}, {&(0x7f00000024c0)=""/10, 0xa}, {&(0x7f0000002500)=""/4096, 0x1000}], 0x6, &(0x7f0000003580)=""/247, 0xf7}, 0x101}, {{&(0x7f0000003680)=@in={0x2, 0x0, @initdev}, 0x80, &(0x7f00000039c0)=[{&(0x7f0000003700)=""/142, 0x8e}, {&(0x7f00000037c0)=""/55, 0x37}, {&(0x7f0000003800)=""/226, 0xe2}, {&(0x7f0000003900)=""/129, 0x81}], 0x4, &(0x7f0000003a00)=""/175, 0xaf}, 0x9}], 0x6, 0x40000100, 0x0) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000003d40)={&(0x7f0000003c40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000003d00)={&(0x7f0000003c80)={0x5c, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x28}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_DOMAIN={0x9, 0x1, '!$(\xd2\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4014}, 0x20008080) r4 = socket(0x11, 0x3, 0x1) ioctl$sock_SIOCGIFCONF(r4, 0x8912, &(0x7f0000003dc0)=@req={0x28, &(0x7f0000003d80)={'veth0_to_hsr\x00', @ifru_flags}}) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1c, &(0x7f00000042c0)="f13752d8c5aaf6511ad2b6c65e384ff767a81b2be50d70c8e190960799cc0afaa6d28ef4d68dd6241cb010aebfb78ed748cb2509b012ae3a6aaaf06a09631e9fb137ea2789b35e0ede25ed4f82fe846c350cdce613e43eab52f36e83dfe4b36c4ce1acbde6ab32a8307d54bd4e8a8bbd85dc32b084275897a7a63c4689f74ceac6d2289a82b4dcfe337a0700425af7c44d4915cd7fe2fa7ad36620760376c2fc4534c7f27228f7d839f7da9d8b76118b1c0413421fcc068ccbe2d9808395f4fcd3afa112c54a7d20ea2f806168c315522ea000af71218ab486a299749d8960b5d45e2b50402ce850a812b4e0dde3fd5e8a1242d066c3bf", 0xf7) 13:16:14 executing program 7: ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000001040)={&(0x7f0000000000), &(0x7f0000000040)=""/4096, 0x1000}) tkill(0x0, 0x13) waitid(0x1, 0xffffffffffffffff, &(0x7f0000001080), 0x1, &(0x7f0000001100)) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001280)={&(0x7f0000001200)={0x60, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x400, 0x60}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xe}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xb}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x9}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xf}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x40004}, 0x10) r0 = syz_open_dev$usbmon(&(0x7f0000001300), 0x1, 0x52401) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000002380)={&(0x7f0000001340), &(0x7f0000001380)=""/4096, 0x1000}) r1 = gettid() getpgrp(r1) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000002480)={&(0x7f00000023c0), &(0x7f0000002400)=""/97, 0x61}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000007200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x3, 0x2004, @fd_index=0x9, 0x10001, 0x0, 0x0, 0x17, 0x1, {0x3}}, 0x30) 13:16:14 executing program 4: ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000000)={0x5, 0x1, 0x4, 0x1, 0x6}) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0x80, 0x80) socket$inet(0x2, 0x800, 0x4) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000080)=""/4096) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000001100)={'ip6gre0\x00', &(0x7f0000001080)={'syztnl0\x00', 0x0, 0x2f, 0x72, 0x4, 0x7f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, 0x40, 0x40, 0x5, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000011c0)={'ip6gre0\x00', &(0x7f0000001140)={'syztnl2\x00', r1, 0x2f, 0xf7, 0xfe, 0x4, 0x8, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x20, 0xfe2, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000001280)={'syztnl0\x00', &(0x7f0000001200)={'ip6gre0\x00', r2, 0x4, 0x2, 0x4, 0xffffffff, 0x12, @mcast1, @loopback, 0x7800, 0x8, 0xbc, 0xd96}}) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001300), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x38, r4, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x402c890}, 0x40000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r5}}, 0x21) r6 = syz_genetlink_get_family_id$team(&(0x7f0000001480), r0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000015c0)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={0x90, r6, 0x12, 0x70bd26, 0x25dfdbfc, {}, [{{0x8, 0x1, r3}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x8000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001740)={'ip_vti0\x00', &(0x7f0000001600)={'ip_vti0\x00', r2, 0x7800, 0x0, 0x7ba6, 0x3, {{0x3f, 0x4, 0x0, 0x23, 0xfc, 0x67, 0x0, 0xff, 0x4, 0x0, @private=0xa010100, @empty, {[@generic={0x0, 0xa, "40ebf02080ba2927"}, @timestamp_prespec={0x44, 0xc, 0x43, 0x3, 0x4, [{@loopback, 0x100}]}, @cipso={0x86, 0x51, 0x2, [{0x2, 0x4, "ca84"}, {0x1, 0xe, "0fb6e4ebf725212a1f4921ab"}, {0x0, 0x10, "4e91c861d05464ee62c7e2524b76"}, {0x0, 0x12, "b421989cb68da381e74d9a94bb264171"}, {0x2, 0x8, "0c43715770af"}, {0x7, 0xf, "3af348b6e9faa379f4f34958e2"}]}, @rr={0x7, 0xf, 0x65, [@empty, @dev={0xac, 0x14, 0x14, 0x10}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_prespec={0x44, 0x34, 0xbd, 0x3, 0x2, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1ff}, {@multicast2, 0xbc}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x1}, {@rand_addr=0x64010102, 0xa5f}, {@remote}, {@private=0xa010101, 0x2}]}, @timestamp_prespec={0x44, 0x14, 0x52, 0x3, 0xc, [{@local, 0xff}, {@loopback, 0x7ff}]}, @ssrr={0x89, 0xb, 0x67, [@remote, @empty]}, @cipso={0x86, 0x1c, 0x0, [{0x1, 0x8, "09576fd99f05"}, {0x5, 0xe, "3b7b886315736799754d0f1e"}]}, @noop]}}}}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_VLAN(r7, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x24, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x401}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x80000001}]}, 0x24}, 0x1, 0x0, 0x0, 0x8}, 0x20000000) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001940)={&(0x7f00000018c0)={0x44, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x11}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0xa}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x9}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000044}, 0x804) io_uring_setup(0x4cfd, &(0x7f0000001a80)={0x0, 0xe6d8, 0x2, 0x1, 0x150}) 13:16:14 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/processor', 0x0, 0x9) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x20008824) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2) r1 = io_uring_setup(0x37c5, &(0x7f0000000140)={0x0, 0x708f, 0x0, 0x1, 0x15}) socketpair(0x27, 0x5, 0xf8, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000200)={'ip6tnl0\x00', 0x0, 0x29, 0x8, 0x0, 0x3, 0x45, @mcast1, @remote, 0x80, 0x80, 0x1f, 0x800}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000400)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r3, 0x4, 0xb4, 0x6, 0x7, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, 0x40, 0x40, 0x3, 0x3ff}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000440)={'syztnl2\x00', r4, 0x4, 0x5f, 0x61, 0x0, 0x70, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x80, 0x8000, 0x81, 0x3ff}}) r5 = shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ff9000/0x4000)=nil) shmctl$SHM_UNLOCK(r5, 0xc) waitid(0x1, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000500)) timer_create(0x2, &(0x7f00000005c0)={0x0, 0x2b, 0x2}, &(0x7f0000000600)=0x0) timer_gettime(r6, &(0x7f0000000640)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x110, r1, 0x8000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000680)) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) 13:16:14 executing program 7: ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000001040)={&(0x7f0000000000), &(0x7f0000000040)=""/4096, 0x1000}) tkill(0x0, 0x13) waitid(0x1, 0xffffffffffffffff, &(0x7f0000001080), 0x1, &(0x7f0000001100)) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001280)={&(0x7f0000001200)={0x60, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x400, 0x60}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xe}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xb}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x9}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xf}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x40004}, 0x10) r0 = syz_open_dev$usbmon(&(0x7f0000001300), 0x1, 0x52401) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000002380)={&(0x7f0000001340), &(0x7f0000001380)=""/4096, 0x1000}) r1 = gettid() getpgrp(r1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000007200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x3, 0x2004, @fd_index=0x9, 0x10001, 0x0, 0x0, 0x17, 0x1, {0x3}}, 0x30) 13:16:14 executing program 1: socketpair(0x2, 0x4, 0xfffffe9b, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x40, 0x0, 0x5, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x18}, 0x7800, 0x8000, 0xfffffffa, 0x233a}}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000100)={0x0, @loopback, @loopback}, &(0x7f0000000140)=0xc) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xad) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000200)) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/hci_vhci', 0x30000, 0x8) getsockopt$inet6_tcp_int(r3, 0x6, 0x5, &(0x7f0000000280), &(0x7f00000002c0)=0x4) recvmmsg(r0, &(0x7f0000003ac0)=[{{&(0x7f0000000300)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/238, 0xee}, {&(0x7f0000000480)=""/16, 0x10}, {&(0x7f00000004c0)=""/194, 0xc2}, {&(0x7f00000005c0)=""/206, 0xce}, {&(0x7f00000006c0)=""/52, 0x34}, {&(0x7f0000000700)=""/180, 0xb4}], 0x6, &(0x7f0000000840)=""/48, 0x30}, 0xbe4}, {{&(0x7f0000000880)=@can, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/55, 0x37}, {&(0x7f0000000940)=""/159, 0x9f}, {&(0x7f0000000a00)=""/72, 0x48}, {&(0x7f0000000a80)=""/165, 0xa5}, {&(0x7f0000000b40)=""/214, 0xd6}, {&(0x7f0000000c40)=""/120, 0x78}, {&(0x7f0000000cc0)=""/4096, 0x1000}], 0x7, &(0x7f0000001d40)=""/55, 0x37}}, {{&(0x7f0000001d80)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000001fc0)=[{&(0x7f0000001e00)=""/246, 0xf6}, {&(0x7f0000001f00)=""/142, 0x8e}], 0x2, &(0x7f0000002000)=""/216, 0xd8}, 0x7}, {{0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000002140)=""/221, 0xdd}, 0x3}, {{&(0x7f0000002240)=@tipc=@name, 0x80, &(0x7f0000003500)=[{&(0x7f00000022c0)=""/122, 0x7a}, {&(0x7f0000002340)=""/184, 0xb8}, {&(0x7f0000002400)=""/68, 0x44}, {&(0x7f0000002480)=""/18, 0x12}, {&(0x7f00000024c0)=""/10, 0xa}, {&(0x7f0000002500)=""/4096, 0x1000}], 0x6, &(0x7f0000003580)=""/247, 0xf7}, 0x101}, {{&(0x7f0000003680)=@in={0x2, 0x0, @initdev}, 0x80, &(0x7f00000039c0)=[{&(0x7f0000003700)=""/142, 0x8e}, {&(0x7f00000037c0)=""/55, 0x37}, {&(0x7f0000003800)=""/226, 0xe2}, {&(0x7f0000003900)=""/129, 0x81}], 0x4, &(0x7f0000003a00)=""/175, 0xaf}, 0x9}], 0x6, 0x40000100, 0x0) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000003d40)={&(0x7f0000003c40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000003d00)={&(0x7f0000003c80)={0x5c, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x28}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_DOMAIN={0x9, 0x1, '!$(\xd2\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4014}, 0x20008080) socket(0x11, 0x3, 0x1) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1c, &(0x7f00000042c0)="f13752d8c5aaf6511ad2b6c65e384ff767a81b2be50d70c8e190960799cc0afaa6d28ef4d68dd6241cb010aebfb78ed748cb2509b012ae3a6aaaf06a09631e9fb137ea2789b35e0ede25ed4f82fe846c350cdce613e43eab52f36e83dfe4b36c4ce1acbde6ab32a8307d54bd4e8a8bbd85dc32b084275897a7a63c4689f74ceac6d2289a82b4dcfe337a0700425af7c44d4915cd7fe2fa7ad36620760376c2fc4534c7f27228f7d839f7da9d8b76118b1c0413421fcc068ccbe2d9808395f4fcd3afa112c54a7d20ea2f806168c315522ea000af71218ab486a299749d8960b5d45e2b50402ce850a812b4e0dde3fd5e8a1242d066c3bf", 0xf7) 13:16:14 executing program 2: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)="3c83aba66cc4e07e77a76c5edaaaeb2c142196dcb4948d1bea7cc7c56c0522d946cb5ac4231e337744cd43286b5d06c909b77ba0b1dfa735763b470323ffa9785312df86d54ab56c63f169c855da890385e79ba7c12224570381988ffe8d2b65a733b2b77981ee7865d86a0dd49f2d3d71ba26e167eb653682c8fb6d85ea2cee1876e5e45d8d6f35f9920ea42fd04de7fa1e08de2e345b5c79da16e0f38f87b93c79d554bdf32aa1cdf40cebec88412bea62d90d3915360fdeab0e5ac3a9df3b64a91136855c82d51ab174ac5cd6bd6b9d223bcd6f79ffce263b54bd9999c01459a72d54dffa20773c8d28d00c5e0ea136538365", 0xf4}, 0x1, 0x0, 0x0, 0x4000}, 0x20000001) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000180)) sysinfo(&(0x7f00000001c0)=""/142) ioctl$sock_ifreq(r1, 0x8931, &(0x7f0000000280)={'batadv_slave_0\x00', @ifru_addrs=@in={0x2, 0x0, @local}}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/bus/platform', 0x16001, 0x9) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r3, 0x2, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000090) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f00000004c0)={0x14c, r3, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x81, 0x6}, {0xe9, 0x1}, {0x6, 0x5}, {0x2d, 0x6}, {0x81, 0x2}, {0x3f, 0x6}, {0x8, 0x2}, {0x1, 0x7}, {0x48, 0x5}, {0x80, 0x5}, {0xff, 0x6}, {0x2, 0x5}], "c1060bf1205e1788"}}, @NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x5, 0x6}, {0x2, 0x5}, {0x5, 0x7}, {0xff, 0x7}, {0x0, 0x5}, {0x3, 0x2}, {0xfa, 0x2}, {0x1, 0x7}, {0x0, 0x2}, {0x6f}, {}, {0x7, 0x7}, {0x81, 0x7}, {0x6, 0x7}, {0x7, 0x7}, {0x4, 0x5}, {0x1f}, {0x5, 0x4}], "98cb2e5ab9500d0c"}}, @NL80211_ATTR_QOS_MAP={0xe, 0xc7, {[{0x81, 0x6}], "57fcf5f60644f176"}}, @NL80211_ATTR_QOS_MAP={0x34, 0xc7, {[{0x1, 0x7}, {0xff, 0x3}, {0x4, 0x1}, {0x40}, {0x8, 0x6}, {0x6, 0x2}, {0x5b, 0x6}, {0x40, 0x6}, {0x5, 0x2}, {0x2, 0x3}, {0xff, 0x1}, {0x7, 0x5}, {0x81, 0x6}, {0x1}, {0xfa, 0x7}, {0xb2, 0x7}, {0x6, 0x7}, {0x2, 0x5}, {0x7f, 0x4}, {0x9}], "c94f799edde58374"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "71a679bb7dfeab0b"}}, @NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0x3f, 0x3}, {0x15, 0x1}, {0xc0, 0x4}, {0x3}, {0x1, 0x7}, {0x9, 0x7}, {0x6}, {0x4, 0x3}, {0x0, 0x3}, {0x7, 0x2}, {0xd4, 0x7}, {0x1, 0x4}, {0x4}, {0x6, 0x7}], "73aa28212d51194b"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0xff, 0x5}, {0x2, 0x1}, {0x7, 0x5}, {0x2, 0x2}, {0x1, 0x6}, {0x6, 0x5}, {0xa1}, {0x1, 0x1}], "402ab314775a4ac1"}}, @NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0x40, 0x3}, {0x20, 0x7}, {0x9, 0x1}, {0x3, 0x2}, {0x40, 0x6}, {0x2, 0x4}, {0x3a, 0x6}, {0x20, 0x6}, {0x0, 0x4}, {0x7f, 0x7}, {0x1, 0x7}, {0x8, 0x3}, {0x7, 0x4}, {0x3f, 0x1}, {0x3, 0x4}, {0x2}, {0x1f, 0x1}, {0xf8, 0x3}, {0x1, 0x5}], "2f10c13b1320f82b"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0x3, 0x7}, {0x7, 0x4}, {0x4, 0x7}, {0x2, 0x1}, {0x1f, 0x7}, {0xa5, 0x4}, {0x65, 0x4}, {0x9, 0x7}], "be02396e2de23506"}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) ioctl$CDROM_MEDIA_CHANGED(r2, 0x5325, 0x8) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x42000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x24, r3, 0x4, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_STA_TX_POWER={0x6}]}, 0x24}}, 0x4850) ioctl$sock_ifreq(r1, 0xa9, &(0x7f0000000800)={'syzkaller0\x00', @ifru_settings={0x0, 0x0, @te1=&(0x7f00000007c0)={0x9, 0x3, 0x3, 0x48}}}) sysinfo(&(0x7f0000000840)=""/122) syz_genetlink_get_family_id$team(&(0x7f00000008c0), r2) accept(r0, &(0x7f0000000ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000b40)=0x80) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000e00)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000dc0)={&(0x7f0000000b80)=@nl=@proc, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000c00)=""/219, 0xdb}, {&(0x7f0000000d00)=""/31, 0x1f}], 0x2, &(0x7f0000000d80)=""/60, 0x3c}, 0x0, 0x12100, 0x1, {0x1}}, 0x7) 13:16:23 executing program 7: ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000001040)={&(0x7f0000000000), &(0x7f0000000040)=""/4096, 0x1000}) tkill(0x0, 0x13) waitid(0x1, 0xffffffffffffffff, &(0x7f0000001080), 0x1, &(0x7f0000001100)) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001280)={&(0x7f0000001200)={0x60, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x400, 0x60}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xe}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xb}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x9}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xf}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x40004}, 0x10) r0 = syz_open_dev$usbmon(&(0x7f0000001300), 0x1, 0x52401) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000002380)={&(0x7f0000001340), &(0x7f0000001380)=""/4096, 0x1000}) gettid() syz_io_uring_submit(0x0, 0x0, &(0x7f0000007200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x3, 0x2004, @fd_index=0x9, 0x10001, 0x0, 0x0, 0x17, 0x1, {0x3}}, 0x30) 13:16:23 executing program 2: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)="3c83aba66cc4e07e77a76c5edaaaeb2c142196dcb4948d1bea7cc7c56c0522d946cb5ac4231e337744cd43286b5d06c909b77ba0b1dfa735763b470323ffa9785312df86d54ab56c63f169c855da890385e79ba7c12224570381988ffe8d2b65a733b2b77981ee7865d86a0dd49f2d3d71ba26e167eb653682c8fb6d85ea2cee1876e5e45d8d6f35f9920ea42fd04de7fa1e08de2e345b5c79da16e0f38f87b93c79d554bdf32aa1cdf40cebec88412bea62d90d3915360fdeab0e5ac3a9df3b64a91136855c82d51ab174ac5cd6bd6b9d223bcd6f79ffce263b54bd9999c01459a72d54dffa20773c8d28d00c5e0ea136538365", 0xf4}, 0x1, 0x0, 0x0, 0x4000}, 0x20000001) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000180)) sysinfo(&(0x7f00000001c0)=""/142) ioctl$sock_ifreq(r1, 0x8931, &(0x7f0000000280)={'batadv_slave_0\x00', @ifru_addrs=@in={0x2, 0x0, @local}}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/bus/platform', 0x16001, 0x9) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r3, 0x2, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000090) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f00000004c0)={0x14c, r3, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x81, 0x6}, {0xe9, 0x1}, {0x6, 0x5}, {0x2d, 0x6}, {0x81, 0x2}, {0x3f, 0x6}, {0x8, 0x2}, {0x1, 0x7}, {0x48, 0x5}, {0x80, 0x5}, {0xff, 0x6}, {0x2, 0x5}], "c1060bf1205e1788"}}, @NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x5, 0x6}, {0x2, 0x5}, {0x5, 0x7}, {0xff, 0x7}, {0x0, 0x5}, {0x3, 0x2}, {0xfa, 0x2}, {0x1, 0x7}, {0x0, 0x2}, {0x6f}, {}, {0x7, 0x7}, {0x81, 0x7}, {0x6, 0x7}, {0x7, 0x7}, {0x4, 0x5}, {0x1f}, {0x5, 0x4}], "98cb2e5ab9500d0c"}}, @NL80211_ATTR_QOS_MAP={0xe, 0xc7, {[{0x81, 0x6}], "57fcf5f60644f176"}}, @NL80211_ATTR_QOS_MAP={0x34, 0xc7, {[{0x1, 0x7}, {0xff, 0x3}, {0x4, 0x1}, {0x40}, {0x8, 0x6}, {0x6, 0x2}, {0x5b, 0x6}, {0x40, 0x6}, {0x5, 0x2}, {0x2, 0x3}, {0xff, 0x1}, {0x7, 0x5}, {0x81, 0x6}, {0x1}, {0xfa, 0x7}, {0xb2, 0x7}, {0x6, 0x7}, {0x2, 0x5}, {0x7f, 0x4}, {0x9}], "c94f799edde58374"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "71a679bb7dfeab0b"}}, @NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0x3f, 0x3}, {0x15, 0x1}, {0xc0, 0x4}, {0x3}, {0x1, 0x7}, {0x9, 0x7}, {0x6}, {0x4, 0x3}, {0x0, 0x3}, {0x7, 0x2}, {0xd4, 0x7}, {0x1, 0x4}, {0x4}, {0x6, 0x7}], "73aa28212d51194b"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0xff, 0x5}, {0x2, 0x1}, {0x7, 0x5}, {0x2, 0x2}, {0x1, 0x6}, {0x6, 0x5}, {0xa1}, {0x1, 0x1}], "402ab314775a4ac1"}}, @NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0x40, 0x3}, {0x20, 0x7}, {0x9, 0x1}, {0x3, 0x2}, {0x40, 0x6}, {0x2, 0x4}, {0x3a, 0x6}, {0x20, 0x6}, {0x0, 0x4}, {0x7f, 0x7}, {0x1, 0x7}, {0x8, 0x3}, {0x7, 0x4}, {0x3f, 0x1}, {0x3, 0x4}, {0x2}, {0x1f, 0x1}, {0xf8, 0x3}, {0x1, 0x5}], "2f10c13b1320f82b"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0x3, 0x7}, {0x7, 0x4}, {0x4, 0x7}, {0x2, 0x1}, {0x1f, 0x7}, {0xa5, 0x4}, {0x65, 0x4}, {0x9, 0x7}], "be02396e2de23506"}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) ioctl$CDROM_MEDIA_CHANGED(r2, 0x5325, 0x8) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x42000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x24, r3, 0x4, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_STA_TX_POWER={0x6}]}, 0x24}}, 0x4850) ioctl$sock_ifreq(r1, 0xa9, &(0x7f0000000800)={'syzkaller0\x00', @ifru_settings={0x0, 0x0, @te1=&(0x7f00000007c0)={0x9, 0x3, 0x3, 0x48}}}) sysinfo(&(0x7f0000000840)=""/122) accept(r0, &(0x7f0000000ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000b40)=0x80) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000e00)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000dc0)={&(0x7f0000000b80)=@nl=@proc, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000c00)=""/219, 0xdb}, {&(0x7f0000000d00)=""/31, 0x1f}], 0x2, &(0x7f0000000d80)=""/60, 0x3c}, 0x0, 0x12100, 0x1, {0x1}}, 0x7) 13:16:23 executing program 4: ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000000)={0x5, 0x1, 0x4, 0x1, 0x6}) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0x80, 0x80) socket$inet(0x2, 0x800, 0x4) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000080)=""/4096) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000001100)={'ip6gre0\x00', &(0x7f0000001080)={'syztnl0\x00', 0x0, 0x2f, 0x72, 0x4, 0x7f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, 0x40, 0x40, 0x5, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000011c0)={'ip6gre0\x00', &(0x7f0000001140)={'syztnl2\x00', r1, 0x2f, 0xf7, 0xfe, 0x4, 0x8, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x20, 0xfe2, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000001280)={'syztnl0\x00', &(0x7f0000001200)={'ip6gre0\x00', r2, 0x4, 0x2, 0x4, 0xffffffff, 0x12, @mcast1, @loopback, 0x7800, 0x8, 0xbc, 0xd96}}) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001300), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x38, r4, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x402c890}, 0x40000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r5}}, 0x21) r6 = syz_genetlink_get_family_id$team(&(0x7f0000001480), r0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000015c0)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={0x90, r6, 0x12, 0x70bd26, 0x25dfdbfc, {}, [{{0x8, 0x1, r3}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x8000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001740)={'ip_vti0\x00', &(0x7f0000001600)={'ip_vti0\x00', r2, 0x7800, 0x0, 0x7ba6, 0x3, {{0x3f, 0x4, 0x0, 0x23, 0xfc, 0x67, 0x0, 0xff, 0x4, 0x0, @private=0xa010100, @empty, {[@generic={0x0, 0xa, "40ebf02080ba2927"}, @timestamp_prespec={0x44, 0xc, 0x43, 0x3, 0x4, [{@loopback, 0x100}]}, @cipso={0x86, 0x51, 0x2, [{0x2, 0x4, "ca84"}, {0x1, 0xe, "0fb6e4ebf725212a1f4921ab"}, {0x0, 0x10, "4e91c861d05464ee62c7e2524b76"}, {0x0, 0x12, "b421989cb68da381e74d9a94bb264171"}, {0x2, 0x8, "0c43715770af"}, {0x7, 0xf, "3af348b6e9faa379f4f34958e2"}]}, @rr={0x7, 0xf, 0x65, [@empty, @dev={0xac, 0x14, 0x14, 0x10}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_prespec={0x44, 0x34, 0xbd, 0x3, 0x2, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1ff}, {@multicast2, 0xbc}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x1}, {@rand_addr=0x64010102, 0xa5f}, {@remote}, {@private=0xa010101, 0x2}]}, @timestamp_prespec={0x44, 0x14, 0x52, 0x3, 0xc, [{@local, 0xff}, {@loopback, 0x7ff}]}, @ssrr={0x89, 0xb, 0x67, [@remote, @empty]}, @cipso={0x86, 0x1c, 0x0, [{0x1, 0x8, "09576fd99f05"}, {0x5, 0xe, "3b7b886315736799754d0f1e"}]}, @noop]}}}}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_VLAN(r7, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x24, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x401}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x80000001}]}, 0x24}, 0x1, 0x0, 0x0, 0x8}, 0x20000000) io_uring_setup(0x4cfd, &(0x7f0000001a80)={0x0, 0xe6d8, 0x2, 0x1, 0x150}) 13:16:23 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000002d40)={'syztnl1\x00', &(0x7f0000002cc0)={'syztnl1\x00', 0x0, 0x29, 0xe0, 0x9, 0x3, 0x20, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8, 0x7, 0x5, 0xad3}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000002e00)={'syztnl1\x00', &(0x7f0000002d80)={'syztnl2\x00', r1, 0x29, 0x1f, 0x8, 0x5a34e2c7, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x20, 0x7800, 0xd83, 0x1f}}) r2 = accept(r0, &(0x7f0000002e40)=@nfc_llcp, &(0x7f0000002ec0)=0x80) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, &(0x7f0000002f80)={'syztnl1\x00', &(0x7f0000002f00)={'syztnl0\x00', r1, 0x0, 0xff, 0x0, 0x9, 0x2, @loopback, @mcast2, 0x1, 0x700, 0xfffffff7, 0x3}}) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000002fc0)) sysinfo(&(0x7f0000003000)=""/97) rt_sigtimedwait(&(0x7f0000003080)={[0x1]}, &(0x7f00000030c0), &(0x7f0000003140), 0x8) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000003180)={'wlan0\x00'}) r5 = socket(0xb, 0x7, 0xfffffffc) sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x24, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "ad60d5f4b1"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x20000000) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f00000032c0)) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000003300)='/sys/kernel/slab', 0x4040, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000033c0)={'syztnl1\x00', &(0x7f0000003340)={'ip6_vti0\x00', 0x0, 0x29, 0x9, 0x7, 0xfffff3f4, 0x3c, @private2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x40, 0xab7, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r6, 0x89f7, &(0x7f0000003480)={'syztnl1\x00', &(0x7f0000003400)={'ip6_vti0\x00', r7, 0x29, 0x80, 0x1, 0x2, 0x8, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @local, 0x1, 0x20, 0x1, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000003680)={'ip6_vti0\x00', &(0x7f0000003600)={'ip6_vti0\x00', r1, 0x29, 0x7f, 0x1e, 0x513, 0x30, @rand_addr=' \x01\x00', @mcast1, 0x20, 0x10, 0x4, 0x81000000}}) 13:16:23 executing program 6: prctl$PR_SET_IO_FLUSHER(0x39, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) clock_gettime(0x5, &(0x7f0000000000)) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000040)) clock_nanosleep(0x5, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x80, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x5c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xe0}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "60ba389c00a5ea1d6dd65713749c7a02"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x3f}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x49}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3d3e46fd6bbaaa3c6a156013bb6a5a36"}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x10) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) setfsgid(0xee00) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, r1, 0x12, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xffff, 0x36}}}}, [@NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x9}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x9}, @NL80211_ATTR_P2P_CTWINDOW={0x5}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0xd800}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x20}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) rt_sigtimedwait(&(0x7f0000000400)={[0x7fff]}, 0x0, &(0x7f0000000440)={0x77359400}, 0x8) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x1) sched_rr_get_interval(0x0, &(0x7f0000000480)) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}}, 0x404) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) clock_nanosleep(0x0, 0x1, &(0x7f00000005c0), &(0x7f0000000600)) 13:16:23 executing program 1: socketpair(0x2, 0x4, 0xfffffe9b, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x40, 0x0, 0x5, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x18}, 0x7800, 0x8000, 0xfffffffa, 0x233a}}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000100)={0x0, @loopback, @loopback}, &(0x7f0000000140)=0xc) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xad) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000200)) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/hci_vhci', 0x30000, 0x8) getsockopt$inet6_tcp_int(r3, 0x6, 0x5, &(0x7f0000000280), &(0x7f00000002c0)=0x4) recvmmsg(r0, &(0x7f0000003ac0)=[{{&(0x7f0000000300)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/238, 0xee}, {&(0x7f0000000480)=""/16, 0x10}, {&(0x7f00000004c0)=""/194, 0xc2}, {&(0x7f00000005c0)=""/206, 0xce}, {&(0x7f00000006c0)=""/52, 0x34}, {&(0x7f0000000700)=""/180, 0xb4}], 0x6, &(0x7f0000000840)=""/48, 0x30}, 0xbe4}, {{&(0x7f0000000880)=@can, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/55, 0x37}, {&(0x7f0000000940)=""/159, 0x9f}, {&(0x7f0000000a00)=""/72, 0x48}, {&(0x7f0000000a80)=""/165, 0xa5}, {&(0x7f0000000b40)=""/214, 0xd6}, {&(0x7f0000000c40)=""/120, 0x78}, {&(0x7f0000000cc0)=""/4096, 0x1000}], 0x7, &(0x7f0000001d40)=""/55, 0x37}}, {{&(0x7f0000001d80)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000001fc0)=[{&(0x7f0000001e00)=""/246, 0xf6}, {&(0x7f0000001f00)=""/142, 0x8e}], 0x2, &(0x7f0000002000)=""/216, 0xd8}, 0x7}, {{0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000002140)=""/221, 0xdd}, 0x3}, {{&(0x7f0000002240)=@tipc=@name, 0x80, &(0x7f0000003500)=[{&(0x7f00000022c0)=""/122, 0x7a}, {&(0x7f0000002340)=""/184, 0xb8}, {&(0x7f0000002400)=""/68, 0x44}, {&(0x7f0000002480)=""/18, 0x12}, {&(0x7f00000024c0)=""/10, 0xa}, {&(0x7f0000002500)=""/4096, 0x1000}], 0x6, &(0x7f0000003580)=""/247, 0xf7}, 0x101}, {{&(0x7f0000003680)=@in={0x2, 0x0, @initdev}, 0x80, &(0x7f00000039c0)=[{&(0x7f0000003700)=""/142, 0x8e}, {&(0x7f00000037c0)=""/55, 0x37}, {&(0x7f0000003800)=""/226, 0xe2}, {&(0x7f0000003900)=""/129, 0x81}], 0x4, &(0x7f0000003a00)=""/175, 0xaf}, 0x9}], 0x6, 0x40000100, 0x0) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000003d40)={&(0x7f0000003c40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000003d00)={&(0x7f0000003c80)={0x5c, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x28}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_DOMAIN={0x9, 0x1, '!$(\xd2\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4014}, 0x20008080) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1c, &(0x7f00000042c0)="f13752d8c5aaf6511ad2b6c65e384ff767a81b2be50d70c8e190960799cc0afaa6d28ef4d68dd6241cb010aebfb78ed748cb2509b012ae3a6aaaf06a09631e9fb137ea2789b35e0ede25ed4f82fe846c350cdce613e43eab52f36e83dfe4b36c4ce1acbde6ab32a8307d54bd4e8a8bbd85dc32b084275897a7a63c4689f74ceac6d2289a82b4dcfe337a0700425af7c44d4915cd7fe2fa7ad36620760376c2fc4534c7f27228f7d839f7da9d8b76118b1c0413421fcc068ccbe2d9808395f4fcd3afa112c54a7d20ea2f806168c315522ea000af71218ab486a299749d8960b5d45e2b50402ce850a812b4e0dde3fd5e8a1242d066c3bf", 0xf7) 13:16:23 executing program 3: clock_nanosleep(0x1, 0x1, &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f0000000040)) r0 = getpgrp(0x0) sched_rr_get_interval(r0, &(0x7f0000000080)) r1 = getpgrp(r0) sched_rr_get_interval(r1, &(0x7f00000000c0)) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000100)={[0x5ab]}, &(0x7f0000000140), &(0x7f0000000200)={r2, r3+60000000}, 0x8) r4 = getpgrp(r1) waitid(0x3, r4, &(0x7f0000000240), 0x20000000, &(0x7f00000002c0)) sched_rr_get_interval(r4, &(0x7f0000000380)) clock_nanosleep(0x2, 0x0, &(0x7f00000003c0)={0x77359400}, &(0x7f0000000400)) timer_create(0x0, &(0x7f0000000440)={0x0, 0x3c, 0x4, @tid=r0}, &(0x7f0000000480)) wait4(r0, &(0x7f00000004c0), 0x8, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000a40)=[{{&(0x7f0000000500), 0x80, &(0x7f0000000600)=[{&(0x7f0000000580)=""/92, 0x5c}], 0x1, &(0x7f0000000640)=""/61, 0x3d}, 0x1}, {{&(0x7f0000000680)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000700)=""/217, 0xd9}, {&(0x7f0000000800)=""/165, 0xa5}, {&(0x7f00000008c0)}, {&(0x7f0000000900)=""/247, 0xf7}], 0x4}, 0x10000}], 0x2, 0x12041, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r4) r5 = gettid() waitid(0x2, r5, &(0x7f0000000ac0), 0x2, &(0x7f0000000b40)) ioctl$sock_ifreq(0xffffffffffffffff, 0x8932, &(0x7f0000000c00)={'veth1_to_batadv\x00', @ifru_names}) 13:16:23 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/processor', 0x0, 0x9) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x20008824) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2) r1 = io_uring_setup(0x37c5, &(0x7f0000000140)={0x0, 0x708f, 0x0, 0x1, 0x15}) socketpair(0x27, 0x5, 0xf8, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000200)={'ip6tnl0\x00', 0x0, 0x29, 0x8, 0x0, 0x3, 0x45, @mcast1, @remote, 0x80, 0x80, 0x1f, 0x800}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000400)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r3, 0x4, 0xb4, 0x6, 0x7, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, 0x40, 0x40, 0x3, 0x3ff}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000440)={'syztnl2\x00', r4, 0x4, 0x5f, 0x61, 0x0, 0x70, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x80, 0x8000, 0x81, 0x3ff}}) r5 = shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ff9000/0x4000)=nil) shmctl$SHM_UNLOCK(r5, 0xc) waitid(0x1, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000500)) timer_create(0x2, &(0x7f00000005c0)={0x0, 0x2b, 0x2}, &(0x7f0000000600)=0x0) timer_gettime(r6, &(0x7f0000000640)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x110, r1, 0x8000000) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) 13:16:24 executing program 7: ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000001040)={&(0x7f0000000000), &(0x7f0000000040)=""/4096, 0x1000}) tkill(0x0, 0x13) waitid(0x1, 0xffffffffffffffff, &(0x7f0000001080), 0x1, &(0x7f0000001100)) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001280)={&(0x7f0000001200)={0x60, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x400, 0x60}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xe}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xb}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x9}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xf}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x40004}, 0x10) r0 = syz_open_dev$usbmon(&(0x7f0000001300), 0x1, 0x52401) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000002380)={&(0x7f0000001340), &(0x7f0000001380)=""/4096, 0x1000}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000007200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x3, 0x2004, @fd_index=0x9, 0x10001, 0x0, 0x0, 0x17, 0x1, {0x3}}, 0x30) 13:16:24 executing program 1: socketpair(0x2, 0x4, 0xfffffe9b, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x40, 0x0, 0x5, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x18}, 0x7800, 0x8000, 0xfffffffa, 0x233a}}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000100)={0x0, @loopback, @loopback}, &(0x7f0000000140)=0xc) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xad) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000200)) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/hci_vhci', 0x30000, 0x8) getsockopt$inet6_tcp_int(r3, 0x6, 0x5, &(0x7f0000000280), &(0x7f00000002c0)=0x4) recvmmsg(r0, &(0x7f0000003ac0)=[{{&(0x7f0000000300)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/238, 0xee}, {&(0x7f0000000480)=""/16, 0x10}, {&(0x7f00000004c0)=""/194, 0xc2}, {&(0x7f00000005c0)=""/206, 0xce}, {&(0x7f00000006c0)=""/52, 0x34}, {&(0x7f0000000700)=""/180, 0xb4}], 0x6, &(0x7f0000000840)=""/48, 0x30}, 0xbe4}, {{&(0x7f0000000880)=@can, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/55, 0x37}, {&(0x7f0000000940)=""/159, 0x9f}, {&(0x7f0000000a00)=""/72, 0x48}, {&(0x7f0000000a80)=""/165, 0xa5}, {&(0x7f0000000b40)=""/214, 0xd6}, {&(0x7f0000000c40)=""/120, 0x78}, {&(0x7f0000000cc0)=""/4096, 0x1000}], 0x7, &(0x7f0000001d40)=""/55, 0x37}}, {{&(0x7f0000001d80)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000001fc0)=[{&(0x7f0000001e00)=""/246, 0xf6}, {&(0x7f0000001f00)=""/142, 0x8e}], 0x2, &(0x7f0000002000)=""/216, 0xd8}, 0x7}, {{0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000002140)=""/221, 0xdd}, 0x3}, {{&(0x7f0000002240)=@tipc=@name, 0x80, &(0x7f0000003500)=[{&(0x7f00000022c0)=""/122, 0x7a}, {&(0x7f0000002340)=""/184, 0xb8}, {&(0x7f0000002400)=""/68, 0x44}, {&(0x7f0000002480)=""/18, 0x12}, {&(0x7f00000024c0)=""/10, 0xa}, {&(0x7f0000002500)=""/4096, 0x1000}], 0x6, &(0x7f0000003580)=""/247, 0xf7}, 0x101}, {{&(0x7f0000003680)=@in={0x2, 0x0, @initdev}, 0x80, &(0x7f00000039c0)=[{&(0x7f0000003700)=""/142, 0x8e}, {&(0x7f00000037c0)=""/55, 0x37}, {&(0x7f0000003800)=""/226, 0xe2}, {&(0x7f0000003900)=""/129, 0x81}], 0x4, &(0x7f0000003a00)=""/175, 0xaf}, 0x9}], 0x6, 0x40000100, 0x0) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1c, &(0x7f00000042c0)="f13752d8c5aaf6511ad2b6c65e384ff767a81b2be50d70c8e190960799cc0afaa6d28ef4d68dd6241cb010aebfb78ed748cb2509b012ae3a6aaaf06a09631e9fb137ea2789b35e0ede25ed4f82fe846c350cdce613e43eab52f36e83dfe4b36c4ce1acbde6ab32a8307d54bd4e8a8bbd85dc32b084275897a7a63c4689f74ceac6d2289a82b4dcfe337a0700425af7c44d4915cd7fe2fa7ad36620760376c2fc4534c7f27228f7d839f7da9d8b76118b1c0413421fcc068ccbe2d9808395f4fcd3afa112c54a7d20ea2f806168c315522ea000af71218ab486a299749d8960b5d45e2b50402ce850a812b4e0dde3fd5e8a1242d066c3bf", 0xf7) 13:16:24 executing program 7: ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000001040)={&(0x7f0000000000), &(0x7f0000000040)=""/4096, 0x1000}) tkill(0x0, 0x13) waitid(0x1, 0xffffffffffffffff, &(0x7f0000001080), 0x1, &(0x7f0000001100)) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001280)={&(0x7f0000001200)={0x60, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x400, 0x60}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xe}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xb}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x9}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xf}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x40004}, 0x10) syz_open_dev$usbmon(&(0x7f0000001300), 0x1, 0x52401) syz_io_uring_submit(0x0, 0x0, &(0x7f0000007200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x3, 0x2004, @fd_index=0x9, 0x10001, 0x0, 0x0, 0x17, 0x1, {0x3}}, 0x30) 13:16:24 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/processor', 0x0, 0x9) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x20008824) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2) io_uring_setup(0x37c5, &(0x7f0000000140)={0x0, 0x708f, 0x0, 0x1, 0x15}) socketpair(0x27, 0x5, 0xf8, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000200)={'ip6tnl0\x00', 0x0, 0x29, 0x8, 0x0, 0x3, 0x45, @mcast1, @remote, 0x80, 0x80, 0x1f, 0x800}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000400)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r2, 0x4, 0xb4, 0x6, 0x7, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, 0x40, 0x40, 0x3, 0x3ff}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000440)={'syztnl2\x00', r3, 0x4, 0x5f, 0x61, 0x0, 0x70, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x80, 0x8000, 0x81, 0x3ff}}) r4 = shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ff9000/0x4000)=nil) shmctl$SHM_UNLOCK(r4, 0xc) waitid(0x1, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000500)) timer_create(0x2, &(0x7f00000005c0)={0x0, 0x2b, 0x2}, &(0x7f0000000600)=0x0) timer_gettime(r5, &(0x7f0000000640)) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) 13:16:24 executing program 4: ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000000)={0x5, 0x1, 0x4, 0x1, 0x6}) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0x80, 0x80) socket$inet(0x2, 0x800, 0x4) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000080)=""/4096) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000001100)={'ip6gre0\x00', &(0x7f0000001080)={'syztnl0\x00', 0x0, 0x2f, 0x72, 0x4, 0x7f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, 0x40, 0x40, 0x5, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000011c0)={'ip6gre0\x00', &(0x7f0000001140)={'syztnl2\x00', r1, 0x2f, 0xf7, 0xfe, 0x4, 0x8, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x20, 0xfe2, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000001280)={'syztnl0\x00', &(0x7f0000001200)={'ip6gre0\x00', r2, 0x4, 0x2, 0x4, 0xffffffff, 0x12, @mcast1, @loopback, 0x7800, 0x8, 0xbc, 0xd96}}) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001300), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x38, r4, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x402c890}, 0x40000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r5}}, 0x21) r6 = syz_genetlink_get_family_id$team(&(0x7f0000001480), r0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000015c0)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={0x90, r6, 0x12, 0x70bd26, 0x25dfdbfc, {}, [{{0x8, 0x1, r3}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x8000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001740)={'ip_vti0\x00', &(0x7f0000001600)={'ip_vti0\x00', r2, 0x7800, 0x0, 0x7ba6, 0x3, {{0x3f, 0x4, 0x0, 0x23, 0xfc, 0x67, 0x0, 0xff, 0x4, 0x0, @private=0xa010100, @empty, {[@generic={0x0, 0xa, "40ebf02080ba2927"}, @timestamp_prespec={0x44, 0xc, 0x43, 0x3, 0x4, [{@loopback, 0x100}]}, @cipso={0x86, 0x51, 0x2, [{0x2, 0x4, "ca84"}, {0x1, 0xe, "0fb6e4ebf725212a1f4921ab"}, {0x0, 0x10, "4e91c861d05464ee62c7e2524b76"}, {0x0, 0x12, "b421989cb68da381e74d9a94bb264171"}, {0x2, 0x8, "0c43715770af"}, {0x7, 0xf, "3af348b6e9faa379f4f34958e2"}]}, @rr={0x7, 0xf, 0x65, [@empty, @dev={0xac, 0x14, 0x14, 0x10}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_prespec={0x44, 0x34, 0xbd, 0x3, 0x2, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1ff}, {@multicast2, 0xbc}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x1}, {@rand_addr=0x64010102, 0xa5f}, {@remote}, {@private=0xa010101, 0x2}]}, @timestamp_prespec={0x44, 0x14, 0x52, 0x3, 0xc, [{@local, 0xff}, {@loopback, 0x7ff}]}, @ssrr={0x89, 0xb, 0x67, [@remote, @empty]}, @cipso={0x86, 0x1c, 0x0, [{0x1, 0x8, "09576fd99f05"}, {0x5, 0xe, "3b7b886315736799754d0f1e"}]}, @noop]}}}}}) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x4cfd, &(0x7f0000001a80)={0x0, 0xe6d8, 0x2, 0x1, 0x150}) 13:16:24 executing program 7: ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000001040)={&(0x7f0000000000), &(0x7f0000000040)=""/4096, 0x1000}) tkill(0x0, 0x13) waitid(0x1, 0xffffffffffffffff, &(0x7f0000001080), 0x1, &(0x7f0000001100)) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001280)={&(0x7f0000001200)={0x60, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x400, 0x60}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xe}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xb}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x9}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xf}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x40004}, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000007200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x3, 0x2004, @fd_index=0x9, 0x10001, 0x0, 0x0, 0x17, 0x1, {0x3}}, 0x30) 13:16:24 executing program 1: socketpair(0x2, 0x4, 0xfffffe9b, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x40, 0x0, 0x5, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x18}, 0x7800, 0x8000, 0xfffffffa, 0x233a}}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000100)={0x0, @loopback, @loopback}, &(0x7f0000000140)=0xc) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xad) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000200)) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/hci_vhci', 0x30000, 0x8) getsockopt$inet6_tcp_int(r3, 0x6, 0x5, &(0x7f0000000280), &(0x7f00000002c0)=0x4) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1c, &(0x7f00000042c0)="f13752d8c5aaf6511ad2b6c65e384ff767a81b2be50d70c8e190960799cc0afaa6d28ef4d68dd6241cb010aebfb78ed748cb2509b012ae3a6aaaf06a09631e9fb137ea2789b35e0ede25ed4f82fe846c350cdce613e43eab52f36e83dfe4b36c4ce1acbde6ab32a8307d54bd4e8a8bbd85dc32b084275897a7a63c4689f74ceac6d2289a82b4dcfe337a0700425af7c44d4915cd7fe2fa7ad36620760376c2fc4534c7f27228f7d839f7da9d8b76118b1c0413421fcc068ccbe2d9808395f4fcd3afa112c54a7d20ea2f806168c315522ea000af71218ab486a299749d8960b5d45e2b50402ce850a812b4e0dde3fd5e8a1242d066c3bf", 0xf7) 13:16:24 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000002d40)={'syztnl1\x00', &(0x7f0000002cc0)={'syztnl1\x00', 0x0, 0x29, 0xe0, 0x9, 0x3, 0x20, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8, 0x7, 0x5, 0xad3}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000002e00)={'syztnl1\x00', &(0x7f0000002d80)={'syztnl2\x00', r1, 0x29, 0x1f, 0x8, 0x5a34e2c7, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x20, 0x7800, 0xd83, 0x1f}}) r2 = accept(r0, &(0x7f0000002e40)=@nfc_llcp, &(0x7f0000002ec0)=0x80) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, &(0x7f0000002f80)={'syztnl1\x00', &(0x7f0000002f00)={'syztnl0\x00', r1, 0x0, 0xff, 0x0, 0x9, 0x2, @loopback, @mcast2, 0x1, 0x700, 0xfffffff7, 0x3}}) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000002fc0)) sysinfo(&(0x7f0000003000)=""/97) rt_sigtimedwait(&(0x7f0000003080)={[0x1]}, &(0x7f00000030c0), &(0x7f0000003140), 0x8) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000003180)={'wlan0\x00'}) r5 = socket(0xb, 0x7, 0xfffffffc) sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x24, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "ad60d5f4b1"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x20000000) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f00000032c0)) openat$sysfs(0xffffffffffffff9c, &(0x7f0000003300)='/sys/kernel/slab', 0x4040, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000033c0)={'syztnl1\x00', &(0x7f0000003340)={'ip6_vti0\x00', 0x0, 0x29, 0x9, 0x7, 0xfffff3f4, 0x3c, @private2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x40, 0xab7, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000003680)={'ip6_vti0\x00', &(0x7f0000003600)={'ip6_vti0\x00', r1, 0x29, 0x7f, 0x1e, 0x513, 0x30, @rand_addr=' \x01\x00', @mcast1, 0x20, 0x10, 0x4, 0x81000000}}) 13:16:32 executing program 7: ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000001040)={&(0x7f0000000000), &(0x7f0000000040)=""/4096, 0x1000}) tkill(0x0, 0x13) waitid(0x1, 0xffffffffffffffff, &(0x7f0000001080), 0x1, &(0x7f0000001100)) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001280)={&(0x7f0000001200)={0x60, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x400, 0x60}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xe}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xb}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x9}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xf}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x40004}, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000007200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x3, 0x2004, @fd_index=0x9, 0x10001, 0x0, 0x0, 0x17, 0x1, {0x3}}, 0x30) 13:16:32 executing program 3: clock_nanosleep(0x1, 0x1, &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f0000000040)) r0 = getpgrp(0x0) sched_rr_get_interval(r0, &(0x7f0000000080)) r1 = getpgrp(r0) sched_rr_get_interval(r1, &(0x7f00000000c0)) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000100)={[0x5ab]}, &(0x7f0000000140), &(0x7f0000000200)={r2, r3+60000000}, 0x8) r4 = getpgrp(r1) waitid(0x3, r4, &(0x7f0000000240), 0x20000000, &(0x7f00000002c0)) sched_rr_get_interval(r4, &(0x7f0000000380)) clock_nanosleep(0x2, 0x0, &(0x7f00000003c0)={0x77359400}, &(0x7f0000000400)) timer_create(0x0, &(0x7f0000000440)={0x0, 0x3c, 0x4, @tid=r0}, &(0x7f0000000480)) wait4(r0, &(0x7f00000004c0), 0x8, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000a40)=[{{&(0x7f0000000500), 0x80, &(0x7f0000000600)=[{&(0x7f0000000580)=""/92, 0x5c}], 0x1, &(0x7f0000000640)=""/61, 0x3d}, 0x1}, {{&(0x7f0000000680)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000700)=""/217, 0xd9}, {&(0x7f0000000800)=""/165, 0xa5}, {&(0x7f00000008c0)}, {&(0x7f0000000900)=""/247, 0xf7}], 0x4}, 0x10000}], 0x2, 0x12041, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r4) r5 = gettid() waitid(0x2, r5, &(0x7f0000000ac0), 0x2, &(0x7f0000000b40)) 13:16:32 executing program 1: socketpair(0x2, 0x4, 0xfffffe9b, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x40, 0x0, 0x5, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x18}, 0x7800, 0x8000, 0xfffffffa, 0x233a}}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000100)={0x0, @loopback, @loopback}, &(0x7f0000000140)=0xc) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xad) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000200)) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/hci_vhci', 0x30000, 0x8) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1c, &(0x7f00000042c0)="f13752d8c5aaf6511ad2b6c65e384ff767a81b2be50d70c8e190960799cc0afaa6d28ef4d68dd6241cb010aebfb78ed748cb2509b012ae3a6aaaf06a09631e9fb137ea2789b35e0ede25ed4f82fe846c350cdce613e43eab52f36e83dfe4b36c4ce1acbde6ab32a8307d54bd4e8a8bbd85dc32b084275897a7a63c4689f74ceac6d2289a82b4dcfe337a0700425af7c44d4915cd7fe2fa7ad36620760376c2fc4534c7f27228f7d839f7da9d8b76118b1c0413421fcc068ccbe2d9808395f4fcd3afa112c54a7d20ea2f806168c315522ea000af71218ab486a299749d8960b5d45e2b50402ce850a812b4e0dde3fd5e8a1242d066c3bf", 0xf7) 13:16:32 executing program 2: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)="3c83aba66cc4e07e77a76c5edaaaeb2c142196dcb4948d1bea7cc7c56c0522d946cb5ac4231e337744cd43286b5d06c909b77ba0b1dfa735763b470323ffa9785312df86d54ab56c63f169c855da890385e79ba7c12224570381988ffe8d2b65a733b2b77981ee7865d86a0dd49f2d3d71ba26e167eb653682c8fb6d85ea2cee1876e5e45d8d6f35f9920ea42fd04de7fa1e08de2e345b5c79da16e0f38f87b93c79d554bdf32aa1cdf40cebec88412bea62d90d3915360fdeab0e5ac3a9df3b64a91136855c82d51ab174ac5cd6bd6b9d223bcd6f79ffce263b54bd9999c01459a72d54dffa20773c8d28d00c5e0ea136538365", 0xf4}, 0x1, 0x0, 0x0, 0x4000}, 0x20000001) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000180)) sysinfo(&(0x7f00000001c0)=""/142) ioctl$sock_ifreq(r1, 0x8931, &(0x7f0000000280)={'batadv_slave_0\x00', @ifru_addrs=@in={0x2, 0x0, @local}}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/bus/platform', 0x16001, 0x9) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r3, 0x2, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000090) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f00000004c0)={0x14c, r3, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x81, 0x6}, {0xe9, 0x1}, {0x6, 0x5}, {0x2d, 0x6}, {0x81, 0x2}, {0x3f, 0x6}, {0x8, 0x2}, {0x1, 0x7}, {0x48, 0x5}, {0x80, 0x5}, {0xff, 0x6}, {0x2, 0x5}], "c1060bf1205e1788"}}, @NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x5, 0x6}, {0x2, 0x5}, {0x5, 0x7}, {0xff, 0x7}, {0x0, 0x5}, {0x3, 0x2}, {0xfa, 0x2}, {0x1, 0x7}, {0x0, 0x2}, {0x6f}, {}, {0x7, 0x7}, {0x81, 0x7}, {0x6, 0x7}, {0x7, 0x7}, {0x4, 0x5}, {0x1f}, {0x5, 0x4}], "98cb2e5ab9500d0c"}}, @NL80211_ATTR_QOS_MAP={0xe, 0xc7, {[{0x81, 0x6}], "57fcf5f60644f176"}}, @NL80211_ATTR_QOS_MAP={0x34, 0xc7, {[{0x1, 0x7}, {0xff, 0x3}, {0x4, 0x1}, {0x40}, {0x8, 0x6}, {0x6, 0x2}, {0x5b, 0x6}, {0x40, 0x6}, {0x5, 0x2}, {0x2, 0x3}, {0xff, 0x1}, {0x7, 0x5}, {0x81, 0x6}, {0x1}, {0xfa, 0x7}, {0xb2, 0x7}, {0x6, 0x7}, {0x2, 0x5}, {0x7f, 0x4}, {0x9}], "c94f799edde58374"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "71a679bb7dfeab0b"}}, @NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0x3f, 0x3}, {0x15, 0x1}, {0xc0, 0x4}, {0x3}, {0x1, 0x7}, {0x9, 0x7}, {0x6}, {0x4, 0x3}, {0x0, 0x3}, {0x7, 0x2}, {0xd4, 0x7}, {0x1, 0x4}, {0x4}, {0x6, 0x7}], "73aa28212d51194b"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0xff, 0x5}, {0x2, 0x1}, {0x7, 0x5}, {0x2, 0x2}, {0x1, 0x6}, {0x6, 0x5}, {0xa1}, {0x1, 0x1}], "402ab314775a4ac1"}}, @NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0x40, 0x3}, {0x20, 0x7}, {0x9, 0x1}, {0x3, 0x2}, {0x40, 0x6}, {0x2, 0x4}, {0x3a, 0x6}, {0x20, 0x6}, {0x0, 0x4}, {0x7f, 0x7}, {0x1, 0x7}, {0x8, 0x3}, {0x7, 0x4}, {0x3f, 0x1}, {0x3, 0x4}, {0x2}, {0x1f, 0x1}, {0xf8, 0x3}, {0x1, 0x5}], "2f10c13b1320f82b"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0x3, 0x7}, {0x7, 0x4}, {0x4, 0x7}, {0x2, 0x1}, {0x1f, 0x7}, {0xa5, 0x4}, {0x65, 0x4}, {0x9, 0x7}], "be02396e2de23506"}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) ioctl$CDROM_MEDIA_CHANGED(r2, 0x5325, 0x8) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x42000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x24, r3, 0x4, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_STA_TX_POWER={0x6}]}, 0x24}}, 0x4850) ioctl$sock_ifreq(r1, 0xa9, &(0x7f0000000800)={'syzkaller0\x00', @ifru_settings={0x0, 0x0, @te1=&(0x7f00000007c0)={0x9, 0x3, 0x3, 0x48}}}) sysinfo(&(0x7f0000000840)=""/122) accept(r0, &(0x7f0000000ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000b40)=0x80) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000e00)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000dc0)={&(0x7f0000000b80)=@nl=@proc, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000c00)=""/219, 0xdb}, {&(0x7f0000000d00)=""/31, 0x1f}], 0x2, &(0x7f0000000d80)=""/60, 0x3c}, 0x0, 0x12100, 0x1, {0x1}}, 0x7) 13:16:32 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000002d40)={'syztnl1\x00', &(0x7f0000002cc0)={'syztnl1\x00', 0x0, 0x29, 0xe0, 0x9, 0x3, 0x20, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8, 0x7, 0x5, 0xad3}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000002e00)={'syztnl1\x00', &(0x7f0000002d80)={'syztnl2\x00', r1, 0x29, 0x1f, 0x8, 0x5a34e2c7, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x20, 0x7800, 0xd83, 0x1f}}) r2 = accept(r0, &(0x7f0000002e40)=@nfc_llcp, &(0x7f0000002ec0)=0x80) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, &(0x7f0000002f80)={'syztnl1\x00', &(0x7f0000002f00)={'syztnl0\x00', r1, 0x0, 0xff, 0x0, 0x9, 0x2, @loopback, @mcast2, 0x1, 0x700, 0xfffffff7, 0x3}}) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000002fc0)) sysinfo(&(0x7f0000003000)=""/97) rt_sigtimedwait(&(0x7f0000003080)={[0x1]}, &(0x7f00000030c0), &(0x7f0000003140), 0x8) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000003180)={'wlan0\x00'}) r5 = socket(0xb, 0x7, 0xfffffffc) sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x24, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "ad60d5f4b1"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x20000000) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f00000032c0)) openat$sysfs(0xffffffffffffff9c, &(0x7f0000003300)='/sys/kernel/slab', 0x4040, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000003680)={'ip6_vti0\x00', &(0x7f0000003600)={'ip6_vti0\x00', r1, 0x29, 0x7f, 0x1e, 0x513, 0x30, @rand_addr=' \x01\x00', @mcast1, 0x20, 0x10, 0x4, 0x81000000}}) 13:16:32 executing program 6: prctl$PR_SET_IO_FLUSHER(0x39, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) clock_gettime(0x5, &(0x7f0000000000)) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000040)) clock_nanosleep(0x5, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x80, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x5c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xe0}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "60ba389c00a5ea1d6dd65713749c7a02"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x3f}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x49}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3d3e46fd6bbaaa3c6a156013bb6a5a36"}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x10) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) setfsgid(0xee00) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, r1, 0x12, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xffff, 0x36}}}}, [@NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x9}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x9}, @NL80211_ATTR_P2P_CTWINDOW={0x5}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0xd800}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x20}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) rt_sigtimedwait(&(0x7f0000000400)={[0x7fff]}, 0x0, &(0x7f0000000440)={0x77359400}, 0x8) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x1) sched_rr_get_interval(0x0, &(0x7f0000000480)) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}}, 0x404) clock_nanosleep(0x0, 0x1, &(0x7f00000005c0), &(0x7f0000000600)) 13:16:32 executing program 4: ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000000)={0x5, 0x1, 0x4, 0x1, 0x6}) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0x80, 0x80) socket$inet(0x2, 0x800, 0x4) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000080)=""/4096) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000001100)={'ip6gre0\x00', &(0x7f0000001080)={'syztnl0\x00', 0x0, 0x2f, 0x72, 0x4, 0x7f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, 0x40, 0x40, 0x5, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000011c0)={'ip6gre0\x00', &(0x7f0000001140)={'syztnl2\x00', r1, 0x2f, 0xf7, 0xfe, 0x4, 0x8, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x20, 0xfe2, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000001280)={'syztnl0\x00', &(0x7f0000001200)={'ip6gre0\x00', r2, 0x4, 0x2, 0x4, 0xffffffff, 0x12, @mcast1, @loopback, 0x7800, 0x8, 0xbc, 0xd96}}) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001300), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x38, r4, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x402c890}, 0x40000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r5}}, 0x21) r6 = syz_genetlink_get_family_id$team(&(0x7f0000001480), r0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000015c0)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={0x90, r6, 0x12, 0x70bd26, 0x25dfdbfc, {}, [{{0x8, 0x1, r3}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x8000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001740)={'ip_vti0\x00', &(0x7f0000001600)={'ip_vti0\x00', r2, 0x7800, 0x0, 0x7ba6, 0x3, {{0x3f, 0x4, 0x0, 0x23, 0xfc, 0x67, 0x0, 0xff, 0x4, 0x0, @private=0xa010100, @empty, {[@generic={0x0, 0xa, "40ebf02080ba2927"}, @timestamp_prespec={0x44, 0xc, 0x43, 0x3, 0x4, [{@loopback, 0x100}]}, @cipso={0x86, 0x51, 0x2, [{0x2, 0x4, "ca84"}, {0x1, 0xe, "0fb6e4ebf725212a1f4921ab"}, {0x0, 0x10, "4e91c861d05464ee62c7e2524b76"}, {0x0, 0x12, "b421989cb68da381e74d9a94bb264171"}, {0x2, 0x8, "0c43715770af"}, {0x7, 0xf, "3af348b6e9faa379f4f34958e2"}]}, @rr={0x7, 0xf, 0x65, [@empty, @dev={0xac, 0x14, 0x14, 0x10}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_prespec={0x44, 0x34, 0xbd, 0x3, 0x2, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1ff}, {@multicast2, 0xbc}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x1}, {@rand_addr=0x64010102, 0xa5f}, {@remote}, {@private=0xa010101, 0x2}]}, @timestamp_prespec={0x44, 0x14, 0x52, 0x3, 0xc, [{@local, 0xff}, {@loopback, 0x7ff}]}, @ssrr={0x89, 0xb, 0x67, [@remote, @empty]}, @cipso={0x86, 0x1c, 0x0, [{0x1, 0x8, "09576fd99f05"}, {0x5, 0xe, "3b7b886315736799754d0f1e"}]}, @noop]}}}}}) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x4cfd, &(0x7f0000001a80)={0x0, 0xe6d8, 0x2, 0x1, 0x150}) 13:16:32 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/processor', 0x0, 0x9) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x20008824) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2) io_uring_setup(0x37c5, &(0x7f0000000140)={0x0, 0x708f, 0x0, 0x1, 0x15}) socketpair(0x27, 0x5, 0xf8, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000200)={'ip6tnl0\x00', 0x0, 0x29, 0x8, 0x0, 0x3, 0x45, @mcast1, @remote, 0x80, 0x80, 0x1f, 0x800}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000400)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r2, 0x4, 0xb4, 0x6, 0x7, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, 0x40, 0x40, 0x3, 0x3ff}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000440)={'syztnl2\x00', r3, 0x4, 0x5f, 0x61, 0x0, 0x70, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x80, 0x8000, 0x81, 0x3ff}}) r4 = shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ff9000/0x4000)=nil) shmctl$SHM_UNLOCK(r4, 0xc) waitid(0x1, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000500)) timer_create(0x2, &(0x7f00000005c0)={0x0, 0x2b, 0x2}, &(0x7f0000000600)) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) 13:16:32 executing program 7: ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000001040)={&(0x7f0000000000), &(0x7f0000000040)=""/4096, 0x1000}) tkill(0x0, 0x13) waitid(0x1, 0xffffffffffffffff, &(0x7f0000001080), 0x1, &(0x7f0000001100)) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001280)={&(0x7f0000001200)={0x60, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x400, 0x60}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xe}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xb}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x9}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xf}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x40004}, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000007200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x3, 0x2004, @fd_index=0x9, 0x10001, 0x0, 0x0, 0x17, 0x1, {0x3}}, 0x30) 13:16:32 executing program 1: socketpair(0x2, 0x4, 0xfffffe9b, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x40, 0x0, 0x5, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x18}, 0x7800, 0x8000, 0xfffffffa, 0x233a}}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000100)={0x0, @loopback, @loopback}, &(0x7f0000000140)=0xc) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xad) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000200)) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1c, &(0x7f00000042c0)="f13752d8c5aaf6511ad2b6c65e384ff767a81b2be50d70c8e190960799cc0afaa6d28ef4d68dd6241cb010aebfb78ed748cb2509b012ae3a6aaaf06a09631e9fb137ea2789b35e0ede25ed4f82fe846c350cdce613e43eab52f36e83dfe4b36c4ce1acbde6ab32a8307d54bd4e8a8bbd85dc32b084275897a7a63c4689f74ceac6d2289a82b4dcfe337a0700425af7c44d4915cd7fe2fa7ad36620760376c2fc4534c7f27228f7d839f7da9d8b76118b1c0413421fcc068ccbe2d9808395f4fcd3afa112c54a7d20ea2f806168c315522ea000af71218ab486a299749d8960b5d45e2b50402ce850a812b4e0dde3fd5e8a1242d066c3bf", 0xf7) 13:16:33 executing program 7: ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000001040)={&(0x7f0000000000), &(0x7f0000000040)=""/4096, 0x1000}) tkill(0x0, 0x13) waitid(0x1, 0xffffffffffffffff, &(0x7f0000001080), 0x1, &(0x7f0000001100)) syz_open_dev$usbmon(&(0x7f0000001300), 0x1, 0x52401) syz_io_uring_submit(0x0, 0x0, &(0x7f0000007200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x3, 0x2004, @fd_index=0x9, 0x10001, 0x0, 0x0, 0x17, 0x1, {0x3}}, 0x30) 13:16:33 executing program 4: ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000000)={0x5, 0x1, 0x4, 0x1, 0x6}) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0x80, 0x80) socket$inet(0x2, 0x800, 0x4) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000080)=""/4096) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000001100)={'ip6gre0\x00', &(0x7f0000001080)={'syztnl0\x00', 0x0, 0x2f, 0x72, 0x4, 0x7f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, 0x40, 0x40, 0x5, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000011c0)={'ip6gre0\x00', &(0x7f0000001140)={'syztnl2\x00', r1, 0x2f, 0xf7, 0xfe, 0x4, 0x8, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x20, 0xfe2, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000001280)={'syztnl0\x00', &(0x7f0000001200)={'ip6gre0\x00', r2, 0x4, 0x2, 0x4, 0xffffffff, 0x12, @mcast1, @loopback, 0x7800, 0x8, 0xbc, 0xd96}}) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001300), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x38, r4, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x402c890}, 0x40000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r5}}, 0x21) r6 = syz_genetlink_get_family_id$team(&(0x7f0000001480), r0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000015c0)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={0x90, r6, 0x12, 0x70bd26, 0x25dfdbfc, {}, [{{0x8, 0x1, r3}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x8000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001740)={'ip_vti0\x00', &(0x7f0000001600)={'ip_vti0\x00', r2, 0x7800, 0x0, 0x7ba6, 0x3, {{0x3f, 0x4, 0x0, 0x23, 0xfc, 0x67, 0x0, 0xff, 0x4, 0x0, @private=0xa010100, @empty, {[@generic={0x0, 0xa, "40ebf02080ba2927"}, @timestamp_prespec={0x44, 0xc, 0x43, 0x3, 0x4, [{@loopback, 0x100}]}, @cipso={0x86, 0x51, 0x2, [{0x2, 0x4, "ca84"}, {0x1, 0xe, "0fb6e4ebf725212a1f4921ab"}, {0x0, 0x10, "4e91c861d05464ee62c7e2524b76"}, {0x0, 0x12, "b421989cb68da381e74d9a94bb264171"}, {0x2, 0x8, "0c43715770af"}, {0x7, 0xf, "3af348b6e9faa379f4f34958e2"}]}, @rr={0x7, 0xf, 0x65, [@empty, @dev={0xac, 0x14, 0x14, 0x10}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_prespec={0x44, 0x34, 0xbd, 0x3, 0x2, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1ff}, {@multicast2, 0xbc}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x1}, {@rand_addr=0x64010102, 0xa5f}, {@remote}, {@private=0xa010101, 0x2}]}, @timestamp_prespec={0x44, 0x14, 0x52, 0x3, 0xc, [{@local, 0xff}, {@loopback, 0x7ff}]}, @ssrr={0x89, 0xb, 0x67, [@remote, @empty]}, @cipso={0x86, 0x1c, 0x0, [{0x1, 0x8, "09576fd99f05"}, {0x5, 0xe, "3b7b886315736799754d0f1e"}]}, @noop]}}}}}) io_uring_setup(0x4cfd, &(0x7f0000001a80)={0x0, 0xe6d8, 0x2, 0x1, 0x150}) 13:16:33 executing program 2: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)="3c83aba66cc4e07e77a76c5edaaaeb2c142196dcb4948d1bea7cc7c56c0522d946cb5ac4231e337744cd43286b5d06c909b77ba0b1dfa735763b470323ffa9785312df86d54ab56c63f169c855da890385e79ba7c12224570381988ffe8d2b65a733b2b77981ee7865d86a0dd49f2d3d71ba26e167eb653682c8fb6d85ea2cee1876e5e45d8d6f35f9920ea42fd04de7fa1e08de2e345b5c79da16e0f38f87b93c79d554bdf32aa1cdf40cebec88412bea62d90d3915360fdeab0e5ac3a9df3b64a91136855c82d51ab174ac5cd6bd6b9d223bcd6f79ffce263b54bd9999c01459a72d54dffa20773c8d28d00c5e0ea136538365", 0xf4}, 0x1, 0x0, 0x0, 0x4000}, 0x20000001) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000180)) sysinfo(&(0x7f00000001c0)=""/142) ioctl$sock_ifreq(r1, 0x8931, &(0x7f0000000280)={'batadv_slave_0\x00', @ifru_addrs=@in={0x2, 0x0, @local}}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/bus/platform', 0x16001, 0x9) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r3, 0x2, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000090) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f00000004c0)={0x14c, r3, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x81, 0x6}, {0xe9, 0x1}, {0x6, 0x5}, {0x2d, 0x6}, {0x81, 0x2}, {0x3f, 0x6}, {0x8, 0x2}, {0x1, 0x7}, {0x48, 0x5}, {0x80, 0x5}, {0xff, 0x6}, {0x2, 0x5}], "c1060bf1205e1788"}}, @NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x5, 0x6}, {0x2, 0x5}, {0x5, 0x7}, {0xff, 0x7}, {0x0, 0x5}, {0x3, 0x2}, {0xfa, 0x2}, {0x1, 0x7}, {0x0, 0x2}, {0x6f}, {}, {0x7, 0x7}, {0x81, 0x7}, {0x6, 0x7}, {0x7, 0x7}, {0x4, 0x5}, {0x1f}, {0x5, 0x4}], "98cb2e5ab9500d0c"}}, @NL80211_ATTR_QOS_MAP={0xe, 0xc7, {[{0x81, 0x6}], "57fcf5f60644f176"}}, @NL80211_ATTR_QOS_MAP={0x34, 0xc7, {[{0x1, 0x7}, {0xff, 0x3}, {0x4, 0x1}, {0x40}, {0x8, 0x6}, {0x6, 0x2}, {0x5b, 0x6}, {0x40, 0x6}, {0x5, 0x2}, {0x2, 0x3}, {0xff, 0x1}, {0x7, 0x5}, {0x81, 0x6}, {0x1}, {0xfa, 0x7}, {0xb2, 0x7}, {0x6, 0x7}, {0x2, 0x5}, {0x7f, 0x4}, {0x9}], "c94f799edde58374"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "71a679bb7dfeab0b"}}, @NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0x3f, 0x3}, {0x15, 0x1}, {0xc0, 0x4}, {0x3}, {0x1, 0x7}, {0x9, 0x7}, {0x6}, {0x4, 0x3}, {0x0, 0x3}, {0x7, 0x2}, {0xd4, 0x7}, {0x1, 0x4}, {0x4}, {0x6, 0x7}], "73aa28212d51194b"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0xff, 0x5}, {0x2, 0x1}, {0x7, 0x5}, {0x2, 0x2}, {0x1, 0x6}, {0x6, 0x5}, {0xa1}, {0x1, 0x1}], "402ab314775a4ac1"}}, @NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0x40, 0x3}, {0x20, 0x7}, {0x9, 0x1}, {0x3, 0x2}, {0x40, 0x6}, {0x2, 0x4}, {0x3a, 0x6}, {0x20, 0x6}, {0x0, 0x4}, {0x7f, 0x7}, {0x1, 0x7}, {0x8, 0x3}, {0x7, 0x4}, {0x3f, 0x1}, {0x3, 0x4}, {0x2}, {0x1f, 0x1}, {0xf8, 0x3}, {0x1, 0x5}], "2f10c13b1320f82b"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0x3, 0x7}, {0x7, 0x4}, {0x4, 0x7}, {0x2, 0x1}, {0x1f, 0x7}, {0xa5, 0x4}, {0x65, 0x4}, {0x9, 0x7}], "be02396e2de23506"}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) ioctl$CDROM_MEDIA_CHANGED(r2, 0x5325, 0x8) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x42000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x24, r3, 0x4, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_STA_TX_POWER={0x6}]}, 0x24}}, 0x4850) ioctl$sock_ifreq(r1, 0xa9, &(0x7f0000000800)={'syzkaller0\x00', @ifru_settings={0x0, 0x0, @te1=&(0x7f00000007c0)={0x9, 0x3, 0x3, 0x48}}}) sysinfo(&(0x7f0000000840)=""/122) accept(r0, &(0x7f0000000ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000b40)=0x80) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000e00)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000dc0)={&(0x7f0000000b80)=@nl=@proc, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000c00)=""/219, 0xdb}, {&(0x7f0000000d00)=""/31, 0x1f}], 0x2, &(0x7f0000000d80)=""/60, 0x3c}, 0x0, 0x12100, 0x1, {0x1}}, 0x7) 13:16:33 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/processor', 0x0, 0x9) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x20008824) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2) io_uring_setup(0x37c5, &(0x7f0000000140)={0x0, 0x708f, 0x0, 0x1, 0x15}) socketpair(0x27, 0x5, 0xf8, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000200)={'ip6tnl0\x00', 0x0, 0x29, 0x8, 0x0, 0x3, 0x45, @mcast1, @remote, 0x80, 0x80, 0x1f, 0x800}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000400)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r2, 0x4, 0xb4, 0x6, 0x7, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, 0x40, 0x40, 0x3, 0x3ff}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000440)={'syztnl2\x00', r3, 0x4, 0x5f, 0x61, 0x0, 0x70, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x80, 0x8000, 0x81, 0x3ff}}) r4 = shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ff9000/0x4000)=nil) shmctl$SHM_UNLOCK(r4, 0xc) waitid(0x1, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000500)) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) 13:16:33 executing program 1: socketpair(0x2, 0x4, 0xfffffe9b, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x40, 0x0, 0x5, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x18}, 0x7800, 0x8000, 0xfffffffa, 0x233a}}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000100)={0x0, @loopback, @loopback}, &(0x7f0000000140)=0xc) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xad) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1c, &(0x7f00000042c0)="f13752d8c5aaf6511ad2b6c65e384ff767a81b2be50d70c8e190960799cc0afaa6d28ef4d68dd6241cb010aebfb78ed748cb2509b012ae3a6aaaf06a09631e9fb137ea2789b35e0ede25ed4f82fe846c350cdce613e43eab52f36e83dfe4b36c4ce1acbde6ab32a8307d54bd4e8a8bbd85dc32b084275897a7a63c4689f74ceac6d2289a82b4dcfe337a0700425af7c44d4915cd7fe2fa7ad36620760376c2fc4534c7f27228f7d839f7da9d8b76118b1c0413421fcc068ccbe2d9808395f4fcd3afa112c54a7d20ea2f806168c315522ea000af71218ab486a299749d8960b5d45e2b50402ce850a812b4e0dde3fd5e8a1242d066c3bf", 0xf7) 13:16:33 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000002d40)={'syztnl1\x00', &(0x7f0000002cc0)={'syztnl1\x00', 0x0, 0x29, 0xe0, 0x9, 0x3, 0x20, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8, 0x7, 0x5, 0xad3}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000002e00)={'syztnl1\x00', &(0x7f0000002d80)={'syztnl2\x00', r1, 0x29, 0x1f, 0x8, 0x5a34e2c7, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x20, 0x7800, 0xd83, 0x1f}}) r2 = accept(r0, &(0x7f0000002e40)=@nfc_llcp, &(0x7f0000002ec0)=0x80) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, &(0x7f0000002f80)={'syztnl1\x00', &(0x7f0000002f00)={'syztnl0\x00', r1, 0x0, 0xff, 0x0, 0x9, 0x2, @loopback, @mcast2, 0x1, 0x700, 0xfffffff7, 0x3}}) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000002fc0)) sysinfo(&(0x7f0000003000)=""/97) rt_sigtimedwait(&(0x7f0000003080)={[0x1]}, &(0x7f00000030c0), &(0x7f0000003140), 0x8) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000003180)={'wlan0\x00'}) r5 = socket(0xb, 0x7, 0xfffffffc) sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x24, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "ad60d5f4b1"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x20000000) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f00000032c0)) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000003680)={'ip6_vti0\x00', &(0x7f0000003600)={'ip6_vti0\x00', r1, 0x29, 0x7f, 0x1e, 0x513, 0x30, @rand_addr=' \x01\x00', @mcast1, 0x20, 0x10, 0x4, 0x81000000}}) 13:16:33 executing program 7: ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000001040)={&(0x7f0000000000), &(0x7f0000000040)=""/4096, 0x1000}) tkill(0x0, 0x13) waitid(0x1, 0xffffffffffffffff, &(0x7f0000001080), 0x1, &(0x7f0000001100)) syz_open_dev$usbmon(&(0x7f0000001300), 0x1, 0x52401) syz_io_uring_submit(0x0, 0x0, &(0x7f0000007200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x3, 0x2004, @fd_index=0x9, 0x10001, 0x0, 0x0, 0x17, 0x1, {0x3}}, 0x30) 13:16:33 executing program 1: socketpair(0x2, 0x4, 0xfffffe9b, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x40, 0x0, 0x5, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x18}, 0x7800, 0x8000, 0xfffffffa, 0x233a}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000100)={0x0, @loopback, @loopback}, &(0x7f0000000140)=0xc) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xad) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1c, &(0x7f00000042c0)="f13752d8c5aaf6511ad2b6c65e384ff767a81b2be50d70c8e190960799cc0afaa6d28ef4d68dd6241cb010aebfb78ed748cb2509b012ae3a6aaaf06a09631e9fb137ea2789b35e0ede25ed4f82fe846c350cdce613e43eab52f36e83dfe4b36c4ce1acbde6ab32a8307d54bd4e8a8bbd85dc32b084275897a7a63c4689f74ceac6d2289a82b4dcfe337a0700425af7c44d4915cd7fe2fa7ad36620760376c2fc4534c7f27228f7d839f7da9d8b76118b1c0413421fcc068ccbe2d9808395f4fcd3afa112c54a7d20ea2f806168c315522ea000af71218ab486a299749d8960b5d45e2b50402ce850a812b4e0dde3fd5e8a1242d066c3bf", 0xf7) 13:16:42 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/processor', 0x0, 0x9) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x20008824) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2) io_uring_setup(0x37c5, &(0x7f0000000140)={0x0, 0x708f, 0x0, 0x1, 0x15}) socketpair(0x27, 0x5, 0xf8, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000200)={'ip6tnl0\x00', 0x0, 0x29, 0x8, 0x0, 0x3, 0x45, @mcast1, @remote, 0x80, 0x80, 0x1f, 0x800}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000400)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r2, 0x4, 0xb4, 0x6, 0x7, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, 0x40, 0x40, 0x3, 0x3ff}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000440)={'syztnl2\x00', r3, 0x4, 0x5f, 0x61, 0x0, 0x70, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x80, 0x8000, 0x81, 0x3ff}}) r4 = shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ff9000/0x4000)=nil) shmctl$SHM_UNLOCK(r4, 0xc) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) 13:16:42 executing program 4: ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000000)={0x5, 0x1, 0x4, 0x1, 0x6}) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0x80, 0x80) socket$inet(0x2, 0x800, 0x4) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000080)=""/4096) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000001100)={'ip6gre0\x00', &(0x7f0000001080)={'syztnl0\x00', 0x0, 0x2f, 0x72, 0x4, 0x7f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, 0x40, 0x40, 0x5, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000011c0)={'ip6gre0\x00', &(0x7f0000001140)={'syztnl2\x00', r1, 0x2f, 0xf7, 0xfe, 0x4, 0x8, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x20, 0xfe2, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000001280)={'syztnl0\x00', &(0x7f0000001200)={'ip6gre0\x00', r2, 0x4, 0x2, 0x4, 0xffffffff, 0x12, @mcast1, @loopback, 0x7800, 0x8, 0xbc, 0xd96}}) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001300), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x38, r4, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x402c890}, 0x40000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r5}}, 0x21) r6 = syz_genetlink_get_family_id$team(&(0x7f0000001480), r0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000015c0)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={0x90, r6, 0x12, 0x70bd26, 0x25dfdbfc, {}, [{{0x8, 0x1, r3}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x8000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001740)={'ip_vti0\x00', &(0x7f0000001600)={'ip_vti0\x00', r2, 0x7800, 0x0, 0x7ba6, 0x3, {{0x3f, 0x4, 0x0, 0x23, 0xfc, 0x67, 0x0, 0xff, 0x4, 0x0, @private=0xa010100, @empty, {[@generic={0x0, 0xa, "40ebf02080ba2927"}, @timestamp_prespec={0x44, 0xc, 0x43, 0x3, 0x4, [{@loopback, 0x100}]}, @cipso={0x86, 0x51, 0x2, [{0x2, 0x4, "ca84"}, {0x1, 0xe, "0fb6e4ebf725212a1f4921ab"}, {0x0, 0x10, "4e91c861d05464ee62c7e2524b76"}, {0x0, 0x12, "b421989cb68da381e74d9a94bb264171"}, {0x2, 0x8, "0c43715770af"}, {0x7, 0xf, "3af348b6e9faa379f4f34958e2"}]}, @rr={0x7, 0xf, 0x65, [@empty, @dev={0xac, 0x14, 0x14, 0x10}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_prespec={0x44, 0x34, 0xbd, 0x3, 0x2, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1ff}, {@multicast2, 0xbc}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x1}, {@rand_addr=0x64010102, 0xa5f}, {@remote}, {@private=0xa010101, 0x2}]}, @timestamp_prespec={0x44, 0x14, 0x52, 0x3, 0xc, [{@local, 0xff}, {@loopback, 0x7ff}]}, @ssrr={0x89, 0xb, 0x67, [@remote, @empty]}, @cipso={0x86, 0x1c, 0x0, [{0x1, 0x8, "09576fd99f05"}, {0x5, 0xe, "3b7b886315736799754d0f1e"}]}, @noop]}}}}}) io_uring_setup(0x4cfd, &(0x7f0000001a80)={0x0, 0xe6d8, 0x2, 0x1, 0x150}) 13:16:42 executing program 6: prctl$PR_SET_IO_FLUSHER(0x39, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) clock_gettime(0x5, &(0x7f0000000000)) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000040)) clock_nanosleep(0x5, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x80, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x5c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xe0}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "60ba389c00a5ea1d6dd65713749c7a02"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x3f}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x49}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3d3e46fd6bbaaa3c6a156013bb6a5a36"}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x10) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) setfsgid(0xee00) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, r1, 0x12, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xffff, 0x36}}}}, [@NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x9}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x9}, @NL80211_ATTR_P2P_CTWINDOW={0x5}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0xd800}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x20}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) rt_sigtimedwait(&(0x7f0000000400)={[0x7fff]}, 0x0, &(0x7f0000000440)={0x77359400}, 0x8) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x1) sched_rr_get_interval(0x0, &(0x7f0000000480)) clock_nanosleep(0x0, 0x1, &(0x7f00000005c0), &(0x7f0000000600)) 13:16:42 executing program 7: ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000001040)={&(0x7f0000000000), &(0x7f0000000040)=""/4096, 0x1000}) tkill(0x0, 0x13) syz_open_dev$usbmon(&(0x7f0000001300), 0x1, 0x52401) syz_io_uring_submit(0x0, 0x0, &(0x7f0000007200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x3, 0x2004, @fd_index=0x9, 0x10001, 0x0, 0x0, 0x17, 0x1, {0x3}}, 0x30) 13:16:42 executing program 3: clock_nanosleep(0x1, 0x1, &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f0000000040)) r0 = getpgrp(0x0) sched_rr_get_interval(r0, &(0x7f0000000080)) r1 = getpgrp(r0) sched_rr_get_interval(r1, &(0x7f00000000c0)) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000100)={[0x5ab]}, &(0x7f0000000140), &(0x7f0000000200)={r2, r3+60000000}, 0x8) r4 = getpgrp(r1) waitid(0x3, r4, &(0x7f0000000240), 0x20000000, &(0x7f00000002c0)) sched_rr_get_interval(r4, &(0x7f0000000380)) clock_nanosleep(0x2, 0x0, &(0x7f00000003c0)={0x77359400}, &(0x7f0000000400)) timer_create(0x0, &(0x7f0000000440)={0x0, 0x3c, 0x4, @tid=r0}, &(0x7f0000000480)) wait4(r0, &(0x7f00000004c0), 0x8, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000a40)=[{{&(0x7f0000000500), 0x80, &(0x7f0000000600)=[{&(0x7f0000000580)=""/92, 0x5c}], 0x1, &(0x7f0000000640)=""/61, 0x3d}, 0x1}, {{&(0x7f0000000680)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000700)=""/217, 0xd9}, {&(0x7f0000000800)=""/165, 0xa5}, {&(0x7f00000008c0)}, {&(0x7f0000000900)=""/247, 0xf7}], 0x4}, 0x10000}], 0x2, 0x12041, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r4) waitid(0x2, 0x0, &(0x7f0000000ac0), 0x2, &(0x7f0000000b40)) 13:16:42 executing program 2: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)="3c83aba66cc4e07e77a76c5edaaaeb2c142196dcb4948d1bea7cc7c56c0522d946cb5ac4231e337744cd43286b5d06c909b77ba0b1dfa735763b470323ffa9785312df86d54ab56c63f169c855da890385e79ba7c12224570381988ffe8d2b65a733b2b77981ee7865d86a0dd49f2d3d71ba26e167eb653682c8fb6d85ea2cee1876e5e45d8d6f35f9920ea42fd04de7fa1e08de2e345b5c79da16e0f38f87b93c79d554bdf32aa1cdf40cebec88412bea62d90d3915360fdeab0e5ac3a9df3b64a91136855c82d51ab174ac5cd6bd6b9d223bcd6f79ffce263b54bd9999c01459a72d54dffa20773c8d28d00c5e0ea136538365", 0xf4}, 0x1, 0x0, 0x0, 0x4000}, 0x20000001) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000180)) sysinfo(&(0x7f00000001c0)=""/142) ioctl$sock_ifreq(r1, 0x8931, &(0x7f0000000280)={'batadv_slave_0\x00', @ifru_addrs=@in={0x2, 0x0, @local}}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/bus/platform', 0x16001, 0x9) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r3, 0x2, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000090) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f00000004c0)={0x14c, r3, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x81, 0x6}, {0xe9, 0x1}, {0x6, 0x5}, {0x2d, 0x6}, {0x81, 0x2}, {0x3f, 0x6}, {0x8, 0x2}, {0x1, 0x7}, {0x48, 0x5}, {0x80, 0x5}, {0xff, 0x6}, {0x2, 0x5}], "c1060bf1205e1788"}}, @NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x5, 0x6}, {0x2, 0x5}, {0x5, 0x7}, {0xff, 0x7}, {0x0, 0x5}, {0x3, 0x2}, {0xfa, 0x2}, {0x1, 0x7}, {0x0, 0x2}, {0x6f}, {}, {0x7, 0x7}, {0x81, 0x7}, {0x6, 0x7}, {0x7, 0x7}, {0x4, 0x5}, {0x1f}, {0x5, 0x4}], "98cb2e5ab9500d0c"}}, @NL80211_ATTR_QOS_MAP={0xe, 0xc7, {[{0x81, 0x6}], "57fcf5f60644f176"}}, @NL80211_ATTR_QOS_MAP={0x34, 0xc7, {[{0x1, 0x7}, {0xff, 0x3}, {0x4, 0x1}, {0x40}, {0x8, 0x6}, {0x6, 0x2}, {0x5b, 0x6}, {0x40, 0x6}, {0x5, 0x2}, {0x2, 0x3}, {0xff, 0x1}, {0x7, 0x5}, {0x81, 0x6}, {0x1}, {0xfa, 0x7}, {0xb2, 0x7}, {0x6, 0x7}, {0x2, 0x5}, {0x7f, 0x4}, {0x9}], "c94f799edde58374"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "71a679bb7dfeab0b"}}, @NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0x3f, 0x3}, {0x15, 0x1}, {0xc0, 0x4}, {0x3}, {0x1, 0x7}, {0x9, 0x7}, {0x6}, {0x4, 0x3}, {0x0, 0x3}, {0x7, 0x2}, {0xd4, 0x7}, {0x1, 0x4}, {0x4}, {0x6, 0x7}], "73aa28212d51194b"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0xff, 0x5}, {0x2, 0x1}, {0x7, 0x5}, {0x2, 0x2}, {0x1, 0x6}, {0x6, 0x5}, {0xa1}, {0x1, 0x1}], "402ab314775a4ac1"}}, @NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0x40, 0x3}, {0x20, 0x7}, {0x9, 0x1}, {0x3, 0x2}, {0x40, 0x6}, {0x2, 0x4}, {0x3a, 0x6}, {0x20, 0x6}, {0x0, 0x4}, {0x7f, 0x7}, {0x1, 0x7}, {0x8, 0x3}, {0x7, 0x4}, {0x3f, 0x1}, {0x3, 0x4}, {0x2}, {0x1f, 0x1}, {0xf8, 0x3}, {0x1, 0x5}], "2f10c13b1320f82b"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0x3, 0x7}, {0x7, 0x4}, {0x4, 0x7}, {0x2, 0x1}, {0x1f, 0x7}, {0xa5, 0x4}, {0x65, 0x4}, {0x9, 0x7}], "be02396e2de23506"}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) ioctl$CDROM_MEDIA_CHANGED(r2, 0x5325, 0x8) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x42000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x24, r3, 0x4, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_STA_TX_POWER={0x6}]}, 0x24}}, 0x4850) ioctl$sock_ifreq(r1, 0xa9, &(0x7f0000000800)={'syzkaller0\x00', @ifru_settings={0x0, 0x0, @te1=&(0x7f00000007c0)={0x9, 0x3, 0x3, 0x48}}}) accept(r0, &(0x7f0000000ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000b40)=0x80) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000e00)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000dc0)={&(0x7f0000000b80)=@nl=@proc, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000c00)=""/219, 0xdb}, {&(0x7f0000000d00)=""/31, 0x1f}], 0x2, &(0x7f0000000d80)=""/60, 0x3c}, 0x0, 0x12100, 0x1, {0x1}}, 0x7) 13:16:42 executing program 1: socketpair(0x2, 0x4, 0xfffffe9b, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x40, 0x0, 0x5, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x18}, 0x7800, 0x8000, 0xfffffffa, 0x233a}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000100)={0x0, @loopback, @loopback}, &(0x7f0000000140)=0xc) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1c, &(0x7f00000042c0)="f13752d8c5aaf6511ad2b6c65e384ff767a81b2be50d70c8e190960799cc0afaa6d28ef4d68dd6241cb010aebfb78ed748cb2509b012ae3a6aaaf06a09631e9fb137ea2789b35e0ede25ed4f82fe846c350cdce613e43eab52f36e83dfe4b36c4ce1acbde6ab32a8307d54bd4e8a8bbd85dc32b084275897a7a63c4689f74ceac6d2289a82b4dcfe337a0700425af7c44d4915cd7fe2fa7ad36620760376c2fc4534c7f27228f7d839f7da9d8b76118b1c0413421fcc068ccbe2d9808395f4fcd3afa112c54a7d20ea2f806168c315522ea000af71218ab486a299749d8960b5d45e2b50402ce850a812b4e0dde3fd5e8a1242d066c3bf", 0xf7) 13:16:42 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000002d40)={'syztnl1\x00', &(0x7f0000002cc0)={'syztnl1\x00', 0x0, 0x29, 0xe0, 0x9, 0x3, 0x20, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8, 0x7, 0x5, 0xad3}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000002e00)={'syztnl1\x00', &(0x7f0000002d80)={'syztnl2\x00', r1, 0x29, 0x1f, 0x8, 0x5a34e2c7, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x20, 0x7800, 0xd83, 0x1f}}) r2 = accept(r0, &(0x7f0000002e40)=@nfc_llcp, &(0x7f0000002ec0)=0x80) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, &(0x7f0000002f80)={'syztnl1\x00', &(0x7f0000002f00)={'syztnl0\x00', r1, 0x0, 0xff, 0x0, 0x9, 0x2, @loopback, @mcast2, 0x1, 0x700, 0xfffffff7, 0x3}}) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000002fc0)) sysinfo(&(0x7f0000003000)=""/97) rt_sigtimedwait(&(0x7f0000003080)={[0x1]}, &(0x7f00000030c0), &(0x7f0000003140), 0x8) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000003180)={'wlan0\x00'}) r5 = socket(0xb, 0x7, 0xfffffffc) sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x24, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "ad60d5f4b1"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x20000000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000003680)={'ip6_vti0\x00', &(0x7f0000003600)={'ip6_vti0\x00', r1, 0x29, 0x7f, 0x1e, 0x513, 0x30, @rand_addr=' \x01\x00', @mcast1, 0x20, 0x10, 0x4, 0x81000000}}) 13:16:42 executing program 1: socketpair(0x2, 0x4, 0xfffffe9b, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x40, 0x0, 0x5, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x18}, 0x7800, 0x8000, 0xfffffffa, 0x233a}}) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1c, &(0x7f00000042c0)="f13752d8c5aaf6511ad2b6c65e384ff767a81b2be50d70c8e190960799cc0afaa6d28ef4d68dd6241cb010aebfb78ed748cb2509b012ae3a6aaaf06a09631e9fb137ea2789b35e0ede25ed4f82fe846c350cdce613e43eab52f36e83dfe4b36c4ce1acbde6ab32a8307d54bd4e8a8bbd85dc32b084275897a7a63c4689f74ceac6d2289a82b4dcfe337a0700425af7c44d4915cd7fe2fa7ad36620760376c2fc4534c7f27228f7d839f7da9d8b76118b1c0413421fcc068ccbe2d9808395f4fcd3afa112c54a7d20ea2f806168c315522ea000af71218ab486a299749d8960b5d45e2b50402ce850a812b4e0dde3fd5e8a1242d066c3bf", 0xf7) 13:16:42 executing program 7: ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000001040)={&(0x7f0000000000), &(0x7f0000000040)=""/4096, 0x1000}) tkill(0x0, 0x13) syz_open_dev$usbmon(&(0x7f0000001300), 0x1, 0x52401) syz_io_uring_submit(0x0, 0x0, &(0x7f0000007200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x3, 0x2004, @fd_index=0x9, 0x10001, 0x0, 0x0, 0x17, 0x1, {0x3}}, 0x30) 13:16:42 executing program 1: socketpair(0x2, 0x4, 0xfffffe9b, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x40, 0x0, 0x5, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x18}, 0x7800, 0x8000, 0xfffffffa, 0x233a}}) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1c, &(0x7f00000042c0)="f13752d8c5aaf6511ad2b6c65e384ff767a81b2be50d70c8e190960799cc0afaa6d28ef4d68dd6241cb010aebfb78ed748cb2509b012ae3a6aaaf06a09631e9fb137ea2789b35e0ede25ed4f82fe846c350cdce613e43eab52f36e83dfe4b36c4ce1acbde6ab32a8307d54bd4e8a8bbd85dc32b084275897a7a63c4689f74ceac6d2289a82b4dcfe337a0700425af7c44d4915cd7fe2fa7ad36620760376c2fc4534c7f27228f7d839f7da9d8b76118b1c0413421fcc068ccbe2d9808395f4fcd3afa112c54a7d20ea2f806168c315522ea000af71218ab486a299749d8960b5d45e2b50402ce850a812b4e0dde3fd5e8a1242d066c3bf", 0xf7) 13:16:42 executing program 4: ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000000)={0x5, 0x1, 0x4, 0x1, 0x6}) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0x80, 0x80) socket$inet(0x2, 0x800, 0x4) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000080)=""/4096) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000001100)={'ip6gre0\x00', &(0x7f0000001080)={'syztnl0\x00', 0x0, 0x2f, 0x72, 0x4, 0x7f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, 0x40, 0x40, 0x5, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000011c0)={'ip6gre0\x00', &(0x7f0000001140)={'syztnl2\x00', r1, 0x2f, 0xf7, 0xfe, 0x4, 0x8, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x20, 0xfe2, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000001280)={'syztnl0\x00', &(0x7f0000001200)={'ip6gre0\x00', r2, 0x4, 0x2, 0x4, 0xffffffff, 0x12, @mcast1, @loopback, 0x7800, 0x8, 0xbc, 0xd96}}) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001300), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x38, r4, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x402c890}, 0x40000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r5}}, 0x21) r6 = syz_genetlink_get_family_id$team(&(0x7f0000001480), r0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000015c0)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={0x90, r6, 0x12, 0x70bd26, 0x25dfdbfc, {}, [{{0x8, 0x1, r3}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x8000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001740)={'ip_vti0\x00', &(0x7f0000001600)={'ip_vti0\x00', r2, 0x7800, 0x0, 0x7ba6, 0x3, {{0x3f, 0x4, 0x0, 0x23, 0xfc, 0x67, 0x0, 0xff, 0x4, 0x0, @private=0xa010100, @empty, {[@generic={0x0, 0xa, "40ebf02080ba2927"}, @timestamp_prespec={0x44, 0xc, 0x43, 0x3, 0x4, [{@loopback, 0x100}]}, @cipso={0x86, 0x51, 0x2, [{0x2, 0x4, "ca84"}, {0x1, 0xe, "0fb6e4ebf725212a1f4921ab"}, {0x0, 0x10, "4e91c861d05464ee62c7e2524b76"}, {0x0, 0x12, "b421989cb68da381e74d9a94bb264171"}, {0x2, 0x8, "0c43715770af"}, {0x7, 0xf, "3af348b6e9faa379f4f34958e2"}]}, @rr={0x7, 0xf, 0x65, [@empty, @dev={0xac, 0x14, 0x14, 0x10}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_prespec={0x44, 0x34, 0xbd, 0x3, 0x2, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1ff}, {@multicast2, 0xbc}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x1}, {@rand_addr=0x64010102, 0xa5f}, {@remote}, {@private=0xa010101, 0x2}]}, @timestamp_prespec={0x44, 0x14, 0x52, 0x3, 0xc, [{@local, 0xff}, {@loopback, 0x7ff}]}, @ssrr={0x89, 0xb, 0x67, [@remote, @empty]}, @cipso={0x86, 0x1c, 0x0, [{0x1, 0x8, "09576fd99f05"}, {0x5, 0xe, "3b7b886315736799754d0f1e"}]}, @noop]}}}}}) io_uring_setup(0x4cfd, &(0x7f0000001a80)={0x0, 0xe6d8, 0x2, 0x1, 0x150}) 13:16:42 executing program 1: socketpair(0x2, 0x4, 0xfffffe9b, &(0x7f0000000000)) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1c, &(0x7f00000042c0)="f13752d8c5aaf6511ad2b6c65e384ff767a81b2be50d70c8e190960799cc0afaa6d28ef4d68dd6241cb010aebfb78ed748cb2509b012ae3a6aaaf06a09631e9fb137ea2789b35e0ede25ed4f82fe846c350cdce613e43eab52f36e83dfe4b36c4ce1acbde6ab32a8307d54bd4e8a8bbd85dc32b084275897a7a63c4689f74ceac6d2289a82b4dcfe337a0700425af7c44d4915cd7fe2fa7ad36620760376c2fc4534c7f27228f7d839f7da9d8b76118b1c0413421fcc068ccbe2d9808395f4fcd3afa112c54a7d20ea2f806168c315522ea000af71218ab486a299749d8960b5d45e2b50402ce850a812b4e0dde3fd5e8a1242d066c3bf", 0xf7) 13:16:42 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/processor', 0x0, 0x9) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x20008824) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2) io_uring_setup(0x37c5, &(0x7f0000000140)={0x0, 0x708f, 0x0, 0x1, 0x15}) socketpair(0x27, 0x5, 0xf8, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000200)={'ip6tnl0\x00', 0x0, 0x29, 0x8, 0x0, 0x3, 0x45, @mcast1, @remote, 0x80, 0x80, 0x1f, 0x800}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000400)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r2, 0x4, 0xb4, 0x6, 0x7, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, 0x40, 0x40, 0x3, 0x3ff}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000440)={'syztnl2\x00', r3, 0x4, 0x5f, 0x61, 0x0, 0x70, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x80, 0x8000, 0x81, 0x3ff}}) shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ff9000/0x4000)=nil) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) 13:16:42 executing program 7: ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000001040)={&(0x7f0000000000), &(0x7f0000000040)=""/4096, 0x1000}) syz_open_dev$usbmon(&(0x7f0000001300), 0x1, 0x52401) syz_io_uring_submit(0x0, 0x0, &(0x7f0000007200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x3, 0x2004, @fd_index=0x9, 0x10001, 0x0, 0x0, 0x17, 0x1, {0x3}}, 0x30) 13:16:42 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000002d40)={'syztnl1\x00', &(0x7f0000002cc0)={'syztnl1\x00', 0x0, 0x29, 0xe0, 0x9, 0x3, 0x20, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8, 0x7, 0x5, 0xad3}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000002e00)={'syztnl1\x00', &(0x7f0000002d80)={'syztnl2\x00', r1, 0x29, 0x1f, 0x8, 0x5a34e2c7, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x20, 0x7800, 0xd83, 0x1f}}) r2 = accept(r0, &(0x7f0000002e40)=@nfc_llcp, &(0x7f0000002ec0)=0x80) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, &(0x7f0000002f80)={'syztnl1\x00', &(0x7f0000002f00)={'syztnl0\x00', r1, 0x0, 0xff, 0x0, 0x9, 0x2, @loopback, @mcast2, 0x1, 0x700, 0xfffffff7, 0x3}}) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000002fc0)) sysinfo(&(0x7f0000003000)=""/97) rt_sigtimedwait(&(0x7f0000003080)={[0x1]}, &(0x7f00000030c0), &(0x7f0000003140), 0x8) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000003180)={'wlan0\x00'}) socket(0xb, 0x7, 0xfffffffc) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000003680)={'ip6_vti0\x00', &(0x7f0000003600)={'ip6_vti0\x00', r1, 0x29, 0x7f, 0x1e, 0x513, 0x30, @rand_addr=' \x01\x00', @mcast1, 0x20, 0x10, 0x4, 0x81000000}}) 13:16:51 executing program 1: setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1c, &(0x7f00000042c0)="f13752d8c5aaf6511ad2b6c65e384ff767a81b2be50d70c8e190960799cc0afaa6d28ef4d68dd6241cb010aebfb78ed748cb2509b012ae3a6aaaf06a09631e9fb137ea2789b35e0ede25ed4f82fe846c350cdce613e43eab52f36e83dfe4b36c4ce1acbde6ab32a8307d54bd4e8a8bbd85dc32b084275897a7a63c4689f74ceac6d2289a82b4dcfe337a0700425af7c44d4915cd7fe2fa7ad36620760376c2fc4534c7f27228f7d839f7da9d8b76118b1c0413421fcc068ccbe2d9808395f4fcd3afa112c54a7d20ea2f806168c315522ea000af71218ab486a299749d8960b5d45e2b50402ce850a812b4e0dde3fd5e8a1242d066c3bf", 0xf7) 13:16:51 executing program 4: ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000000)={0x5, 0x1, 0x4, 0x1, 0x6}) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0x80, 0x80) socket$inet(0x2, 0x800, 0x4) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000080)=""/4096) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000001100)={'ip6gre0\x00', &(0x7f0000001080)={'syztnl0\x00', 0x0, 0x2f, 0x72, 0x4, 0x7f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, 0x40, 0x40, 0x5, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000011c0)={'ip6gre0\x00', &(0x7f0000001140)={'syztnl2\x00', r1, 0x2f, 0xf7, 0xfe, 0x4, 0x8, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x20, 0xfe2, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000001280)={'syztnl0\x00', &(0x7f0000001200)={'ip6gre0\x00', r2, 0x4, 0x2, 0x4, 0xffffffff, 0x12, @mcast1, @loopback, 0x7800, 0x8, 0xbc, 0xd96}}) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001300), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x38, r4, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x402c890}, 0x40000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r5}}, 0x21) r6 = syz_genetlink_get_family_id$team(&(0x7f0000001480), r0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000015c0)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={0x90, r6, 0x12, 0x70bd26, 0x25dfdbfc, {}, [{{0x8, 0x1, r3}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x4cfd, &(0x7f0000001a80)={0x0, 0xe6d8, 0x2, 0x1, 0x150}) 13:16:51 executing program 7: ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000001040)={&(0x7f0000000000), &(0x7f0000000040)=""/4096, 0x1000}) syz_open_dev$usbmon(&(0x7f0000001300), 0x1, 0x52401) syz_io_uring_submit(0x0, 0x0, &(0x7f0000007200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x3, 0x2004, @fd_index=0x9, 0x10001, 0x0, 0x0, 0x17, 0x1, {0x3}}, 0x30) 13:16:51 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/processor', 0x0, 0x9) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x20008824) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2) io_uring_setup(0x37c5, &(0x7f0000000140)={0x0, 0x708f, 0x0, 0x1, 0x15}) socketpair(0x27, 0x5, 0xf8, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000200)={'ip6tnl0\x00', 0x0, 0x29, 0x8, 0x0, 0x3, 0x45, @mcast1, @remote, 0x80, 0x80, 0x1f, 0x800}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000400)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r2, 0x4, 0xb4, 0x6, 0x7, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, 0x40, 0x40, 0x3, 0x3ff}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000440)={'syztnl2\x00', r3, 0x4, 0x5f, 0x61, 0x0, 0x70, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x80, 0x8000, 0x81, 0x3ff}}) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) 13:16:51 executing program 3: clock_nanosleep(0x1, 0x1, &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f0000000040)) r0 = getpgrp(0x0) sched_rr_get_interval(r0, &(0x7f0000000080)) r1 = getpgrp(r0) sched_rr_get_interval(r1, &(0x7f00000000c0)) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000100)={[0x5ab]}, &(0x7f0000000140), &(0x7f0000000200)={r2, r3+60000000}, 0x8) r4 = getpgrp(r1) waitid(0x3, r4, &(0x7f0000000240), 0x20000000, &(0x7f00000002c0)) sched_rr_get_interval(r4, &(0x7f0000000380)) clock_nanosleep(0x2, 0x0, &(0x7f00000003c0)={0x77359400}, &(0x7f0000000400)) timer_create(0x0, &(0x7f0000000440)={0x0, 0x3c, 0x4, @tid=r0}, &(0x7f0000000480)) wait4(r0, &(0x7f00000004c0), 0x8, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000a40)=[{{&(0x7f0000000500), 0x80, &(0x7f0000000600)=[{&(0x7f0000000580)=""/92, 0x5c}], 0x1, &(0x7f0000000640)=""/61, 0x3d}, 0x1}, {{&(0x7f0000000680)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000700)=""/217, 0xd9}, {&(0x7f0000000800)=""/165, 0xa5}, {&(0x7f00000008c0)}, {&(0x7f0000000900)=""/247, 0xf7}], 0x4}, 0x10000}], 0x2, 0x12041, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r4) waitid(0x2, 0x0, &(0x7f0000000ac0), 0x2, &(0x7f0000000b40)) 13:16:51 executing program 6: prctl$PR_SET_IO_FLUSHER(0x39, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) clock_gettime(0x5, &(0x7f0000000000)) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000040)) clock_nanosleep(0x5, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x80, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x5c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xe0}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "60ba389c00a5ea1d6dd65713749c7a02"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x3f}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x49}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3d3e46fd6bbaaa3c6a156013bb6a5a36"}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x10) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) setfsgid(0xee00) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, r1, 0x12, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xffff, 0x36}}}}, [@NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x9}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x9}, @NL80211_ATTR_P2P_CTWINDOW={0x5}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0xd800}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x20}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) rt_sigtimedwait(&(0x7f0000000400)={[0x7fff]}, 0x0, &(0x7f0000000440)={0x77359400}, 0x8) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x1) clock_nanosleep(0x0, 0x1, &(0x7f00000005c0), &(0x7f0000000600)) 13:16:51 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000002d40)={'syztnl1\x00', &(0x7f0000002cc0)={'syztnl1\x00', 0x0, 0x29, 0xe0, 0x9, 0x3, 0x20, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8, 0x7, 0x5, 0xad3}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000002e00)={'syztnl1\x00', &(0x7f0000002d80)={'syztnl2\x00', r1, 0x29, 0x1f, 0x8, 0x5a34e2c7, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x20, 0x7800, 0xd83, 0x1f}}) r2 = accept(r0, &(0x7f0000002e40)=@nfc_llcp, &(0x7f0000002ec0)=0x80) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, &(0x7f0000002f80)={'syztnl1\x00', &(0x7f0000002f00)={'syztnl0\x00', r1, 0x0, 0xff, 0x0, 0x9, 0x2, @loopback, @mcast2, 0x1, 0x700, 0xfffffff7, 0x3}}) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000002fc0)) sysinfo(&(0x7f0000003000)=""/97) rt_sigtimedwait(&(0x7f0000003080)={[0x1]}, &(0x7f00000030c0), &(0x7f0000003140), 0x8) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000003180)={'wlan0\x00'}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000003680)={'ip6_vti0\x00', &(0x7f0000003600)={'ip6_vti0\x00', r1, 0x29, 0x7f, 0x1e, 0x513, 0x30, @rand_addr=' \x01\x00', @mcast1, 0x20, 0x10, 0x4, 0x81000000}}) 13:16:51 executing program 2: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)="3c83aba66cc4e07e77a76c5edaaaeb2c142196dcb4948d1bea7cc7c56c0522d946cb5ac4231e337744cd43286b5d06c909b77ba0b1dfa735763b470323ffa9785312df86d54ab56c63f169c855da890385e79ba7c12224570381988ffe8d2b65a733b2b77981ee7865d86a0dd49f2d3d71ba26e167eb653682c8fb6d85ea2cee1876e5e45d8d6f35f9920ea42fd04de7fa1e08de2e345b5c79da16e0f38f87b93c79d554bdf32aa1cdf40cebec88412bea62d90d3915360fdeab0e5ac3a9df3b64a91136855c82d51ab174ac5cd6bd6b9d223bcd6f79ffce263b54bd9999c01459a72d54dffa20773c8d28d00c5e0ea136538365", 0xf4}, 0x1, 0x0, 0x0, 0x4000}, 0x20000001) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000180)) sysinfo(&(0x7f00000001c0)=""/142) ioctl$sock_ifreq(r1, 0x8931, &(0x7f0000000280)={'batadv_slave_0\x00', @ifru_addrs=@in={0x2, 0x0, @local}}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/bus/platform', 0x16001, 0x9) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r3, 0x2, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000090) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f00000004c0)={0x14c, r3, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x81, 0x6}, {0xe9, 0x1}, {0x6, 0x5}, {0x2d, 0x6}, {0x81, 0x2}, {0x3f, 0x6}, {0x8, 0x2}, {0x1, 0x7}, {0x48, 0x5}, {0x80, 0x5}, {0xff, 0x6}, {0x2, 0x5}], "c1060bf1205e1788"}}, @NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x5, 0x6}, {0x2, 0x5}, {0x5, 0x7}, {0xff, 0x7}, {0x0, 0x5}, {0x3, 0x2}, {0xfa, 0x2}, {0x1, 0x7}, {0x0, 0x2}, {0x6f}, {}, {0x7, 0x7}, {0x81, 0x7}, {0x6, 0x7}, {0x7, 0x7}, {0x4, 0x5}, {0x1f}, {0x5, 0x4}], "98cb2e5ab9500d0c"}}, @NL80211_ATTR_QOS_MAP={0xe, 0xc7, {[{0x81, 0x6}], "57fcf5f60644f176"}}, @NL80211_ATTR_QOS_MAP={0x34, 0xc7, {[{0x1, 0x7}, {0xff, 0x3}, {0x4, 0x1}, {0x40}, {0x8, 0x6}, {0x6, 0x2}, {0x5b, 0x6}, {0x40, 0x6}, {0x5, 0x2}, {0x2, 0x3}, {0xff, 0x1}, {0x7, 0x5}, {0x81, 0x6}, {0x1}, {0xfa, 0x7}, {0xb2, 0x7}, {0x6, 0x7}, {0x2, 0x5}, {0x7f, 0x4}, {0x9}], "c94f799edde58374"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "71a679bb7dfeab0b"}}, @NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0x3f, 0x3}, {0x15, 0x1}, {0xc0, 0x4}, {0x3}, {0x1, 0x7}, {0x9, 0x7}, {0x6}, {0x4, 0x3}, {0x0, 0x3}, {0x7, 0x2}, {0xd4, 0x7}, {0x1, 0x4}, {0x4}, {0x6, 0x7}], "73aa28212d51194b"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0xff, 0x5}, {0x2, 0x1}, {0x7, 0x5}, {0x2, 0x2}, {0x1, 0x6}, {0x6, 0x5}, {0xa1}, {0x1, 0x1}], "402ab314775a4ac1"}}, @NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0x40, 0x3}, {0x20, 0x7}, {0x9, 0x1}, {0x3, 0x2}, {0x40, 0x6}, {0x2, 0x4}, {0x3a, 0x6}, {0x20, 0x6}, {0x0, 0x4}, {0x7f, 0x7}, {0x1, 0x7}, {0x8, 0x3}, {0x7, 0x4}, {0x3f, 0x1}, {0x3, 0x4}, {0x2}, {0x1f, 0x1}, {0xf8, 0x3}, {0x1, 0x5}], "2f10c13b1320f82b"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0x3, 0x7}, {0x7, 0x4}, {0x4, 0x7}, {0x2, 0x1}, {0x1f, 0x7}, {0xa5, 0x4}, {0x65, 0x4}, {0x9, 0x7}], "be02396e2de23506"}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) ioctl$CDROM_MEDIA_CHANGED(r2, 0x5325, 0x8) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x42000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x24, r3, 0x4, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_STA_TX_POWER={0x6}]}, 0x24}}, 0x4850) ioctl$sock_ifreq(r1, 0xa9, &(0x7f0000000800)={'syzkaller0\x00', @ifru_settings={0x0, 0x0, @te1=&(0x7f00000007c0)={0x9, 0x3, 0x3, 0x48}}}) accept(r0, &(0x7f0000000ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000b40)=0x80) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000e00)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000dc0)={&(0x7f0000000b80)=@nl=@proc, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000c00)=""/219, 0xdb}, {&(0x7f0000000d00)=""/31, 0x1f}], 0x2, &(0x7f0000000d80)=""/60, 0x3c}, 0x0, 0x12100, 0x1, {0x1}}, 0x7) 13:16:51 executing program 7: ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000001040)={&(0x7f0000000000), &(0x7f0000000040)=""/4096, 0x1000}) syz_open_dev$usbmon(&(0x7f0000001300), 0x1, 0x52401) syz_io_uring_submit(0x0, 0x0, &(0x7f0000007200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x3, 0x2004, @fd_index=0x9, 0x10001, 0x0, 0x0, 0x17, 0x1, {0x3}}, 0x30) 13:16:51 executing program 7: tkill(0x0, 0x13) syz_open_dev$usbmon(&(0x7f0000001300), 0x1, 0x52401) syz_io_uring_submit(0x0, 0x0, &(0x7f0000007200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x3, 0x2004, @fd_index=0x9, 0x10001, 0x0, 0x0, 0x17, 0x1, {0x3}}, 0x30) 13:16:51 executing program 4: ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000000)={0x5, 0x1, 0x4, 0x1, 0x6}) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0x80, 0x80) socket$inet(0x2, 0x800, 0x4) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000080)=""/4096) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000001100)={'ip6gre0\x00', &(0x7f0000001080)={'syztnl0\x00', 0x0, 0x2f, 0x72, 0x4, 0x7f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, 0x40, 0x40, 0x5, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000011c0)={'ip6gre0\x00', &(0x7f0000001140)={'syztnl2\x00', r1, 0x2f, 0xf7, 0xfe, 0x4, 0x8, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x20, 0xfe2, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000001280)={'syztnl0\x00', &(0x7f0000001200)={'ip6gre0\x00', r2, 0x4, 0x2, 0x4, 0xffffffff, 0x12, @mcast1, @loopback, 0x7800, 0x8, 0xbc, 0xd96}}) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001300), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x38, r4, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x402c890}, 0x40000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r5}}, 0x21) r6 = syz_genetlink_get_family_id$team(&(0x7f0000001480), r0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000015c0)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={0x90, r6, 0x12, 0x70bd26, 0x25dfdbfc, {}, [{{0x8, 0x1, r3}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x4cfd, &(0x7f0000001a80)={0x0, 0xe6d8, 0x2, 0x1, 0x150}) 13:16:51 executing program 1: setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000042c0)="f13752d8c5aaf6511ad2b6c65e384ff767a81b2be50d70c8e190960799cc0afaa6d28ef4d68dd6241cb010aebfb78ed748cb2509b012ae3a6aaaf06a09631e9fb137ea2789b35e0ede25ed4f82fe846c350cdce613e43eab52f36e83dfe4b36c4ce1acbde6ab32a8307d54bd4e8a8bbd85dc32b084275897a7a63c4689f74ceac6d2289a82b4dcfe337a0700425af7c44d4915cd7fe2fa7ad36620760376c2fc4534c7f27228f7d839f7da9d8b76118b1c0413421fcc068ccbe2d9808395f4fcd3afa112c54a7d20ea2f806168c315522ea000af71218ab486a299749d8960b5d45e2b50402ce850a812b4e0dde3fd5e8a1242d066c3bf", 0xf7) [ 188.005095] Bluetooth: hci6: command 0x0406 tx timeout [ 188.007042] Bluetooth: hci2: command 0x0406 tx timeout [ 188.008734] Bluetooth: hci0: command 0x0406 tx timeout [ 188.010031] Bluetooth: hci4: command 0x0406 tx timeout [ 188.011214] Bluetooth: hci1: command 0x0406 tx timeout [ 188.013076] Bluetooth: hci7: command 0x0406 tx timeout [ 188.014288] Bluetooth: hci3: command 0x0406 tx timeout [ 188.015504] Bluetooth: hci5: command 0x0406 tx timeout 13:17:00 executing program 7: tkill(0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000001300), 0x1, 0x52401) syz_io_uring_submit(0x0, 0x0, &(0x7f0000007200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x3, 0x2004, @fd_index=0x9, 0x10001, 0x0, 0x0, 0x17, 0x1, {0x3}}, 0x30) 13:17:00 executing program 1: setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 13:17:00 executing program 3: clock_nanosleep(0x1, 0x1, &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f0000000040)) r0 = getpgrp(0x0) sched_rr_get_interval(r0, &(0x7f0000000080)) r1 = getpgrp(r0) sched_rr_get_interval(r1, &(0x7f00000000c0)) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000100)={[0x5ab]}, &(0x7f0000000140), &(0x7f0000000200)={r2, r3+60000000}, 0x8) r4 = getpgrp(r1) waitid(0x3, r4, &(0x7f0000000240), 0x20000000, &(0x7f00000002c0)) sched_rr_get_interval(r4, &(0x7f0000000380)) clock_nanosleep(0x2, 0x0, &(0x7f00000003c0)={0x77359400}, &(0x7f0000000400)) timer_create(0x0, &(0x7f0000000440)={0x0, 0x3c, 0x4, @tid=r0}, &(0x7f0000000480)) wait4(r0, &(0x7f00000004c0), 0x8, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000a40)=[{{&(0x7f0000000500), 0x80, &(0x7f0000000600)=[{&(0x7f0000000580)=""/92, 0x5c}], 0x1, &(0x7f0000000640)=""/61, 0x3d}, 0x1}, {{&(0x7f0000000680)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000700)=""/217, 0xd9}, {&(0x7f0000000800)=""/165, 0xa5}, {&(0x7f00000008c0)}, {&(0x7f0000000900)=""/247, 0xf7}], 0x4}, 0x10000}], 0x2, 0x12041, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r4) waitid(0x2, 0x0, &(0x7f0000000ac0), 0x2, &(0x7f0000000b40)) 13:17:00 executing program 6: prctl$PR_SET_IO_FLUSHER(0x39, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) clock_gettime(0x5, &(0x7f0000000000)) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000040)) clock_nanosleep(0x5, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x80, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x5c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xe0}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "60ba389c00a5ea1d6dd65713749c7a02"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x3f}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x49}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3d3e46fd6bbaaa3c6a156013bb6a5a36"}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x10) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) setfsgid(0xee00) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, r1, 0x12, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xffff, 0x36}}}}, [@NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x9}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x9}, @NL80211_ATTR_P2P_CTWINDOW={0x5}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0xd800}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x20}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) rt_sigtimedwait(&(0x7f0000000400)={[0x7fff]}, 0x0, &(0x7f0000000440)={0x77359400}, 0x8) clock_nanosleep(0x0, 0x1, &(0x7f00000005c0), &(0x7f0000000600)) 13:17:00 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/processor', 0x0, 0x9) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x20008824) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2) io_uring_setup(0x37c5, &(0x7f0000000140)={0x0, 0x708f, 0x0, 0x1, 0x15}) socketpair(0x27, 0x5, 0xf8, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000200)={'ip6tnl0\x00', 0x0, 0x29, 0x8, 0x0, 0x3, 0x45, @mcast1, @remote, 0x80, 0x80, 0x1f, 0x800}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000400)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r2, 0x4, 0xb4, 0x6, 0x7, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, 0x40, 0x40, 0x3, 0x3ff}}) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) 13:17:00 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000002d40)={'syztnl1\x00', &(0x7f0000002cc0)={'syztnl1\x00', 0x0, 0x29, 0xe0, 0x9, 0x3, 0x20, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8, 0x7, 0x5, 0xad3}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000002e00)={'syztnl1\x00', &(0x7f0000002d80)={'syztnl2\x00', r1, 0x29, 0x1f, 0x8, 0x5a34e2c7, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x20, 0x7800, 0xd83, 0x1f}}) r2 = accept(r0, &(0x7f0000002e40)=@nfc_llcp, &(0x7f0000002ec0)=0x80) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, &(0x7f0000002f80)={'syztnl1\x00', &(0x7f0000002f00)={'syztnl0\x00', r1, 0x0, 0xff, 0x0, 0x9, 0x2, @loopback, @mcast2, 0x1, 0x700, 0xfffffff7, 0x3}}) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000002fc0)) sysinfo(&(0x7f0000003000)=""/97) rt_sigtimedwait(&(0x7f0000003080)={[0x1]}, &(0x7f00000030c0), &(0x7f0000003140), 0x8) socket$packet(0x11, 0x2, 0x300) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000003680)={'ip6_vti0\x00', &(0x7f0000003600)={'ip6_vti0\x00', r1, 0x29, 0x7f, 0x1e, 0x513, 0x30, @rand_addr=' \x01\x00', @mcast1, 0x20, 0x10, 0x4, 0x81000000}}) 13:17:00 executing program 2: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)="3c83aba66cc4e07e77a76c5edaaaeb2c142196dcb4948d1bea7cc7c56c0522d946cb5ac4231e337744cd43286b5d06c909b77ba0b1dfa735763b470323ffa9785312df86d54ab56c63f169c855da890385e79ba7c12224570381988ffe8d2b65a733b2b77981ee7865d86a0dd49f2d3d71ba26e167eb653682c8fb6d85ea2cee1876e5e45d8d6f35f9920ea42fd04de7fa1e08de2e345b5c79da16e0f38f87b93c79d554bdf32aa1cdf40cebec88412bea62d90d3915360fdeab0e5ac3a9df3b64a91136855c82d51ab174ac5cd6bd6b9d223bcd6f79ffce263b54bd9999c01459a72d54dffa20773c8d28d00c5e0ea136538365", 0xf4}, 0x1, 0x0, 0x0, 0x4000}, 0x20000001) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000180)) sysinfo(&(0x7f00000001c0)=""/142) ioctl$sock_ifreq(r1, 0x8931, &(0x7f0000000280)={'batadv_slave_0\x00', @ifru_addrs=@in={0x2, 0x0, @local}}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/bus/platform', 0x16001, 0x9) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r3, 0x2, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000090) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f00000004c0)={0x14c, r3, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x81, 0x6}, {0xe9, 0x1}, {0x6, 0x5}, {0x2d, 0x6}, {0x81, 0x2}, {0x3f, 0x6}, {0x8, 0x2}, {0x1, 0x7}, {0x48, 0x5}, {0x80, 0x5}, {0xff, 0x6}, {0x2, 0x5}], "c1060bf1205e1788"}}, @NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x5, 0x6}, {0x2, 0x5}, {0x5, 0x7}, {0xff, 0x7}, {0x0, 0x5}, {0x3, 0x2}, {0xfa, 0x2}, {0x1, 0x7}, {0x0, 0x2}, {0x6f}, {}, {0x7, 0x7}, {0x81, 0x7}, {0x6, 0x7}, {0x7, 0x7}, {0x4, 0x5}, {0x1f}, {0x5, 0x4}], "98cb2e5ab9500d0c"}}, @NL80211_ATTR_QOS_MAP={0xe, 0xc7, {[{0x81, 0x6}], "57fcf5f60644f176"}}, @NL80211_ATTR_QOS_MAP={0x34, 0xc7, {[{0x1, 0x7}, {0xff, 0x3}, {0x4, 0x1}, {0x40}, {0x8, 0x6}, {0x6, 0x2}, {0x5b, 0x6}, {0x40, 0x6}, {0x5, 0x2}, {0x2, 0x3}, {0xff, 0x1}, {0x7, 0x5}, {0x81, 0x6}, {0x1}, {0xfa, 0x7}, {0xb2, 0x7}, {0x6, 0x7}, {0x2, 0x5}, {0x7f, 0x4}, {0x9}], "c94f799edde58374"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "71a679bb7dfeab0b"}}, @NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0x3f, 0x3}, {0x15, 0x1}, {0xc0, 0x4}, {0x3}, {0x1, 0x7}, {0x9, 0x7}, {0x6}, {0x4, 0x3}, {0x0, 0x3}, {0x7, 0x2}, {0xd4, 0x7}, {0x1, 0x4}, {0x4}, {0x6, 0x7}], "73aa28212d51194b"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0xff, 0x5}, {0x2, 0x1}, {0x7, 0x5}, {0x2, 0x2}, {0x1, 0x6}, {0x6, 0x5}, {0xa1}, {0x1, 0x1}], "402ab314775a4ac1"}}, @NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0x40, 0x3}, {0x20, 0x7}, {0x9, 0x1}, {0x3, 0x2}, {0x40, 0x6}, {0x2, 0x4}, {0x3a, 0x6}, {0x20, 0x6}, {0x0, 0x4}, {0x7f, 0x7}, {0x1, 0x7}, {0x8, 0x3}, {0x7, 0x4}, {0x3f, 0x1}, {0x3, 0x4}, {0x2}, {0x1f, 0x1}, {0xf8, 0x3}, {0x1, 0x5}], "2f10c13b1320f82b"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0x3, 0x7}, {0x7, 0x4}, {0x4, 0x7}, {0x2, 0x1}, {0x1f, 0x7}, {0xa5, 0x4}, {0x65, 0x4}, {0x9, 0x7}], "be02396e2de23506"}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) ioctl$CDROM_MEDIA_CHANGED(r2, 0x5325, 0x8) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x42000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x24, r3, 0x4, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_STA_TX_POWER={0x6}]}, 0x24}}, 0x4850) ioctl$sock_ifreq(r1, 0xa9, &(0x7f0000000800)={'syzkaller0\x00', @ifru_settings={0x0, 0x0, @te1=&(0x7f00000007c0)={0x9, 0x3, 0x3, 0x48}}}) accept(r0, &(0x7f0000000ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000b40)=0x80) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000e00)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000dc0)={&(0x7f0000000b80)=@nl=@proc, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000c00)=""/219, 0xdb}, {&(0x7f0000000d00)=""/31, 0x1f}], 0x2, &(0x7f0000000d80)=""/60, 0x3c}, 0x0, 0x12100, 0x1, {0x1}}, 0x7) 13:17:00 executing program 4: ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000000)={0x5, 0x1, 0x4, 0x1, 0x6}) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0x80, 0x80) socket$inet(0x2, 0x800, 0x4) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000080)=""/4096) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000001100)={'ip6gre0\x00', &(0x7f0000001080)={'syztnl0\x00', 0x0, 0x2f, 0x72, 0x4, 0x7f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, 0x40, 0x40, 0x5, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000011c0)={'ip6gre0\x00', &(0x7f0000001140)={'syztnl2\x00', r1, 0x2f, 0xf7, 0xfe, 0x4, 0x8, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x20, 0xfe2, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000001280)={'syztnl0\x00', &(0x7f0000001200)={'ip6gre0\x00', r2, 0x4, 0x2, 0x4, 0xffffffff, 0x12, @mcast1, @loopback, 0x7800, 0x8, 0xbc, 0xd96}}) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001300), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x38, r4, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x402c890}, 0x40000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r5}}, 0x21) r6 = syz_genetlink_get_family_id$team(&(0x7f0000001480), r0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000015c0)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={0x90, r6, 0x12, 0x70bd26, 0x25dfdbfc, {}, [{{0x8, 0x1, r3}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x4cfd, &(0x7f0000001a80)={0x0, 0xe6d8, 0x2, 0x1, 0x150}) 13:17:00 executing program 7: tkill(0x0, 0x0) syz_open_dev$usbmon(0x0, 0x1, 0x52401) syz_io_uring_submit(0x0, 0x0, &(0x7f0000007200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x3, 0x2004, @fd_index=0x9, 0x10001, 0x0, 0x0, 0x17, 0x1, {0x3}}, 0x30) 13:17:00 executing program 1: prctl$PR_SET_IO_FLUSHER(0x39, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) clock_gettime(0x5, &(0x7f0000000000)) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000040)) clock_nanosleep(0x5, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x80, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x5c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xe0}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "60ba389c00a5ea1d6dd65713749c7a02"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x3f}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x49}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3d3e46fd6bbaaa3c6a156013bb6a5a36"}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x10) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) setfsgid(0xee00) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, r1, 0x12, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xffff, 0x36}}}}, [@NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x9}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x9}, @NL80211_ATTR_P2P_CTWINDOW={0x5}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0xd800}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x20}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) rt_sigtimedwait(&(0x7f0000000400)={[0x7fff]}, 0x0, &(0x7f0000000440)={0x77359400}, 0x8) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x1) clock_nanosleep(0x0, 0x1, &(0x7f00000005c0), &(0x7f0000000600)) 13:17:00 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/processor', 0x0, 0x9) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x20008824) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2) io_uring_setup(0x37c5, &(0x7f0000000140)={0x0, 0x708f, 0x0, 0x1, 0x15}) socketpair(0x27, 0x5, 0xf8, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000200)={'ip6tnl0\x00', 0x0, 0x29, 0x8, 0x0, 0x3, 0x45, @mcast1, @remote, 0x80, 0x80, 0x1f, 0x800}}) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) 13:17:01 executing program 4: ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000000)={0x5, 0x1, 0x4, 0x1, 0x6}) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0x80, 0x80) socket$inet(0x2, 0x800, 0x4) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000080)=""/4096) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000001100)={'ip6gre0\x00', &(0x7f0000001080)={'syztnl0\x00', 0x0, 0x2f, 0x72, 0x4, 0x7f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, 0x40, 0x40, 0x5, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000011c0)={'ip6gre0\x00', &(0x7f0000001140)={'syztnl2\x00', r1, 0x2f, 0xf7, 0xfe, 0x4, 0x8, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x20, 0xfe2, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000001280)={'syztnl0\x00', &(0x7f0000001200)={'ip6gre0\x00', r2, 0x4, 0x2, 0x4, 0xffffffff, 0x12, @mcast1, @loopback, 0x7800, 0x8, 0xbc, 0xd96}}) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001300), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x38, r3, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x402c890}, 0x40000) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r4}}, 0x21) syz_genetlink_get_family_id$team(&(0x7f0000001480), r0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001740)={'ip_vti0\x00', &(0x7f0000001600)={'ip_vti0\x00', r2, 0x7800, 0x0, 0x7ba6, 0x3, {{0x3f, 0x4, 0x0, 0x23, 0xfc, 0x67, 0x0, 0xff, 0x4, 0x0, @private=0xa010100, @empty, {[@generic={0x0, 0xa, "40ebf02080ba2927"}, @timestamp_prespec={0x44, 0xc, 0x43, 0x3, 0x4, [{@loopback, 0x100}]}, @cipso={0x86, 0x51, 0x2, [{0x2, 0x4, "ca84"}, {0x1, 0xe, "0fb6e4ebf725212a1f4921ab"}, {0x0, 0x10, "4e91c861d05464ee62c7e2524b76"}, {0x0, 0x12, "b421989cb68da381e74d9a94bb264171"}, {0x2, 0x8, "0c43715770af"}, {0x7, 0xf, "3af348b6e9faa379f4f34958e2"}]}, @rr={0x7, 0xf, 0x65, [@empty, @dev={0xac, 0x14, 0x14, 0x10}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_prespec={0x44, 0x34, 0xbd, 0x3, 0x2, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1ff}, {@multicast2, 0xbc}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x1}, {@rand_addr=0x64010102, 0xa5f}, {@remote}, {@private=0xa010101, 0x2}]}, @timestamp_prespec={0x44, 0x14, 0x52, 0x3, 0xc, [{@local, 0xff}, {@loopback, 0x7ff}]}, @ssrr={0x89, 0xb, 0x67, [@remote, @empty]}, @cipso={0x86, 0x1c, 0x0, [{0x1, 0x8, "09576fd99f05"}, {0x5, 0xe, "3b7b886315736799754d0f1e"}]}, @noop]}}}}}) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x4cfd, &(0x7f0000001a80)={0x0, 0xe6d8, 0x2, 0x1, 0x150}) 13:17:01 executing program 2: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)="3c83aba66cc4e07e77a76c5edaaaeb2c142196dcb4948d1bea7cc7c56c0522d946cb5ac4231e337744cd43286b5d06c909b77ba0b1dfa735763b470323ffa9785312df86d54ab56c63f169c855da890385e79ba7c12224570381988ffe8d2b65a733b2b77981ee7865d86a0dd49f2d3d71ba26e167eb653682c8fb6d85ea2cee1876e5e45d8d6f35f9920ea42fd04de7fa1e08de2e345b5c79da16e0f38f87b93c79d554bdf32aa1cdf40cebec88412bea62d90d3915360fdeab0e5ac3a9df3b64a91136855c82d51ab174ac5cd6bd6b9d223bcd6f79ffce263b54bd9999c01459a72d54dffa20773c8d28d00c5e0ea136538365", 0xf4}, 0x1, 0x0, 0x0, 0x4000}, 0x20000001) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000180)) sysinfo(&(0x7f00000001c0)=""/142) ioctl$sock_ifreq(r1, 0x8931, &(0x7f0000000280)={'batadv_slave_0\x00', @ifru_addrs=@in={0x2, 0x0, @local}}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/bus/platform', 0x16001, 0x9) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r3, 0x2, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000090) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f00000004c0)={0x14c, r3, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x81, 0x6}, {0xe9, 0x1}, {0x6, 0x5}, {0x2d, 0x6}, {0x81, 0x2}, {0x3f, 0x6}, {0x8, 0x2}, {0x1, 0x7}, {0x48, 0x5}, {0x80, 0x5}, {0xff, 0x6}, {0x2, 0x5}], "c1060bf1205e1788"}}, @NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x5, 0x6}, {0x2, 0x5}, {0x5, 0x7}, {0xff, 0x7}, {0x0, 0x5}, {0x3, 0x2}, {0xfa, 0x2}, {0x1, 0x7}, {0x0, 0x2}, {0x6f}, {}, {0x7, 0x7}, {0x81, 0x7}, {0x6, 0x7}, {0x7, 0x7}, {0x4, 0x5}, {0x1f}, {0x5, 0x4}], "98cb2e5ab9500d0c"}}, @NL80211_ATTR_QOS_MAP={0xe, 0xc7, {[{0x81, 0x6}], "57fcf5f60644f176"}}, @NL80211_ATTR_QOS_MAP={0x34, 0xc7, {[{0x1, 0x7}, {0xff, 0x3}, {0x4, 0x1}, {0x40}, {0x8, 0x6}, {0x6, 0x2}, {0x5b, 0x6}, {0x40, 0x6}, {0x5, 0x2}, {0x2, 0x3}, {0xff, 0x1}, {0x7, 0x5}, {0x81, 0x6}, {0x1}, {0xfa, 0x7}, {0xb2, 0x7}, {0x6, 0x7}, {0x2, 0x5}, {0x7f, 0x4}, {0x9}], "c94f799edde58374"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "71a679bb7dfeab0b"}}, @NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0x3f, 0x3}, {0x15, 0x1}, {0xc0, 0x4}, {0x3}, {0x1, 0x7}, {0x9, 0x7}, {0x6}, {0x4, 0x3}, {0x0, 0x3}, {0x7, 0x2}, {0xd4, 0x7}, {0x1, 0x4}, {0x4}, {0x6, 0x7}], "73aa28212d51194b"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0xff, 0x5}, {0x2, 0x1}, {0x7, 0x5}, {0x2, 0x2}, {0x1, 0x6}, {0x6, 0x5}, {0xa1}, {0x1, 0x1}], "402ab314775a4ac1"}}, @NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0x40, 0x3}, {0x20, 0x7}, {0x9, 0x1}, {0x3, 0x2}, {0x40, 0x6}, {0x2, 0x4}, {0x3a, 0x6}, {0x20, 0x6}, {0x0, 0x4}, {0x7f, 0x7}, {0x1, 0x7}, {0x8, 0x3}, {0x7, 0x4}, {0x3f, 0x1}, {0x3, 0x4}, {0x2}, {0x1f, 0x1}, {0xf8, 0x3}, {0x1, 0x5}], "2f10c13b1320f82b"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0x3, 0x7}, {0x7, 0x4}, {0x4, 0x7}, {0x2, 0x1}, {0x1f, 0x7}, {0xa5, 0x4}, {0x65, 0x4}, {0x9, 0x7}], "be02396e2de23506"}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) ioctl$CDROM_MEDIA_CHANGED(r2, 0x5325, 0x8) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x42000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x24, r3, 0x4, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_STA_TX_POWER={0x6}]}, 0x24}}, 0x4850) sysinfo(&(0x7f0000000840)=""/122) accept(r0, &(0x7f0000000ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000b40)=0x80) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000e00)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000dc0)={&(0x7f0000000b80)=@nl=@proc, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000c00)=""/219, 0xdb}, {&(0x7f0000000d00)=""/31, 0x1f}], 0x2, &(0x7f0000000d80)=""/60, 0x3c}, 0x0, 0x12100, 0x1, {0x1}}, 0x7) 13:17:01 executing program 7: tkill(0x0, 0x0) syz_open_dev$usbmon(0x0, 0x1, 0x52401) syz_io_uring_submit(0x0, 0x0, &(0x7f0000007200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x3, 0x2004, @fd_index=0x9, 0x10001, 0x0, 0x0, 0x17, 0x1, {0x3}}, 0x30) 13:17:01 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000002d40)={'syztnl1\x00', &(0x7f0000002cc0)={'syztnl1\x00', 0x0, 0x29, 0xe0, 0x9, 0x3, 0x20, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8, 0x7, 0x5, 0xad3}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000002e00)={'syztnl1\x00', &(0x7f0000002d80)={'syztnl2\x00', r1, 0x29, 0x1f, 0x8, 0x5a34e2c7, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x20, 0x7800, 0xd83, 0x1f}}) r2 = accept(r0, &(0x7f0000002e40)=@nfc_llcp, &(0x7f0000002ec0)=0x80) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, &(0x7f0000002f80)={'syztnl1\x00', &(0x7f0000002f00)={'syztnl0\x00', r1, 0x0, 0xff, 0x0, 0x9, 0x2, @loopback, @mcast2, 0x1, 0x700, 0xfffffff7, 0x3}}) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000002fc0)) sysinfo(&(0x7f0000003000)=""/97) rt_sigtimedwait(&(0x7f0000003080)={[0x1]}, &(0x7f00000030c0), &(0x7f0000003140), 0x8) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000003680)={'ip6_vti0\x00', &(0x7f0000003600)={'ip6_vti0\x00', r1, 0x29, 0x7f, 0x1e, 0x513, 0x30, @rand_addr=' \x01\x00', @mcast1, 0x20, 0x10, 0x4, 0x81000000}}) 13:17:01 executing program 7: tkill(0x0, 0x0) syz_open_dev$usbmon(0x0, 0x1, 0x52401) syz_io_uring_submit(0x0, 0x0, &(0x7f0000007200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x3, 0x2004, @fd_index=0x9, 0x10001, 0x0, 0x0, 0x17, 0x1, {0x3}}, 0x30) 13:17:01 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/processor', 0x0, 0x9) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x20008824) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2) io_uring_setup(0x37c5, &(0x7f0000000140)={0x0, 0x708f, 0x0, 0x1, 0x15}) socketpair(0x27, 0x5, 0xf8, &(0x7f00000001c0)) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) 13:17:09 executing program 7: tkill(0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000001300), 0x0, 0x52401) syz_io_uring_submit(0x0, 0x0, &(0x7f0000007200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x3, 0x2004, @fd_index=0x9, 0x10001, 0x0, 0x0, 0x17, 0x1, {0x3}}, 0x30) 13:17:09 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/processor', 0x0, 0x9) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x20008824) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2) io_uring_setup(0x37c5, &(0x7f0000000140)={0x0, 0x708f, 0x0, 0x1, 0x15}) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) 13:17:09 executing program 1: prctl$PR_SET_IO_FLUSHER(0x39, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) clock_gettime(0x5, &(0x7f0000000000)) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000040)) clock_nanosleep(0x5, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x80, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x5c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xe0}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "60ba389c00a5ea1d6dd65713749c7a02"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x3f}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x49}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3d3e46fd6bbaaa3c6a156013bb6a5a36"}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x10) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) setfsgid(0xee00) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, r1, 0x12, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xffff, 0x36}}}}, [@NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x9}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x9}, @NL80211_ATTR_P2P_CTWINDOW={0x5}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0xd800}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x20}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) rt_sigtimedwait(&(0x7f0000000400)={[0x7fff]}, 0x0, &(0x7f0000000440)={0x77359400}, 0x8) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x1) clock_nanosleep(0x0, 0x1, &(0x7f00000005c0), &(0x7f0000000600)) 13:17:09 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000002d40)={'syztnl1\x00', &(0x7f0000002cc0)={'syztnl1\x00', 0x0, 0x29, 0xe0, 0x9, 0x3, 0x20, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8, 0x7, 0x5, 0xad3}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000002e00)={'syztnl1\x00', &(0x7f0000002d80)={'syztnl2\x00', r1, 0x29, 0x1f, 0x8, 0x5a34e2c7, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x20, 0x7800, 0xd83, 0x1f}}) r2 = accept(r0, &(0x7f0000002e40)=@nfc_llcp, &(0x7f0000002ec0)=0x80) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, &(0x7f0000002f80)={'syztnl1\x00', &(0x7f0000002f00)={'syztnl0\x00', r1, 0x0, 0xff, 0x0, 0x9, 0x2, @loopback, @mcast2, 0x1, 0x700, 0xfffffff7, 0x3}}) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000002fc0)) sysinfo(&(0x7f0000003000)=""/97) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000003680)={'ip6_vti0\x00', &(0x7f0000003600)={'ip6_vti0\x00', r1, 0x29, 0x7f, 0x1e, 0x513, 0x30, @rand_addr=' \x01\x00', @mcast1, 0x20, 0x10, 0x4, 0x81000000}}) 13:17:09 executing program 6: prctl$PR_SET_IO_FLUSHER(0x39, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) clock_gettime(0x5, &(0x7f0000000000)) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000040)) clock_nanosleep(0x5, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x80, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x5c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xe0}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "60ba389c00a5ea1d6dd65713749c7a02"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x3f}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x49}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3d3e46fd6bbaaa3c6a156013bb6a5a36"}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x10) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) setfsgid(0xee00) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, r1, 0x12, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xffff, 0x36}}}}, [@NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x9}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x9}, @NL80211_ATTR_P2P_CTWINDOW={0x5}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0xd800}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x20}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) clock_nanosleep(0x0, 0x1, &(0x7f00000005c0), &(0x7f0000000600)) 13:17:09 executing program 3: clock_nanosleep(0x1, 0x1, &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f0000000040)) r0 = getpgrp(0x0) sched_rr_get_interval(r0, &(0x7f0000000080)) r1 = getpgrp(r0) sched_rr_get_interval(r1, &(0x7f00000000c0)) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000100)={[0x5ab]}, &(0x7f0000000140), &(0x7f0000000200)={r2, r3+60000000}, 0x8) r4 = getpgrp(r1) waitid(0x3, r4, &(0x7f0000000240), 0x20000000, &(0x7f00000002c0)) sched_rr_get_interval(r4, &(0x7f0000000380)) clock_nanosleep(0x2, 0x0, &(0x7f00000003c0)={0x77359400}, &(0x7f0000000400)) timer_create(0x0, &(0x7f0000000440)={0x0, 0x3c, 0x4, @tid=r0}, &(0x7f0000000480)) wait4(r0, &(0x7f00000004c0), 0x8, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000a40)=[{{&(0x7f0000000500), 0x80, &(0x7f0000000600)=[{&(0x7f0000000580)=""/92, 0x5c}], 0x1, &(0x7f0000000640)=""/61, 0x3d}, 0x1}, {{&(0x7f0000000680)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000700)=""/217, 0xd9}, {&(0x7f0000000800)=""/165, 0xa5}, {&(0x7f00000008c0)}, {&(0x7f0000000900)=""/247, 0xf7}], 0x4}, 0x10000}], 0x2, 0x12041, 0x0) r5 = gettid() waitid(0x2, r5, &(0x7f0000000ac0), 0x2, &(0x7f0000000b40)) 13:17:09 executing program 2: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)="3c83aba66cc4e07e77a76c5edaaaeb2c142196dcb4948d1bea7cc7c56c0522d946cb5ac4231e337744cd43286b5d06c909b77ba0b1dfa735763b470323ffa9785312df86d54ab56c63f169c855da890385e79ba7c12224570381988ffe8d2b65a733b2b77981ee7865d86a0dd49f2d3d71ba26e167eb653682c8fb6d85ea2cee1876e5e45d8d6f35f9920ea42fd04de7fa1e08de2e345b5c79da16e0f38f87b93c79d554bdf32aa1cdf40cebec88412bea62d90d3915360fdeab0e5ac3a9df3b64a91136855c82d51ab174ac5cd6bd6b9d223bcd6f79ffce263b54bd9999c01459a72d54dffa20773c8d28d00c5e0ea136538365", 0xf4}, 0x1, 0x0, 0x0, 0x4000}, 0x20000001) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000180)) sysinfo(&(0x7f00000001c0)=""/142) ioctl$sock_ifreq(r1, 0x8931, &(0x7f0000000280)={'batadv_slave_0\x00', @ifru_addrs=@in={0x2, 0x0, @local}}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/bus/platform', 0x16001, 0x9) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r3, 0x2, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000090) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f00000004c0)={0x14c, r3, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x81, 0x6}, {0xe9, 0x1}, {0x6, 0x5}, {0x2d, 0x6}, {0x81, 0x2}, {0x3f, 0x6}, {0x8, 0x2}, {0x1, 0x7}, {0x48, 0x5}, {0x80, 0x5}, {0xff, 0x6}, {0x2, 0x5}], "c1060bf1205e1788"}}, @NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x5, 0x6}, {0x2, 0x5}, {0x5, 0x7}, {0xff, 0x7}, {0x0, 0x5}, {0x3, 0x2}, {0xfa, 0x2}, {0x1, 0x7}, {0x0, 0x2}, {0x6f}, {}, {0x7, 0x7}, {0x81, 0x7}, {0x6, 0x7}, {0x7, 0x7}, {0x4, 0x5}, {0x1f}, {0x5, 0x4}], "98cb2e5ab9500d0c"}}, @NL80211_ATTR_QOS_MAP={0xe, 0xc7, {[{0x81, 0x6}], "57fcf5f60644f176"}}, @NL80211_ATTR_QOS_MAP={0x34, 0xc7, {[{0x1, 0x7}, {0xff, 0x3}, {0x4, 0x1}, {0x40}, {0x8, 0x6}, {0x6, 0x2}, {0x5b, 0x6}, {0x40, 0x6}, {0x5, 0x2}, {0x2, 0x3}, {0xff, 0x1}, {0x7, 0x5}, {0x81, 0x6}, {0x1}, {0xfa, 0x7}, {0xb2, 0x7}, {0x6, 0x7}, {0x2, 0x5}, {0x7f, 0x4}, {0x9}], "c94f799edde58374"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "71a679bb7dfeab0b"}}, @NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0x3f, 0x3}, {0x15, 0x1}, {0xc0, 0x4}, {0x3}, {0x1, 0x7}, {0x9, 0x7}, {0x6}, {0x4, 0x3}, {0x0, 0x3}, {0x7, 0x2}, {0xd4, 0x7}, {0x1, 0x4}, {0x4}, {0x6, 0x7}], "73aa28212d51194b"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0xff, 0x5}, {0x2, 0x1}, {0x7, 0x5}, {0x2, 0x2}, {0x1, 0x6}, {0x6, 0x5}, {0xa1}, {0x1, 0x1}], "402ab314775a4ac1"}}, @NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0x40, 0x3}, {0x20, 0x7}, {0x9, 0x1}, {0x3, 0x2}, {0x40, 0x6}, {0x2, 0x4}, {0x3a, 0x6}, {0x20, 0x6}, {0x0, 0x4}, {0x7f, 0x7}, {0x1, 0x7}, {0x8, 0x3}, {0x7, 0x4}, {0x3f, 0x1}, {0x3, 0x4}, {0x2}, {0x1f, 0x1}, {0xf8, 0x3}, {0x1, 0x5}], "2f10c13b1320f82b"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0x3, 0x7}, {0x7, 0x4}, {0x4, 0x7}, {0x2, 0x1}, {0x1f, 0x7}, {0xa5, 0x4}, {0x65, 0x4}, {0x9, 0x7}], "be02396e2de23506"}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) ioctl$CDROM_MEDIA_CHANGED(r2, 0x5325, 0x8) sysinfo(&(0x7f0000000840)=""/122) accept(r0, &(0x7f0000000ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000b40)=0x80) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000e00)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000dc0)={&(0x7f0000000b80)=@nl=@proc, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000c00)=""/219, 0xdb}, {&(0x7f0000000d00)=""/31, 0x1f}], 0x2, &(0x7f0000000d80)=""/60, 0x3c}, 0x0, 0x12100, 0x1, {0x1}}, 0x7) 13:17:09 executing program 4: ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000000)={0x5, 0x1, 0x4, 0x1, 0x6}) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0x80, 0x80) socket$inet(0x2, 0x800, 0x4) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000080)=""/4096) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000001100)={'ip6gre0\x00', &(0x7f0000001080)={'syztnl0\x00', 0x0, 0x2f, 0x72, 0x4, 0x7f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, 0x40, 0x40, 0x5, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000011c0)={'ip6gre0\x00', &(0x7f0000001140)={'syztnl2\x00', r1, 0x2f, 0xf7, 0xfe, 0x4, 0x8, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x20, 0xfe2, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000001280)={'syztnl0\x00', &(0x7f0000001200)={'ip6gre0\x00', r2, 0x4, 0x2, 0x4, 0xffffffff, 0x12, @mcast1, @loopback, 0x7800, 0x8, 0xbc, 0xd96}}) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001300), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x38, r3, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x402c890}, 0x40000) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r4}}, 0x21) syz_genetlink_get_family_id$team(&(0x7f0000001480), r0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001740)={'ip_vti0\x00', &(0x7f0000001600)={'ip_vti0\x00', r2, 0x7800, 0x0, 0x7ba6, 0x3, {{0x3f, 0x4, 0x0, 0x23, 0xfc, 0x67, 0x0, 0xff, 0x4, 0x0, @private=0xa010100, @empty, {[@generic={0x0, 0xa, "40ebf02080ba2927"}, @timestamp_prespec={0x44, 0xc, 0x43, 0x3, 0x4, [{@loopback, 0x100}]}, @cipso={0x86, 0x51, 0x2, [{0x2, 0x4, "ca84"}, {0x1, 0xe, "0fb6e4ebf725212a1f4921ab"}, {0x0, 0x10, "4e91c861d05464ee62c7e2524b76"}, {0x0, 0x12, "b421989cb68da381e74d9a94bb264171"}, {0x2, 0x8, "0c43715770af"}, {0x7, 0xf, "3af348b6e9faa379f4f34958e2"}]}, @rr={0x7, 0xf, 0x65, [@empty, @dev={0xac, 0x14, 0x14, 0x10}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_prespec={0x44, 0x34, 0xbd, 0x3, 0x2, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1ff}, {@multicast2, 0xbc}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x1}, {@rand_addr=0x64010102, 0xa5f}, {@remote}, {@private=0xa010101, 0x2}]}, @timestamp_prespec={0x44, 0x14, 0x52, 0x3, 0xc, [{@local, 0xff}, {@loopback, 0x7ff}]}, @ssrr={0x89, 0xb, 0x67, [@remote, @empty]}, @cipso={0x86, 0x1c, 0x0, [{0x1, 0x8, "09576fd99f05"}, {0x5, 0xe, "3b7b886315736799754d0f1e"}]}, @noop]}}}}}) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x4cfd, &(0x7f0000001a80)={0x0, 0xe6d8, 0x2, 0x1, 0x150}) 13:17:09 executing program 6: prctl$PR_SET_IO_FLUSHER(0x39, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) clock_gettime(0x5, &(0x7f0000000000)) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000040)) clock_nanosleep(0x5, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x80, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x5c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xe0}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "60ba389c00a5ea1d6dd65713749c7a02"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x3f}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x49}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3d3e46fd6bbaaa3c6a156013bb6a5a36"}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x10) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) setfsgid(0xee00) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) clock_nanosleep(0x0, 0x1, &(0x7f00000005c0), &(0x7f0000000600)) 13:17:09 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/processor', 0x0, 0x9) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x20008824) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) 13:17:09 executing program 7: tkill(0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000001300), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000007200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x3, 0x2004, @fd_index=0x9, 0x10001, 0x0, 0x0, 0x17, 0x1, {0x3}}, 0x30) 13:17:09 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/processor', 0x0, 0x9) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x20008824) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) 13:17:09 executing program 6: prctl$PR_SET_IO_FLUSHER(0x39, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) clock_gettime(0x5, &(0x7f0000000000)) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000040)) clock_nanosleep(0x5, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x80, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x5c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xe0}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "60ba389c00a5ea1d6dd65713749c7a02"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x3f}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x49}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3d3e46fd6bbaaa3c6a156013bb6a5a36"}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x10) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) setfsgid(0xee00) clock_nanosleep(0x0, 0x1, &(0x7f00000005c0), &(0x7f0000000600)) 13:17:10 executing program 4: ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000000)={0x5, 0x1, 0x4, 0x1, 0x6}) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0x80, 0x80) socket$inet(0x2, 0x800, 0x4) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000080)=""/4096) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000001100)={'ip6gre0\x00', &(0x7f0000001080)={'syztnl0\x00', 0x0, 0x2f, 0x72, 0x4, 0x7f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, 0x40, 0x40, 0x5, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000011c0)={'ip6gre0\x00', &(0x7f0000001140)={'syztnl2\x00', r1, 0x2f, 0xf7, 0xfe, 0x4, 0x8, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x20, 0xfe2, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000001280)={'syztnl0\x00', &(0x7f0000001200)={'ip6gre0\x00', r2, 0x4, 0x2, 0x4, 0xffffffff, 0x12, @mcast1, @loopback, 0x7800, 0x8, 0xbc, 0xd96}}) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001300), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x38, r3, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x402c890}, 0x40000) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r4}}, 0x21) syz_genetlink_get_family_id$team(&(0x7f0000001480), r0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001740)={'ip_vti0\x00', &(0x7f0000001600)={'ip_vti0\x00', r2, 0x7800, 0x0, 0x7ba6, 0x3, {{0x3f, 0x4, 0x0, 0x23, 0xfc, 0x67, 0x0, 0xff, 0x4, 0x0, @private=0xa010100, @empty, {[@generic={0x0, 0xa, "40ebf02080ba2927"}, @timestamp_prespec={0x44, 0xc, 0x43, 0x3, 0x4, [{@loopback, 0x100}]}, @cipso={0x86, 0x51, 0x2, [{0x2, 0x4, "ca84"}, {0x1, 0xe, "0fb6e4ebf725212a1f4921ab"}, {0x0, 0x10, "4e91c861d05464ee62c7e2524b76"}, {0x0, 0x12, "b421989cb68da381e74d9a94bb264171"}, {0x2, 0x8, "0c43715770af"}, {0x7, 0xf, "3af348b6e9faa379f4f34958e2"}]}, @rr={0x7, 0xf, 0x65, [@empty, @dev={0xac, 0x14, 0x14, 0x10}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_prespec={0x44, 0x34, 0xbd, 0x3, 0x2, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1ff}, {@multicast2, 0xbc}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x1}, {@rand_addr=0x64010102, 0xa5f}, {@remote}, {@private=0xa010101, 0x2}]}, @timestamp_prespec={0x44, 0x14, 0x52, 0x3, 0xc, [{@local, 0xff}, {@loopback, 0x7ff}]}, @ssrr={0x89, 0xb, 0x67, [@remote, @empty]}, @cipso={0x86, 0x1c, 0x0, [{0x1, 0x8, "09576fd99f05"}, {0x5, 0xe, "3b7b886315736799754d0f1e"}]}, @noop]}}}}}) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x4cfd, &(0x7f0000001a80)={0x0, 0xe6d8, 0x2, 0x1, 0x150}) 13:17:10 executing program 6: prctl$PR_SET_IO_FLUSHER(0x39, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) clock_gettime(0x5, &(0x7f0000000000)) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000040)) clock_nanosleep(0x5, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x80, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x5c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xe0}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "60ba389c00a5ea1d6dd65713749c7a02"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x3f}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x49}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3d3e46fd6bbaaa3c6a156013bb6a5a36"}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x10) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) clock_nanosleep(0x0, 0x1, &(0x7f00000005c0), &(0x7f0000000600)) 13:17:10 executing program 0: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/processor', 0x0, 0x9) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) 13:17:10 executing program 7: tkill(0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000001300), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x30) 13:17:18 executing program 6: prctl$PR_SET_IO_FLUSHER(0x39, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) clock_gettime(0x5, &(0x7f0000000000)) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000040)) clock_nanosleep(0x5, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x80, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x5c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xe0}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "60ba389c00a5ea1d6dd65713749c7a02"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x3f}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x49}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3d3e46fd6bbaaa3c6a156013bb6a5a36"}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x10) clock_nanosleep(0x0, 0x1, &(0x7f00000005c0), &(0x7f0000000600)) 13:17:18 executing program 2: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)="3c83aba66cc4e07e77a76c5edaaaeb2c142196dcb4948d1bea7cc7c56c0522d946cb5ac4231e337744cd43286b5d06c909b77ba0b1dfa735763b470323ffa9785312df86d54ab56c63f169c855da890385e79ba7c12224570381988ffe8d2b65a733b2b77981ee7865d86a0dd49f2d3d71ba26e167eb653682c8fb6d85ea2cee1876e5e45d8d6f35f9920ea42fd04de7fa1e08de2e345b5c79da16e0f38f87b93c79d554bdf32aa1cdf40cebec88412bea62d90d3915360fdeab0e5ac3a9df3b64a91136855c82d51ab174ac5cd6bd6b9d223bcd6f79ffce263b54bd9999c01459a72d54dffa20773c8d28d00c5e0ea136538365", 0xf4}, 0x1, 0x0, 0x0, 0x4000}, 0x20000001) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000180)) sysinfo(&(0x7f00000001c0)=""/142) ioctl$sock_ifreq(r1, 0x8931, &(0x7f0000000280)={'batadv_slave_0\x00', @ifru_addrs=@in={0x2, 0x0, @local}}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/bus/platform', 0x16001, 0x9) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r3, 0x2, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000090) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f00000004c0)={0x14c, r3, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x81, 0x6}, {0xe9, 0x1}, {0x6, 0x5}, {0x2d, 0x6}, {0x81, 0x2}, {0x3f, 0x6}, {0x8, 0x2}, {0x1, 0x7}, {0x48, 0x5}, {0x80, 0x5}, {0xff, 0x6}, {0x2, 0x5}], "c1060bf1205e1788"}}, @NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x5, 0x6}, {0x2, 0x5}, {0x5, 0x7}, {0xff, 0x7}, {0x0, 0x5}, {0x3, 0x2}, {0xfa, 0x2}, {0x1, 0x7}, {0x0, 0x2}, {0x6f}, {}, {0x7, 0x7}, {0x81, 0x7}, {0x6, 0x7}, {0x7, 0x7}, {0x4, 0x5}, {0x1f}, {0x5, 0x4}], "98cb2e5ab9500d0c"}}, @NL80211_ATTR_QOS_MAP={0xe, 0xc7, {[{0x81, 0x6}], "57fcf5f60644f176"}}, @NL80211_ATTR_QOS_MAP={0x34, 0xc7, {[{0x1, 0x7}, {0xff, 0x3}, {0x4, 0x1}, {0x40}, {0x8, 0x6}, {0x6, 0x2}, {0x5b, 0x6}, {0x40, 0x6}, {0x5, 0x2}, {0x2, 0x3}, {0xff, 0x1}, {0x7, 0x5}, {0x81, 0x6}, {0x1}, {0xfa, 0x7}, {0xb2, 0x7}, {0x6, 0x7}, {0x2, 0x5}, {0x7f, 0x4}, {0x9}], "c94f799edde58374"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "71a679bb7dfeab0b"}}, @NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0x3f, 0x3}, {0x15, 0x1}, {0xc0, 0x4}, {0x3}, {0x1, 0x7}, {0x9, 0x7}, {0x6}, {0x4, 0x3}, {0x0, 0x3}, {0x7, 0x2}, {0xd4, 0x7}, {0x1, 0x4}, {0x4}, {0x6, 0x7}], "73aa28212d51194b"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0xff, 0x5}, {0x2, 0x1}, {0x7, 0x5}, {0x2, 0x2}, {0x1, 0x6}, {0x6, 0x5}, {0xa1}, {0x1, 0x1}], "402ab314775a4ac1"}}, @NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0x40, 0x3}, {0x20, 0x7}, {0x9, 0x1}, {0x3, 0x2}, {0x40, 0x6}, {0x2, 0x4}, {0x3a, 0x6}, {0x20, 0x6}, {0x0, 0x4}, {0x7f, 0x7}, {0x1, 0x7}, {0x8, 0x3}, {0x7, 0x4}, {0x3f, 0x1}, {0x3, 0x4}, {0x2}, {0x1f, 0x1}, {0xf8, 0x3}, {0x1, 0x5}], "2f10c13b1320f82b"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0x3, 0x7}, {0x7, 0x4}, {0x4, 0x7}, {0x2, 0x1}, {0x1f, 0x7}, {0xa5, 0x4}, {0x65, 0x4}, {0x9, 0x7}], "be02396e2de23506"}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) sysinfo(&(0x7f0000000840)=""/122) accept(r0, &(0x7f0000000ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000b40)=0x80) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000e00)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000dc0)={&(0x7f0000000b80)=@nl=@proc, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000c00)=""/219, 0xdb}, {&(0x7f0000000d00)=""/31, 0x1f}], 0x2, &(0x7f0000000d80)=""/60, 0x3c}, 0x0, 0x12100, 0x1, {0x1}}, 0x7) 13:17:18 executing program 3: clock_nanosleep(0x1, 0x1, &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f0000000040)) r0 = getpgrp(0x0) sched_rr_get_interval(r0, &(0x7f0000000080)) r1 = getpgrp(r0) sched_rr_get_interval(r1, &(0x7f00000000c0)) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000100)={[0x5ab]}, &(0x7f0000000140), &(0x7f0000000200)={r2, r3+60000000}, 0x8) r4 = getpgrp(r1) waitid(0x3, r4, &(0x7f0000000240), 0x20000000, &(0x7f00000002c0)) sched_rr_get_interval(r4, &(0x7f0000000380)) clock_nanosleep(0x2, 0x0, &(0x7f00000003c0)={0x77359400}, &(0x7f0000000400)) timer_create(0x0, &(0x7f0000000440)={0x0, 0x3c, 0x4, @tid=r0}, &(0x7f0000000480)) wait4(r0, &(0x7f00000004c0), 0x8, 0x0) r5 = gettid() waitid(0x2, r5, &(0x7f0000000ac0), 0x2, &(0x7f0000000b40)) 13:17:18 executing program 0: prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) 13:17:18 executing program 1: prctl$PR_SET_IO_FLUSHER(0x39, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) clock_gettime(0x5, &(0x7f0000000000)) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000040)) clock_nanosleep(0x5, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x80, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x5c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xe0}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "60ba389c00a5ea1d6dd65713749c7a02"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x3f}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x49}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3d3e46fd6bbaaa3c6a156013bb6a5a36"}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x10) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) setfsgid(0xee00) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, r1, 0x12, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xffff, 0x36}}}}, [@NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x9}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x9}, @NL80211_ATTR_P2P_CTWINDOW={0x5}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0xd800}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x20}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) rt_sigtimedwait(&(0x7f0000000400)={[0x7fff]}, 0x0, &(0x7f0000000440)={0x77359400}, 0x8) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x1) clock_nanosleep(0x0, 0x1, &(0x7f00000005c0), &(0x7f0000000600)) 13:17:18 executing program 4: ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000000)={0x5, 0x1, 0x4, 0x1, 0x6}) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0x80, 0x80) socket$inet(0x2, 0x800, 0x4) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000080)=""/4096) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000001100)={'ip6gre0\x00', &(0x7f0000001080)={'syztnl0\x00', 0x0, 0x2f, 0x72, 0x4, 0x7f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, 0x40, 0x40, 0x5, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000011c0)={'ip6gre0\x00', &(0x7f0000001140)={'syztnl2\x00', r1, 0x2f, 0xf7, 0xfe, 0x4, 0x8, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x20, 0xfe2, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000001280)={'syztnl0\x00', &(0x7f0000001200)={'ip6gre0\x00', r2, 0x4, 0x2, 0x4, 0xffffffff, 0x12, @mcast1, @loopback, 0x7800, 0x8, 0xbc, 0xd96}}) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001300), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x38, r4, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x402c890}, 0x40000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r5}}, 0x21) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000015c0)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={0x90, 0x0, 0x12, 0x70bd26, 0x25dfdbfc, {}, [{{0x8, 0x1, r3}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x8000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001740)={'ip_vti0\x00', &(0x7f0000001600)={'ip_vti0\x00', r2, 0x7800, 0x0, 0x7ba6, 0x3, {{0x3f, 0x4, 0x0, 0x23, 0xfc, 0x67, 0x0, 0xff, 0x4, 0x0, @private=0xa010100, @empty, {[@generic={0x0, 0xa, "40ebf02080ba2927"}, @timestamp_prespec={0x44, 0xc, 0x43, 0x3, 0x4, [{@loopback, 0x100}]}, @cipso={0x86, 0x51, 0x2, [{0x2, 0x4, "ca84"}, {0x1, 0xe, "0fb6e4ebf725212a1f4921ab"}, {0x0, 0x10, "4e91c861d05464ee62c7e2524b76"}, {0x0, 0x12, "b421989cb68da381e74d9a94bb264171"}, {0x2, 0x8, "0c43715770af"}, {0x7, 0xf, "3af348b6e9faa379f4f34958e2"}]}, @rr={0x7, 0xf, 0x65, [@empty, @dev={0xac, 0x14, 0x14, 0x10}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_prespec={0x44, 0x34, 0xbd, 0x3, 0x2, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1ff}, {@multicast2, 0xbc}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x1}, {@rand_addr=0x64010102, 0xa5f}, {@remote}, {@private=0xa010101, 0x2}]}, @timestamp_prespec={0x44, 0x14, 0x52, 0x3, 0xc, [{@local, 0xff}, {@loopback, 0x7ff}]}, @ssrr={0x89, 0xb, 0x67, [@remote, @empty]}, @cipso={0x86, 0x1c, 0x0, [{0x1, 0x8, "09576fd99f05"}, {0x5, 0xe, "3b7b886315736799754d0f1e"}]}, @noop]}}}}}) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x4cfd, &(0x7f0000001a80)={0x0, 0xe6d8, 0x2, 0x1, 0x150}) 13:17:18 executing program 7: tkill(0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000001300), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x30) 13:17:18 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000002d40)={'syztnl1\x00', &(0x7f0000002cc0)={'syztnl1\x00', 0x0, 0x29, 0xe0, 0x9, 0x3, 0x20, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8, 0x7, 0x5, 0xad3}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000002e00)={'syztnl1\x00', &(0x7f0000002d80)={'syztnl2\x00', r1, 0x29, 0x1f, 0x8, 0x5a34e2c7, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x20, 0x7800, 0xd83, 0x1f}}) r2 = accept(r0, &(0x7f0000002e40)=@nfc_llcp, &(0x7f0000002ec0)=0x80) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, &(0x7f0000002f80)={'syztnl1\x00', &(0x7f0000002f00)={'syztnl0\x00', r1, 0x0, 0xff, 0x0, 0x9, 0x2, @loopback, @mcast2, 0x1, 0x700, 0xfffffff7, 0x3}}) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000002fc0)) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000003680)={'ip6_vti0\x00', &(0x7f0000003600)={'ip6_vti0\x00', r1, 0x29, 0x7f, 0x1e, 0x513, 0x30, @rand_addr=' \x01\x00', @mcast1, 0x20, 0x10, 0x4, 0x81000000}}) 13:17:19 executing program 6: prctl$PR_SET_IO_FLUSHER(0x39, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) clock_gettime(0x5, &(0x7f0000000000)) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000040)) clock_nanosleep(0x5, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan0\x00'}) clock_nanosleep(0x0, 0x1, &(0x7f00000005c0), &(0x7f0000000600)) 13:17:19 executing program 7: tkill(0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000001300), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 13:17:19 executing program 0: clock_nanosleep(0x1, 0x1, &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f0000000040)) r0 = getpgrp(0x0) sched_rr_get_interval(r0, &(0x7f0000000080)) r1 = getpgrp(r0) sched_rr_get_interval(r1, &(0x7f00000000c0)) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000100)={[0x5ab]}, &(0x7f0000000140), &(0x7f0000000200)={r2, r3+60000000}, 0x8) r4 = getpgrp(r1) waitid(0x3, r4, &(0x7f0000000240), 0x20000000, &(0x7f00000002c0)) sched_rr_get_interval(r4, &(0x7f0000000380)) clock_nanosleep(0x2, 0x0, &(0x7f00000003c0)={0x77359400}, &(0x7f0000000400)) timer_create(0x0, &(0x7f0000000440)={0x0, 0x3c, 0x4, @tid=r0}, &(0x7f0000000480)) wait4(r0, &(0x7f00000004c0), 0x8, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000a40)=[{{&(0x7f0000000500), 0x80, &(0x7f0000000600)=[{&(0x7f0000000580)=""/92, 0x5c}], 0x1, &(0x7f0000000640)=""/61, 0x3d}, 0x1}, {{&(0x7f0000000680)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000700)=""/217, 0xd9}, {&(0x7f0000000800)=""/165, 0xa5}, {&(0x7f00000008c0)}, {&(0x7f0000000900)=""/247, 0xf7}], 0x4}, 0x10000}], 0x2, 0x12041, 0x0) r5 = gettid() waitid(0x2, r5, &(0x7f0000000ac0), 0x2, &(0x7f0000000b40)) 13:17:19 executing program 6: prctl$PR_SET_IO_FLUSHER(0x39, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) clock_gettime(0x5, &(0x7f0000000000)) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000040)) clock_nanosleep(0x5, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) clock_nanosleep(0x0, 0x1, &(0x7f00000005c0), &(0x7f0000000600)) 13:17:19 executing program 7: tkill(0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000001300), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 13:17:19 executing program 6: prctl$PR_SET_IO_FLUSHER(0x39, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) clock_gettime(0x5, &(0x7f0000000000)) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000040)) clock_nanosleep(0x0, 0x1, &(0x7f00000005c0), &(0x7f0000000600)) 13:17:19 executing program 4: ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000000)={0x5, 0x1, 0x4, 0x1, 0x6}) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0x80, 0x80) socket$inet(0x2, 0x800, 0x4) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000080)=""/4096) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000001100)={'ip6gre0\x00', &(0x7f0000001080)={'syztnl0\x00', 0x0, 0x2f, 0x72, 0x4, 0x7f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, 0x40, 0x40, 0x5, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000011c0)={'ip6gre0\x00', &(0x7f0000001140)={'syztnl2\x00', r1, 0x2f, 0xf7, 0xfe, 0x4, 0x8, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x20, 0xfe2, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000001280)={'syztnl0\x00', &(0x7f0000001200)={'ip6gre0\x00', r2, 0x4, 0x2, 0x4, 0xffffffff, 0x12, @mcast1, @loopback, 0x7800, 0x8, 0xbc, 0xd96}}) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001300), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x38, r4, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x402c890}, 0x40000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r5}}, 0x21) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000015c0)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={0x90, 0x0, 0x12, 0x70bd26, 0x25dfdbfc, {}, [{{0x8, 0x1, r3}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x8000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001740)={'ip_vti0\x00', &(0x7f0000001600)={'ip_vti0\x00', r2, 0x7800, 0x0, 0x7ba6, 0x3, {{0x3f, 0x4, 0x0, 0x23, 0xfc, 0x67, 0x0, 0xff, 0x4, 0x0, @private=0xa010100, @empty, {[@generic={0x0, 0xa, "40ebf02080ba2927"}, @timestamp_prespec={0x44, 0xc, 0x43, 0x3, 0x4, [{@loopback, 0x100}]}, @cipso={0x86, 0x51, 0x2, [{0x2, 0x4, "ca84"}, {0x1, 0xe, "0fb6e4ebf725212a1f4921ab"}, {0x0, 0x10, "4e91c861d05464ee62c7e2524b76"}, {0x0, 0x12, "b421989cb68da381e74d9a94bb264171"}, {0x2, 0x8, "0c43715770af"}, {0x7, 0xf, "3af348b6e9faa379f4f34958e2"}]}, @rr={0x7, 0xf, 0x65, [@empty, @dev={0xac, 0x14, 0x14, 0x10}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_prespec={0x44, 0x34, 0xbd, 0x3, 0x2, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1ff}, {@multicast2, 0xbc}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x1}, {@rand_addr=0x64010102, 0xa5f}, {@remote}, {@private=0xa010101, 0x2}]}, @timestamp_prespec={0x44, 0x14, 0x52, 0x3, 0xc, [{@local, 0xff}, {@loopback, 0x7ff}]}, @ssrr={0x89, 0xb, 0x67, [@remote, @empty]}, @cipso={0x86, 0x1c, 0x0, [{0x1, 0x8, "09576fd99f05"}, {0x5, 0xe, "3b7b886315736799754d0f1e"}]}, @noop]}}}}}) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x4cfd, &(0x7f0000001a80)={0x0, 0xe6d8, 0x2, 0x1, 0x150}) 13:17:19 executing program 2: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)="3c83aba66cc4e07e77a76c5edaaaeb2c142196dcb4948d1bea7cc7c56c0522d946cb5ac4231e337744cd43286b5d06c909b77ba0b1dfa735763b470323ffa9785312df86d54ab56c63f169c855da890385e79ba7c12224570381988ffe8d2b65a733b2b77981ee7865d86a0dd49f2d3d71ba26e167eb653682c8fb6d85ea2cee1876e5e45d8d6f35f9920ea42fd04de7fa1e08de2e345b5c79da16e0f38f87b93c79d554bdf32aa1cdf40cebec88412bea62d90d3915360fdeab0e5ac3a9df3b64a91136855c82d51ab174ac5cd6bd6b9d223bcd6f79ffce263b54bd9999c01459a72d54dffa20773c8d28d00c5e0ea136538365", 0xf4}, 0x1, 0x0, 0x0, 0x4000}, 0x20000001) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000180)) sysinfo(&(0x7f00000001c0)=""/142) ioctl$sock_ifreq(r1, 0x8931, &(0x7f0000000280)={'batadv_slave_0\x00', @ifru_addrs=@in={0x2, 0x0, @local}}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/bus/platform', 0x16001, 0x9) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r3, 0x2, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000090) sysinfo(&(0x7f0000000840)=""/122) accept(r0, &(0x7f0000000ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000b40)=0x80) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000e00)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000dc0)={&(0x7f0000000b80)=@nl=@proc, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000c00)=""/219, 0xdb}, {&(0x7f0000000d00)=""/31, 0x1f}], 0x2, &(0x7f0000000d80)=""/60, 0x3c}, 0x0, 0x12100, 0x1, {0x1}}, 0x7) 13:17:28 executing program 0: clock_nanosleep(0x1, 0x1, &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f0000000040)) r0 = getpgrp(0x0) sched_rr_get_interval(r0, &(0x7f0000000080)) r1 = getpgrp(r0) sched_rr_get_interval(r1, &(0x7f00000000c0)) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000100)={[0x5ab]}, &(0x7f0000000140), &(0x7f0000000200)={r2, r3+60000000}, 0x8) r4 = getpgrp(r1) waitid(0x3, r4, &(0x7f0000000240), 0x20000000, &(0x7f00000002c0)) sched_rr_get_interval(r4, &(0x7f0000000380)) clock_nanosleep(0x2, 0x0, &(0x7f00000003c0)={0x77359400}, &(0x7f0000000400)) timer_create(0x0, &(0x7f0000000440)={0x0, 0x3c, 0x4, @tid=r0}, &(0x7f0000000480)) wait4(r0, &(0x7f00000004c0), 0x8, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000a40)=[{{&(0x7f0000000500), 0x80, &(0x7f0000000600)=[{&(0x7f0000000580)=""/92, 0x5c}], 0x1, &(0x7f0000000640)=""/61, 0x3d}, 0x1}, {{&(0x7f0000000680)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000700)=""/217, 0xd9}, {&(0x7f0000000800)=""/165, 0xa5}, {&(0x7f00000008c0)}, {&(0x7f0000000900)=""/247, 0xf7}], 0x4}, 0x10000}], 0x2, 0x12041, 0x0) r5 = gettid() waitid(0x2, r5, &(0x7f0000000ac0), 0x2, &(0x7f0000000b40)) 13:17:28 executing program 6: prctl$PR_SET_IO_FLUSHER(0x39, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) clock_gettime(0x5, &(0x7f0000000000)) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) clock_nanosleep(0x0, 0x1, &(0x7f00000005c0), &(0x7f0000000600)) 13:17:28 executing program 1: prctl$PR_SET_IO_FLUSHER(0x39, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) clock_gettime(0x5, &(0x7f0000000000)) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000040)) clock_nanosleep(0x5, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x80, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x5c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xe0}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "60ba389c00a5ea1d6dd65713749c7a02"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x3f}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x49}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3d3e46fd6bbaaa3c6a156013bb6a5a36"}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x10) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) setfsgid(0xee00) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, r1, 0x12, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xffff, 0x36}}}}, [@NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x9}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x9}, @NL80211_ATTR_P2P_CTWINDOW={0x5}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0xd800}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x20}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) rt_sigtimedwait(&(0x7f0000000400)={[0x7fff]}, 0x0, &(0x7f0000000440)={0x77359400}, 0x8) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x1) 13:17:28 executing program 4: ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000000)={0x5, 0x1, 0x4, 0x1, 0x6}) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0x80, 0x80) socket$inet(0x2, 0x800, 0x4) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000080)=""/4096) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000001100)={'ip6gre0\x00', &(0x7f0000001080)={'syztnl0\x00', 0x0, 0x2f, 0x72, 0x4, 0x7f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, 0x40, 0x40, 0x5, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000011c0)={'ip6gre0\x00', &(0x7f0000001140)={'syztnl2\x00', r1, 0x2f, 0xf7, 0xfe, 0x4, 0x8, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x20, 0xfe2, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000001280)={'syztnl0\x00', &(0x7f0000001200)={'ip6gre0\x00', r2, 0x4, 0x2, 0x4, 0xffffffff, 0x12, @mcast1, @loopback, 0x7800, 0x8, 0xbc, 0xd96}}) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001300), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x38, r4, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x402c890}, 0x40000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r5}}, 0x21) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000015c0)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={0x90, 0x0, 0x12, 0x70bd26, 0x25dfdbfc, {}, [{{0x8, 0x1, r3}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x8000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001740)={'ip_vti0\x00', &(0x7f0000001600)={'ip_vti0\x00', r2, 0x7800, 0x0, 0x7ba6, 0x3, {{0x3f, 0x4, 0x0, 0x23, 0xfc, 0x67, 0x0, 0xff, 0x4, 0x0, @private=0xa010100, @empty, {[@generic={0x0, 0xa, "40ebf02080ba2927"}, @timestamp_prespec={0x44, 0xc, 0x43, 0x3, 0x4, [{@loopback, 0x100}]}, @cipso={0x86, 0x51, 0x2, [{0x2, 0x4, "ca84"}, {0x1, 0xe, "0fb6e4ebf725212a1f4921ab"}, {0x0, 0x10, "4e91c861d05464ee62c7e2524b76"}, {0x0, 0x12, "b421989cb68da381e74d9a94bb264171"}, {0x2, 0x8, "0c43715770af"}, {0x7, 0xf, "3af348b6e9faa379f4f34958e2"}]}, @rr={0x7, 0xf, 0x65, [@empty, @dev={0xac, 0x14, 0x14, 0x10}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_prespec={0x44, 0x34, 0xbd, 0x3, 0x2, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1ff}, {@multicast2, 0xbc}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x1}, {@rand_addr=0x64010102, 0xa5f}, {@remote}, {@private=0xa010101, 0x2}]}, @timestamp_prespec={0x44, 0x14, 0x52, 0x3, 0xc, [{@local, 0xff}, {@loopback, 0x7ff}]}, @ssrr={0x89, 0xb, 0x67, [@remote, @empty]}, @cipso={0x86, 0x1c, 0x0, [{0x1, 0x8, "09576fd99f05"}, {0x5, 0xe, "3b7b886315736799754d0f1e"}]}, @noop]}}}}}) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x4cfd, &(0x7f0000001a80)={0x0, 0xe6d8, 0x2, 0x1, 0x150}) 13:17:28 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000002d40)={'syztnl1\x00', &(0x7f0000002cc0)={'syztnl1\x00', 0x0, 0x29, 0xe0, 0x9, 0x3, 0x20, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8, 0x7, 0x5, 0xad3}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000002e00)={'syztnl1\x00', &(0x7f0000002d80)={'syztnl2\x00', r1, 0x29, 0x1f, 0x8, 0x5a34e2c7, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x20, 0x7800, 0xd83, 0x1f}}) accept(r0, &(0x7f0000002e40)=@nfc_llcp, &(0x7f0000002ec0)=0x80) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, &(0x7f0000002f80)={'syztnl1\x00', &(0x7f0000002f00)={'syztnl0\x00', r1, 0x0, 0xff, 0x0, 0x9, 0x2, @loopback, @mcast2, 0x1, 0x700, 0xfffffff7, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000003680)={'ip6_vti0\x00', &(0x7f0000003600)={'ip6_vti0\x00', r1, 0x29, 0x7f, 0x1e, 0x513, 0x30, @rand_addr=' \x01\x00', @mcast1, 0x20, 0x10, 0x4, 0x81000000}}) 13:17:28 executing program 7: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)="3c83aba66cc4e07e77a76c5edaaaeb2c142196dcb4948d1bea7cc7c56c0522d946cb5ac4231e337744cd43286b5d06c909b77ba0b1dfa735763b470323ffa9785312df86d54ab56c63f169c855da890385e79ba7c12224570381988ffe8d2b65a733b2b77981ee7865d86a0dd49f2d3d71ba26e167eb653682c8fb6d85ea2cee1876e5e45d8d6f35f9920ea42fd04de7fa1e08de2e345b5c79da16e0f38f87b93c79d554bdf32aa1cdf40cebec88412bea62d90d3915360fdeab0e5ac3a9df3b64a91136855c82d51ab174ac5cd6bd6b9d223bcd6f79ffce263b54bd9999c01459a72d54dffa20773c8d28d00c5e0ea136538365", 0xf4}, 0x1, 0x0, 0x0, 0x4000}, 0x20000001) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000180)) sysinfo(&(0x7f00000001c0)=""/142) ioctl$sock_ifreq(r1, 0x8931, &(0x7f0000000280)={'batadv_slave_0\x00', @ifru_addrs=@in={0x2, 0x0, @local}}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/bus/platform', 0x16001, 0x9) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r3, 0x2, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000090) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f00000004c0)={0x14c, r3, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x81, 0x6}, {0xe9, 0x1}, {0x6, 0x5}, {0x2d, 0x6}, {0x81, 0x2}, {0x3f, 0x6}, {0x8, 0x2}, {0x1, 0x7}, {0x48, 0x5}, {0x80, 0x5}, {0xff, 0x6}, {0x2, 0x5}], "c1060bf1205e1788"}}, @NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x5, 0x6}, {0x2, 0x5}, {0x5, 0x7}, {0xff, 0x7}, {0x0, 0x5}, {0x3, 0x2}, {0xfa, 0x2}, {0x1, 0x7}, {0x0, 0x2}, {0x6f}, {}, {0x7, 0x7}, {0x81, 0x7}, {0x6, 0x7}, {0x7, 0x7}, {0x4, 0x5}, {0x1f}, {0x5, 0x4}], "98cb2e5ab9500d0c"}}, @NL80211_ATTR_QOS_MAP={0xe, 0xc7, {[{0x81, 0x6}], "57fcf5f60644f176"}}, @NL80211_ATTR_QOS_MAP={0x34, 0xc7, {[{0x1, 0x7}, {0xff, 0x3}, {0x4, 0x1}, {0x40}, {0x8, 0x6}, {0x6, 0x2}, {0x5b, 0x6}, {0x40, 0x6}, {0x5, 0x2}, {0x2, 0x3}, {0xff, 0x1}, {0x7, 0x5}, {0x81, 0x6}, {0x1}, {0xfa, 0x7}, {0xb2, 0x7}, {0x6, 0x7}, {0x2, 0x5}, {0x7f, 0x4}, {0x9}], "c94f799edde58374"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "71a679bb7dfeab0b"}}, @NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0x3f, 0x3}, {0x15, 0x1}, {0xc0, 0x4}, {0x3}, {0x1, 0x7}, {0x9, 0x7}, {0x6}, {0x4, 0x3}, {0x0, 0x3}, {0x7, 0x2}, {0xd4, 0x7}, {0x1, 0x4}, {0x4}, {0x6, 0x7}], "73aa28212d51194b"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0xff, 0x5}, {0x2, 0x1}, {0x7, 0x5}, {0x2, 0x2}, {0x1, 0x6}, {0x6, 0x5}, {0xa1}, {0x1, 0x1}], "402ab314775a4ac1"}}, @NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0x40, 0x3}, {0x20, 0x7}, {0x9, 0x1}, {0x3, 0x2}, {0x40, 0x6}, {0x2, 0x4}, {0x3a, 0x6}, {0x20, 0x6}, {0x0, 0x4}, {0x7f, 0x7}, {0x1, 0x7}, {0x8, 0x3}, {0x7, 0x4}, {0x3f, 0x1}, {0x3, 0x4}, {0x2}, {0x1f, 0x1}, {0xf8, 0x3}, {0x1, 0x5}], "2f10c13b1320f82b"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0x3, 0x7}, {0x7, 0x4}, {0x4, 0x7}, {0x2, 0x1}, {0x1f, 0x7}, {0xa5, 0x4}, {0x65, 0x4}, {0x9, 0x7}], "be02396e2de23506"}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) sysinfo(&(0x7f0000000840)=""/122) accept(r0, &(0x7f0000000ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000b40)=0x80) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000e00)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000dc0)={&(0x7f0000000b80)=@nl=@proc, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000c00)=""/219, 0xdb}, {&(0x7f0000000d00)=""/31, 0x1f}], 0x2, &(0x7f0000000d80)=""/60, 0x3c}, 0x0, 0x12100, 0x1, {0x1}}, 0x7) 13:17:28 executing program 2: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)="3c83aba66cc4e07e77a76c5edaaaeb2c142196dcb4948d1bea7cc7c56c0522d946cb5ac4231e337744cd43286b5d06c909b77ba0b1dfa735763b470323ffa9785312df86d54ab56c63f169c855da890385e79ba7c12224570381988ffe8d2b65a733b2b77981ee7865d86a0dd49f2d3d71ba26e167eb653682c8fb6d85ea2cee1876e5e45d8d6f35f9920ea42fd04de7fa1e08de2e345b5c79da16e0f38f87b93c79d554bdf32aa1cdf40cebec88412bea62d90d3915360fdeab0e5ac3a9df3b64a91136855c82d51ab174ac5cd6bd6b9d223bcd6f79ffce263b54bd9999c01459a72d54dffa20773c8d28d00c5e0ea136538365", 0xf4}, 0x1, 0x0, 0x0, 0x4000}, 0x20000001) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000180)) sysinfo(&(0x7f00000001c0)=""/142) ioctl$sock_ifreq(r1, 0x8931, &(0x7f0000000280)={'batadv_slave_0\x00', @ifru_addrs=@in={0x2, 0x0, @local}}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/bus/platform', 0x16001, 0x9) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00'}) sysinfo(&(0x7f0000000840)=""/122) accept(r0, &(0x7f0000000ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000b40)=0x80) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000e00)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000dc0)={&(0x7f0000000b80)=@nl=@proc, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000c00)=""/219, 0xdb}, {&(0x7f0000000d00)=""/31, 0x1f}], 0x2, &(0x7f0000000d80)=""/60, 0x3c}, 0x0, 0x12100, 0x1, {0x1}}, 0x7) 13:17:28 executing program 3: clock_nanosleep(0x1, 0x1, &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f0000000040)) r0 = getpgrp(0x0) sched_rr_get_interval(r0, &(0x7f0000000080)) r1 = getpgrp(r0) sched_rr_get_interval(r1, &(0x7f00000000c0)) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000100)={[0x5ab]}, &(0x7f0000000140), &(0x7f0000000200)={r2, r3+60000000}, 0x8) r4 = getpgrp(r1) waitid(0x3, r4, &(0x7f0000000240), 0x20000000, &(0x7f00000002c0)) sched_rr_get_interval(r4, &(0x7f0000000380)) clock_nanosleep(0x2, 0x0, &(0x7f00000003c0)={0x77359400}, &(0x7f0000000400)) timer_create(0x0, &(0x7f0000000440)={0x0, 0x3c, 0x4, @tid=r0}, &(0x7f0000000480)) r5 = gettid() waitid(0x2, r5, &(0x7f0000000ac0), 0x2, &(0x7f0000000b40)) 13:17:28 executing program 6: prctl$PR_SET_IO_FLUSHER(0x39, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) clock_gettime(0x5, &(0x7f0000000000)) clock_nanosleep(0x0, 0x1, &(0x7f00000005c0), &(0x7f0000000600)) 13:17:28 executing program 6: prctl$PR_SET_IO_FLUSHER(0x39, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) clock_nanosleep(0x0, 0x1, &(0x7f00000005c0), &(0x7f0000000600)) 13:17:28 executing program 2: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)="3c83aba66cc4e07e77a76c5edaaaeb2c142196dcb4948d1bea7cc7c56c0522d946cb5ac4231e337744cd43286b5d06c909b77ba0b1dfa735763b470323ffa9785312df86d54ab56c63f169c855da890385e79ba7c12224570381988ffe8d2b65a733b2b77981ee7865d86a0dd49f2d3d71ba26e167eb653682c8fb6d85ea2cee1876e5e45d8d6f35f9920ea42fd04de7fa1e08de2e345b5c79da16e0f38f87b93c79d554bdf32aa1cdf40cebec88412bea62d90d3915360fdeab0e5ac3a9df3b64a91136855c82d51ab174ac5cd6bd6b9d223bcd6f79ffce263b54bd9999c01459a72d54dffa20773c8d28d00c5e0ea136538365", 0xf4}, 0x1, 0x0, 0x0, 0x4000}, 0x20000001) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000180)) sysinfo(&(0x7f00000001c0)=""/142) ioctl$sock_ifreq(r1, 0x8931, &(0x7f0000000280)={'batadv_slave_0\x00', @ifru_addrs=@in={0x2, 0x0, @local}}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/bus/platform', 0x16001, 0x9) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sysinfo(&(0x7f0000000840)=""/122) accept(r0, &(0x7f0000000ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000b40)=0x80) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000e00)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000dc0)={&(0x7f0000000b80)=@nl=@proc, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000c00)=""/219, 0xdb}, {&(0x7f0000000d00)=""/31, 0x1f}], 0x2, &(0x7f0000000d80)=""/60, 0x3c}, 0x0, 0x12100, 0x1, {0x1}}, 0x7) 13:17:28 executing program 6: prctl$PR_SET_IO_FLUSHER(0x39, 0x0) clock_nanosleep(0x0, 0x1, &(0x7f00000005c0), &(0x7f0000000600)) 13:17:28 executing program 2: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)="3c83aba66cc4e07e77a76c5edaaaeb2c142196dcb4948d1bea7cc7c56c0522d946cb5ac4231e337744cd43286b5d06c909b77ba0b1dfa735763b470323ffa9785312df86d54ab56c63f169c855da890385e79ba7c12224570381988ffe8d2b65a733b2b77981ee7865d86a0dd49f2d3d71ba26e167eb653682c8fb6d85ea2cee1876e5e45d8d6f35f9920ea42fd04de7fa1e08de2e345b5c79da16e0f38f87b93c79d554bdf32aa1cdf40cebec88412bea62d90d3915360fdeab0e5ac3a9df3b64a91136855c82d51ab174ac5cd6bd6b9d223bcd6f79ffce263b54bd9999c01459a72d54dffa20773c8d28d00c5e0ea136538365", 0xf4}, 0x1, 0x0, 0x0, 0x4000}, 0x20000001) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000180)) sysinfo(&(0x7f00000001c0)=""/142) ioctl$sock_ifreq(r1, 0x8931, &(0x7f0000000280)={'batadv_slave_0\x00', @ifru_addrs=@in={0x2, 0x0, @local}}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/bus/platform', 0x16001, 0x9) sysinfo(&(0x7f0000000840)=""/122) accept(r0, &(0x7f0000000ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000b40)=0x80) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000e00)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000dc0)={&(0x7f0000000b80)=@nl=@proc, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000c00)=""/219, 0xdb}, {&(0x7f0000000d00)=""/31, 0x1f}], 0x2, &(0x7f0000000d80)=""/60, 0x3c}, 0x0, 0x12100, 0x1, {0x1}}, 0x7) 13:17:28 executing program 6: clock_nanosleep(0x0, 0x1, &(0x7f00000005c0), &(0x7f0000000600)) 13:17:28 executing program 4: ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000000)={0x5, 0x1, 0x4, 0x1, 0x6}) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0x80, 0x80) socket$inet(0x2, 0x800, 0x4) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000080)=""/4096) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000001100)={'ip6gre0\x00', &(0x7f0000001080)={'syztnl0\x00', 0x0, 0x2f, 0x72, 0x4, 0x7f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, 0x40, 0x40, 0x5, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000011c0)={'ip6gre0\x00', &(0x7f0000001140)={'syztnl2\x00', r1, 0x2f, 0xf7, 0xfe, 0x4, 0x8, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x20, 0xfe2, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000001280)={'syztnl0\x00', &(0x7f0000001200)={'ip6gre0\x00', r2, 0x4, 0x2, 0x4, 0xffffffff, 0x12, @mcast1, @loopback, 0x7800, 0x8, 0xbc, 0xd96}}) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001300), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x38, r4, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x402c890}, 0x40000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r5 = syz_genetlink_get_family_id$team(&(0x7f0000001480), r0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000015c0)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={0x90, r5, 0x12, 0x70bd26, 0x25dfdbfc, {}, [{{0x8, 0x1, r3}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x8000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001740)={'ip_vti0\x00', &(0x7f0000001600)={'ip_vti0\x00', r2, 0x7800, 0x0, 0x7ba6, 0x3, {{0x3f, 0x4, 0x0, 0x23, 0xfc, 0x67, 0x0, 0xff, 0x4, 0x0, @private=0xa010100, @empty, {[@generic={0x0, 0xa, "40ebf02080ba2927"}, @timestamp_prespec={0x44, 0xc, 0x43, 0x3, 0x4, [{@loopback, 0x100}]}, @cipso={0x86, 0x51, 0x2, [{0x2, 0x4, "ca84"}, {0x1, 0xe, "0fb6e4ebf725212a1f4921ab"}, {0x0, 0x10, "4e91c861d05464ee62c7e2524b76"}, {0x0, 0x12, "b421989cb68da381e74d9a94bb264171"}, {0x2, 0x8, "0c43715770af"}, {0x7, 0xf, "3af348b6e9faa379f4f34958e2"}]}, @rr={0x7, 0xf, 0x65, [@empty, @dev={0xac, 0x14, 0x14, 0x10}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_prespec={0x44, 0x34, 0xbd, 0x3, 0x2, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1ff}, {@multicast2, 0xbc}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x1}, {@rand_addr=0x64010102, 0xa5f}, {@remote}, {@private=0xa010101, 0x2}]}, @timestamp_prespec={0x44, 0x14, 0x52, 0x3, 0xc, [{@local, 0xff}, {@loopback, 0x7ff}]}, @ssrr={0x89, 0xb, 0x67, [@remote, @empty]}, @cipso={0x86, 0x1c, 0x0, [{0x1, 0x8, "09576fd99f05"}, {0x5, 0xe, "3b7b886315736799754d0f1e"}]}, @noop]}}}}}) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x4cfd, &(0x7f0000001a80)={0x0, 0xe6d8, 0x2, 0x1, 0x150}) 13:17:37 executing program 3: clock_nanosleep(0x1, 0x1, &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f0000000040)) r0 = getpgrp(0x0) sched_rr_get_interval(r0, &(0x7f0000000080)) r1 = getpgrp(r0) sched_rr_get_interval(r1, &(0x7f00000000c0)) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000100)={[0x5ab]}, &(0x7f0000000140), &(0x7f0000000200)={r2, r3+60000000}, 0x8) r4 = getpgrp(r1) waitid(0x3, r4, &(0x7f0000000240), 0x20000000, &(0x7f00000002c0)) sched_rr_get_interval(r4, &(0x7f0000000380)) clock_nanosleep(0x2, 0x0, &(0x7f00000003c0)={0x77359400}, &(0x7f0000000400)) r5 = gettid() waitid(0x2, r5, &(0x7f0000000ac0), 0x2, &(0x7f0000000b40)) 13:17:37 executing program 6: clock_nanosleep(0x0, 0x0, &(0x7f00000005c0), &(0x7f0000000600)) 13:17:37 executing program 2: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)="3c83aba66cc4e07e77a76c5edaaaeb2c142196dcb4948d1bea7cc7c56c0522d946cb5ac4231e337744cd43286b5d06c909b77ba0b1dfa735763b470323ffa9785312df86d54ab56c63f169c855da890385e79ba7c12224570381988ffe8d2b65a733b2b77981ee7865d86a0dd49f2d3d71ba26e167eb653682c8fb6d85ea2cee1876e5e45d8d6f35f9920ea42fd04de7fa1e08de2e345b5c79da16e0f38f87b93c79d554bdf32aa1cdf40cebec88412bea62d90d3915360fdeab0e5ac3a9df3b64a91136855c82d51ab174ac5cd6bd6b9d223bcd6f79ffce263b54bd9999c01459a72d54dffa20773c8d28d00c5e0ea136538365", 0xf4}, 0x1, 0x0, 0x0, 0x4000}, 0x20000001) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000180)) sysinfo(&(0x7f00000001c0)=""/142) ioctl$sock_ifreq(r1, 0x8931, &(0x7f0000000280)={'batadv_slave_0\x00', @ifru_addrs=@in={0x2, 0x0, @local}}) sysinfo(&(0x7f0000000840)=""/122) accept(r0, &(0x7f0000000ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000b40)=0x80) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000e00)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000dc0)={&(0x7f0000000b80)=@nl=@proc, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000c00)=""/219, 0xdb}, {&(0x7f0000000d00)=""/31, 0x1f}], 0x2, &(0x7f0000000d80)=""/60, 0x3c}, 0x0, 0x12100, 0x1, {0x1}}, 0x7) 13:17:37 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000002d40)={'syztnl1\x00', &(0x7f0000002cc0)={'syztnl1\x00', 0x0, 0x29, 0xe0, 0x9, 0x3, 0x20, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8, 0x7, 0x5, 0xad3}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000002e00)={'syztnl1\x00', &(0x7f0000002d80)={'syztnl2\x00', r1, 0x29, 0x1f, 0x8, 0x5a34e2c7, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x20, 0x7800, 0xd83, 0x1f}}) accept(r0, &(0x7f0000002e40)=@nfc_llcp, &(0x7f0000002ec0)=0x80) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000003680)={'ip6_vti0\x00', &(0x7f0000003600)={'ip6_vti0\x00', r1, 0x29, 0x7f, 0x1e, 0x513, 0x30, @rand_addr=' \x01\x00', @mcast1, 0x20, 0x10, 0x4, 0x81000000}}) 13:17:37 executing program 4: ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000000)={0x5, 0x1, 0x4, 0x1, 0x6}) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0x80, 0x80) socket$inet(0x2, 0x800, 0x4) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000080)=""/4096) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000001100)={'ip6gre0\x00', &(0x7f0000001080)={'syztnl0\x00', 0x0, 0x2f, 0x72, 0x4, 0x7f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, 0x40, 0x40, 0x5, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000011c0)={'ip6gre0\x00', &(0x7f0000001140)={'syztnl2\x00', r1, 0x2f, 0xf7, 0xfe, 0x4, 0x8, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x20, 0xfe2, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000001280)={'syztnl0\x00', &(0x7f0000001200)={'ip6gre0\x00', r2, 0x4, 0x2, 0x4, 0xffffffff, 0x12, @mcast1, @loopback, 0x7800, 0x8, 0xbc, 0xd96}}) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001300), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x38, r4, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x402c890}, 0x40000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r5 = syz_genetlink_get_family_id$team(&(0x7f0000001480), r0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000015c0)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={0x90, r5, 0x12, 0x70bd26, 0x25dfdbfc, {}, [{{0x8, 0x1, r3}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x8000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001740)={'ip_vti0\x00', &(0x7f0000001600)={'ip_vti0\x00', r2, 0x7800, 0x0, 0x7ba6, 0x3, {{0x3f, 0x4, 0x0, 0x23, 0xfc, 0x67, 0x0, 0xff, 0x4, 0x0, @private=0xa010100, @empty, {[@generic={0x0, 0xa, "40ebf02080ba2927"}, @timestamp_prespec={0x44, 0xc, 0x43, 0x3, 0x4, [{@loopback, 0x100}]}, @cipso={0x86, 0x51, 0x2, [{0x2, 0x4, "ca84"}, {0x1, 0xe, "0fb6e4ebf725212a1f4921ab"}, {0x0, 0x10, "4e91c861d05464ee62c7e2524b76"}, {0x0, 0x12, "b421989cb68da381e74d9a94bb264171"}, {0x2, 0x8, "0c43715770af"}, {0x7, 0xf, "3af348b6e9faa379f4f34958e2"}]}, @rr={0x7, 0xf, 0x65, [@empty, @dev={0xac, 0x14, 0x14, 0x10}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_prespec={0x44, 0x34, 0xbd, 0x3, 0x2, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1ff}, {@multicast2, 0xbc}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x1}, {@rand_addr=0x64010102, 0xa5f}, {@remote}, {@private=0xa010101, 0x2}]}, @timestamp_prespec={0x44, 0x14, 0x52, 0x3, 0xc, [{@local, 0xff}, {@loopback, 0x7ff}]}, @ssrr={0x89, 0xb, 0x67, [@remote, @empty]}, @cipso={0x86, 0x1c, 0x0, [{0x1, 0x8, "09576fd99f05"}, {0x5, 0xe, "3b7b886315736799754d0f1e"}]}, @noop]}}}}}) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x4cfd, &(0x7f0000001a80)={0x0, 0xe6d8, 0x2, 0x1, 0x150}) 13:17:37 executing program 7: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)="3c83aba66cc4e07e77a76c5edaaaeb2c142196dcb4948d1bea7cc7c56c0522d946cb5ac4231e337744cd43286b5d06c909b77ba0b1dfa735763b470323ffa9785312df86d54ab56c63f169c855da890385e79ba7c12224570381988ffe8d2b65a733b2b77981ee7865d86a0dd49f2d3d71ba26e167eb653682c8fb6d85ea2cee1876e5e45d8d6f35f9920ea42fd04de7fa1e08de2e345b5c79da16e0f38f87b93c79d554bdf32aa1cdf40cebec88412bea62d90d3915360fdeab0e5ac3a9df3b64a91136855c82d51ab174ac5cd6bd6b9d223bcd6f79ffce263b54bd9999c01459a72d54dffa20773c8d28d00c5e0ea136538365", 0xf4}, 0x1, 0x0, 0x0, 0x4000}, 0x20000001) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000180)) sysinfo(&(0x7f00000001c0)=""/142) ioctl$sock_ifreq(r1, 0x8931, &(0x7f0000000280)={'batadv_slave_0\x00', @ifru_addrs=@in={0x2, 0x0, @local}}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/bus/platform', 0x16001, 0x9) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r3, 0x2, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000090) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f00000004c0)={0x14c, r3, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x81, 0x6}, {0xe9, 0x1}, {0x6, 0x5}, {0x2d, 0x6}, {0x81, 0x2}, {0x3f, 0x6}, {0x8, 0x2}, {0x1, 0x7}, {0x48, 0x5}, {0x80, 0x5}, {0xff, 0x6}, {0x2, 0x5}], "c1060bf1205e1788"}}, @NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x5, 0x6}, {0x2, 0x5}, {0x5, 0x7}, {0xff, 0x7}, {0x0, 0x5}, {0x3, 0x2}, {0xfa, 0x2}, {0x1, 0x7}, {0x0, 0x2}, {0x6f}, {}, {0x7, 0x7}, {0x81, 0x7}, {0x6, 0x7}, {0x7, 0x7}, {0x4, 0x5}, {0x1f}, {0x5, 0x4}], "98cb2e5ab9500d0c"}}, @NL80211_ATTR_QOS_MAP={0xe, 0xc7, {[{0x81, 0x6}], "57fcf5f60644f176"}}, @NL80211_ATTR_QOS_MAP={0x34, 0xc7, {[{0x1, 0x7}, {0xff, 0x3}, {0x4, 0x1}, {0x40}, {0x8, 0x6}, {0x6, 0x2}, {0x5b, 0x6}, {0x40, 0x6}, {0x5, 0x2}, {0x2, 0x3}, {0xff, 0x1}, {0x7, 0x5}, {0x81, 0x6}, {0x1}, {0xfa, 0x7}, {0xb2, 0x7}, {0x6, 0x7}, {0x2, 0x5}, {0x7f, 0x4}, {0x9}], "c94f799edde58374"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "71a679bb7dfeab0b"}}, @NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0x3f, 0x3}, {0x15, 0x1}, {0xc0, 0x4}, {0x3}, {0x1, 0x7}, {0x9, 0x7}, {0x6}, {0x4, 0x3}, {0x0, 0x3}, {0x7, 0x2}, {0xd4, 0x7}, {0x1, 0x4}, {0x4}, {0x6, 0x7}], "73aa28212d51194b"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0xff, 0x5}, {0x2, 0x1}, {0x7, 0x5}, {0x2, 0x2}, {0x1, 0x6}, {0x6, 0x5}, {0xa1}, {0x1, 0x1}], "402ab314775a4ac1"}}, @NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0x40, 0x3}, {0x20, 0x7}, {0x9, 0x1}, {0x3, 0x2}, {0x40, 0x6}, {0x2, 0x4}, {0x3a, 0x6}, {0x20, 0x6}, {0x0, 0x4}, {0x7f, 0x7}, {0x1, 0x7}, {0x8, 0x3}, {0x7, 0x4}, {0x3f, 0x1}, {0x3, 0x4}, {0x2}, {0x1f, 0x1}, {0xf8, 0x3}, {0x1, 0x5}], "2f10c13b1320f82b"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0x3, 0x7}, {0x7, 0x4}, {0x4, 0x7}, {0x2, 0x1}, {0x1f, 0x7}, {0xa5, 0x4}, {0x65, 0x4}, {0x9, 0x7}], "be02396e2de23506"}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) sysinfo(&(0x7f0000000840)=""/122) accept(r0, &(0x7f0000000ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000b40)=0x80) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000e00)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000dc0)={&(0x7f0000000b80)=@nl=@proc, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000c00)=""/219, 0xdb}, {&(0x7f0000000d00)=""/31, 0x1f}], 0x2, &(0x7f0000000d80)=""/60, 0x3c}, 0x0, 0x12100, 0x1, {0x1}}, 0x7) 13:17:37 executing program 0: clock_nanosleep(0x1, 0x1, &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f0000000040)) r0 = getpgrp(0x0) sched_rr_get_interval(r0, &(0x7f0000000080)) r1 = getpgrp(r0) sched_rr_get_interval(r1, &(0x7f00000000c0)) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000100)={[0x5ab]}, &(0x7f0000000140), &(0x7f0000000200)={r2, r3+60000000}, 0x8) r4 = getpgrp(r1) waitid(0x3, r4, &(0x7f0000000240), 0x20000000, &(0x7f00000002c0)) sched_rr_get_interval(r4, &(0x7f0000000380)) clock_nanosleep(0x2, 0x0, &(0x7f00000003c0)={0x77359400}, &(0x7f0000000400)) timer_create(0x0, &(0x7f0000000440)={0x0, 0x3c, 0x4, @tid=r0}, &(0x7f0000000480)) wait4(r0, &(0x7f00000004c0), 0x8, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000a40)=[{{&(0x7f0000000500), 0x80, &(0x7f0000000600)=[{&(0x7f0000000580)=""/92, 0x5c}], 0x1, &(0x7f0000000640)=""/61, 0x3d}, 0x1}, {{&(0x7f0000000680)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000700)=""/217, 0xd9}, {&(0x7f0000000800)=""/165, 0xa5}, {&(0x7f00000008c0)}, {&(0x7f0000000900)=""/247, 0xf7}], 0x4}, 0x10000}], 0x2, 0x12041, 0x0) r5 = gettid() waitid(0x2, r5, &(0x7f0000000ac0), 0x2, &(0x7f0000000b40)) 13:17:37 executing program 1: prctl$PR_SET_IO_FLUSHER(0x39, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) clock_gettime(0x5, &(0x7f0000000000)) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000040)) clock_nanosleep(0x5, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x80, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x5c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xe0}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "60ba389c00a5ea1d6dd65713749c7a02"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x3f}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x49}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3d3e46fd6bbaaa3c6a156013bb6a5a36"}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x10) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) setfsgid(0xee00) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, r1, 0x12, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xffff, 0x36}}}}, [@NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x9}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x9}, @NL80211_ATTR_P2P_CTWINDOW={0x5}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0xd800}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x20}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) rt_sigtimedwait(&(0x7f0000000400)={[0x7fff]}, 0x0, &(0x7f0000000440)={0x77359400}, 0x8) 13:17:37 executing program 6: clock_nanosleep(0x0, 0x0, &(0x7f00000005c0), &(0x7f0000000600)) 13:17:37 executing program 6: clock_nanosleep(0x0, 0x0, &(0x7f00000005c0), &(0x7f0000000600)) 13:17:37 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000002d40)={'syztnl1\x00', &(0x7f0000002cc0)={'syztnl1\x00', 0x0, 0x29, 0xe0, 0x9, 0x3, 0x20, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8, 0x7, 0x5, 0xad3}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000002e00)={'syztnl1\x00', &(0x7f0000002d80)={'syztnl2\x00', r1, 0x29, 0x1f, 0x8, 0x5a34e2c7, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x20, 0x7800, 0xd83, 0x1f}}) accept(r0, &(0x7f0000002e40)=@nfc_llcp, &(0x7f0000002ec0)=0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000003680)={'ip6_vti0\x00', &(0x7f0000003600)={'ip6_vti0\x00', r1, 0x29, 0x7f, 0x1e, 0x513, 0x30, @rand_addr=' \x01\x00', @mcast1, 0x20, 0x10, 0x4, 0x81000000}}) 13:17:37 executing program 4: ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000000)={0x5, 0x1, 0x4, 0x1, 0x6}) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0x80, 0x80) socket$inet(0x2, 0x800, 0x4) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000080)=""/4096) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000001100)={'ip6gre0\x00', &(0x7f0000001080)={'syztnl0\x00', 0x0, 0x2f, 0x72, 0x4, 0x7f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, 0x40, 0x40, 0x5, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000011c0)={'ip6gre0\x00', &(0x7f0000001140)={'syztnl2\x00', r1, 0x2f, 0xf7, 0xfe, 0x4, 0x8, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x20, 0xfe2, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000001280)={'syztnl0\x00', &(0x7f0000001200)={'ip6gre0\x00', r2, 0x4, 0x2, 0x4, 0xffffffff, 0x12, @mcast1, @loopback, 0x7800, 0x8, 0xbc, 0xd96}}) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001300), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x38, r4, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x402c890}, 0x40000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r5 = syz_genetlink_get_family_id$team(&(0x7f0000001480), r0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000015c0)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={0x90, r5, 0x12, 0x70bd26, 0x25dfdbfc, {}, [{{0x8, 0x1, r3}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x8000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001740)={'ip_vti0\x00', &(0x7f0000001600)={'ip_vti0\x00', r2, 0x7800, 0x0, 0x7ba6, 0x3, {{0x3f, 0x4, 0x0, 0x23, 0xfc, 0x67, 0x0, 0xff, 0x4, 0x0, @private=0xa010100, @empty, {[@generic={0x0, 0xa, "40ebf02080ba2927"}, @timestamp_prespec={0x44, 0xc, 0x43, 0x3, 0x4, [{@loopback, 0x100}]}, @cipso={0x86, 0x51, 0x2, [{0x2, 0x4, "ca84"}, {0x1, 0xe, "0fb6e4ebf725212a1f4921ab"}, {0x0, 0x10, "4e91c861d05464ee62c7e2524b76"}, {0x0, 0x12, "b421989cb68da381e74d9a94bb264171"}, {0x2, 0x8, "0c43715770af"}, {0x7, 0xf, "3af348b6e9faa379f4f34958e2"}]}, @rr={0x7, 0xf, 0x65, [@empty, @dev={0xac, 0x14, 0x14, 0x10}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_prespec={0x44, 0x34, 0xbd, 0x3, 0x2, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1ff}, {@multicast2, 0xbc}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x1}, {@rand_addr=0x64010102, 0xa5f}, {@remote}, {@private=0xa010101, 0x2}]}, @timestamp_prespec={0x44, 0x14, 0x52, 0x3, 0xc, [{@local, 0xff}, {@loopback, 0x7ff}]}, @ssrr={0x89, 0xb, 0x67, [@remote, @empty]}, @cipso={0x86, 0x1c, 0x0, [{0x1, 0x8, "09576fd99f05"}, {0x5, 0xe, "3b7b886315736799754d0f1e"}]}, @noop]}}}}}) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x4cfd, &(0x7f0000001a80)={0x0, 0xe6d8, 0x2, 0x1, 0x150}) 13:17:37 executing program 2: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)="3c83aba66cc4e07e77a76c5edaaaeb2c142196dcb4948d1bea7cc7c56c0522d946cb5ac4231e337744cd43286b5d06c909b77ba0b1dfa735763b470323ffa9785312df86d54ab56c63f169c855da890385e79ba7c12224570381988ffe8d2b65a733b2b77981ee7865d86a0dd49f2d3d71ba26e167eb653682c8fb6d85ea2cee1876e5e45d8d6f35f9920ea42fd04de7fa1e08de2e345b5c79da16e0f38f87b93c79d554bdf32aa1cdf40cebec88412bea62d90d3915360fdeab0e5ac3a9df3b64a91136855c82d51ab174ac5cd6bd6b9d223bcd6f79ffce263b54bd9999c01459a72d54dffa20773c8d28d00c5e0ea136538365", 0xf4}, 0x1, 0x0, 0x0, 0x4000}, 0x20000001) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000180)) sysinfo(&(0x7f00000001c0)=""/142) ioctl$sock_ifreq(r1, 0x8931, &(0x7f0000000280)={'batadv_slave_0\x00', @ifru_addrs=@in={0x2, 0x0, @local}}) sysinfo(&(0x7f0000000840)=""/122) accept(r0, &(0x7f0000000ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000b40)=0x80) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000e00)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000dc0)={&(0x7f0000000b80)=@nl=@proc, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000c00)=""/219, 0xdb}, {&(0x7f0000000d00)=""/31, 0x1f}], 0x2, &(0x7f0000000d80)=""/60, 0x3c}, 0x0, 0x12100, 0x1, {0x1}}, 0x7) 13:17:37 executing program 7: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)="3c83aba66cc4e07e77a76c5edaaaeb2c142196dcb4948d1bea7cc7c56c0522d946cb5ac4231e337744cd43286b5d06c909b77ba0b1dfa735763b470323ffa9785312df86d54ab56c63f169c855da890385e79ba7c12224570381988ffe8d2b65a733b2b77981ee7865d86a0dd49f2d3d71ba26e167eb653682c8fb6d85ea2cee1876e5e45d8d6f35f9920ea42fd04de7fa1e08de2e345b5c79da16e0f38f87b93c79d554bdf32aa1cdf40cebec88412bea62d90d3915360fdeab0e5ac3a9df3b64a91136855c82d51ab174ac5cd6bd6b9d223bcd6f79ffce263b54bd9999c01459a72d54dffa20773c8d28d00c5e0ea136538365", 0xf4}, 0x1, 0x0, 0x0, 0x4000}, 0x20000001) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000180)) sysinfo(&(0x7f00000001c0)=""/142) ioctl$sock_ifreq(r1, 0x8931, &(0x7f0000000280)={'batadv_slave_0\x00', @ifru_addrs=@in={0x2, 0x0, @local}}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/bus/platform', 0x16001, 0x9) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r3, 0x2, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000090) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f00000004c0)={0x14c, r3, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x81, 0x6}, {0xe9, 0x1}, {0x6, 0x5}, {0x2d, 0x6}, {0x81, 0x2}, {0x3f, 0x6}, {0x8, 0x2}, {0x1, 0x7}, {0x48, 0x5}, {0x80, 0x5}, {0xff, 0x6}, {0x2, 0x5}], "c1060bf1205e1788"}}, @NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x5, 0x6}, {0x2, 0x5}, {0x5, 0x7}, {0xff, 0x7}, {0x0, 0x5}, {0x3, 0x2}, {0xfa, 0x2}, {0x1, 0x7}, {0x0, 0x2}, {0x6f}, {}, {0x7, 0x7}, {0x81, 0x7}, {0x6, 0x7}, {0x7, 0x7}, {0x4, 0x5}, {0x1f}, {0x5, 0x4}], "98cb2e5ab9500d0c"}}, @NL80211_ATTR_QOS_MAP={0xe, 0xc7, {[{0x81, 0x6}], "57fcf5f60644f176"}}, @NL80211_ATTR_QOS_MAP={0x34, 0xc7, {[{0x1, 0x7}, {0xff, 0x3}, {0x4, 0x1}, {0x40}, {0x8, 0x6}, {0x6, 0x2}, {0x5b, 0x6}, {0x40, 0x6}, {0x5, 0x2}, {0x2, 0x3}, {0xff, 0x1}, {0x7, 0x5}, {0x81, 0x6}, {0x1}, {0xfa, 0x7}, {0xb2, 0x7}, {0x6, 0x7}, {0x2, 0x5}, {0x7f, 0x4}, {0x9}], "c94f799edde58374"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "71a679bb7dfeab0b"}}, @NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0x3f, 0x3}, {0x15, 0x1}, {0xc0, 0x4}, {0x3}, {0x1, 0x7}, {0x9, 0x7}, {0x6}, {0x4, 0x3}, {0x0, 0x3}, {0x7, 0x2}, {0xd4, 0x7}, {0x1, 0x4}, {0x4}, {0x6, 0x7}], "73aa28212d51194b"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0xff, 0x5}, {0x2, 0x1}, {0x7, 0x5}, {0x2, 0x2}, {0x1, 0x6}, {0x6, 0x5}, {0xa1}, {0x1, 0x1}], "402ab314775a4ac1"}}, @NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0x40, 0x3}, {0x20, 0x7}, {0x9, 0x1}, {0x3, 0x2}, {0x40, 0x6}, {0x2, 0x4}, {0x3a, 0x6}, {0x20, 0x6}, {0x0, 0x4}, {0x7f, 0x7}, {0x1, 0x7}, {0x8, 0x3}, {0x7, 0x4}, {0x3f, 0x1}, {0x3, 0x4}, {0x2}, {0x1f, 0x1}, {0xf8, 0x3}, {0x1, 0x5}], "2f10c13b1320f82b"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0x3, 0x7}, {0x7, 0x4}, {0x4, 0x7}, {0x2, 0x1}, {0x1f, 0x7}, {0xa5, 0x4}, {0x65, 0x4}, {0x9, 0x7}], "be02396e2de23506"}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) sysinfo(&(0x7f0000000840)=""/122) accept(r0, &(0x7f0000000ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000b40)=0x80) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000e00)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000dc0)={&(0x7f0000000b80)=@nl=@proc, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000c00)=""/219, 0xdb}, {&(0x7f0000000d00)=""/31, 0x1f}], 0x2, &(0x7f0000000d80)=""/60, 0x3c}, 0x0, 0x12100, 0x1, {0x1}}, 0x7) 13:17:37 executing program 6: clock_nanosleep(0x0, 0x1, 0x0, &(0x7f0000000600)) 13:17:37 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000002d40)={'syztnl1\x00', &(0x7f0000002cc0)={'syztnl1\x00', 0x0, 0x29, 0xe0, 0x9, 0x3, 0x20, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8, 0x7, 0x5, 0xad3}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000002e00)={'syztnl1\x00', &(0x7f0000002d80)={'syztnl2\x00', r1, 0x29, 0x1f, 0x8, 0x5a34e2c7, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x20, 0x7800, 0xd83, 0x1f}}) accept(r0, &(0x7f0000002e40)=@nfc_llcp, &(0x7f0000002ec0)=0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000003680)={'ip6_vti0\x00', &(0x7f0000003600)={'ip6_vti0\x00', r1, 0x29, 0x7f, 0x1e, 0x513, 0x30, @rand_addr=' \x01\x00', @mcast1, 0x20, 0x10, 0x4, 0x81000000}}) 13:17:46 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000002d40)={'syztnl1\x00', &(0x7f0000002cc0)={'syztnl1\x00', 0x0, 0x29, 0xe0, 0x9, 0x3, 0x20, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8, 0x7, 0x5, 0xad3}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000002e00)={'syztnl1\x00', &(0x7f0000002d80)={'syztnl2\x00', r1, 0x29, 0x1f, 0x8, 0x5a34e2c7, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x20, 0x7800, 0xd83, 0x1f}}) accept(r0, &(0x7f0000002e40)=@nfc_llcp, &(0x7f0000002ec0)=0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000003680)={'ip6_vti0\x00', &(0x7f0000003600)={'ip6_vti0\x00', r1, 0x29, 0x7f, 0x1e, 0x513, 0x30, @rand_addr=' \x01\x00', @mcast1, 0x20, 0x10, 0x4, 0x81000000}}) 13:17:46 executing program 6: clock_nanosleep(0x0, 0x1, 0x0, &(0x7f0000000600)) 13:17:46 executing program 1: prctl$PR_SET_IO_FLUSHER(0x39, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) clock_gettime(0x5, &(0x7f0000000000)) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000040)) clock_nanosleep(0x5, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x80, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x5c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xe0}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "60ba389c00a5ea1d6dd65713749c7a02"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x3f}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x49}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3d3e46fd6bbaaa3c6a156013bb6a5a36"}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x10) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) setfsgid(0xee00) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, r1, 0x12, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xffff, 0x36}}}}, [@NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x9}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x9}, @NL80211_ATTR_P2P_CTWINDOW={0x5}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0xd800}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x20}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) 13:17:46 executing program 3: clock_nanosleep(0x1, 0x1, &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f0000000040)) r0 = getpgrp(0x0) sched_rr_get_interval(r0, &(0x7f0000000080)) r1 = getpgrp(r0) sched_rr_get_interval(r1, &(0x7f00000000c0)) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000100)={[0x5ab]}, &(0x7f0000000140), &(0x7f0000000200)={r2, r3+60000000}, 0x8) r4 = getpgrp(r1) waitid(0x3, r4, &(0x7f0000000240), 0x20000000, &(0x7f00000002c0)) sched_rr_get_interval(r4, &(0x7f0000000380)) r5 = gettid() waitid(0x2, r5, &(0x7f0000000ac0), 0x2, &(0x7f0000000b40)) 13:17:46 executing program 2: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)="3c83aba66cc4e07e77a76c5edaaaeb2c142196dcb4948d1bea7cc7c56c0522d946cb5ac4231e337744cd43286b5d06c909b77ba0b1dfa735763b470323ffa9785312df86d54ab56c63f169c855da890385e79ba7c12224570381988ffe8d2b65a733b2b77981ee7865d86a0dd49f2d3d71ba26e167eb653682c8fb6d85ea2cee1876e5e45d8d6f35f9920ea42fd04de7fa1e08de2e345b5c79da16e0f38f87b93c79d554bdf32aa1cdf40cebec88412bea62d90d3915360fdeab0e5ac3a9df3b64a91136855c82d51ab174ac5cd6bd6b9d223bcd6f79ffce263b54bd9999c01459a72d54dffa20773c8d28d00c5e0ea136538365", 0xf4}, 0x1, 0x0, 0x0, 0x4000}, 0x20000001) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000180)) sysinfo(&(0x7f00000001c0)=""/142) ioctl$sock_ifreq(r1, 0x8931, &(0x7f0000000280)={'batadv_slave_0\x00', @ifru_addrs=@in={0x2, 0x0, @local}}) sysinfo(&(0x7f0000000840)=""/122) accept(r0, &(0x7f0000000ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000b40)=0x80) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000e00)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000dc0)={&(0x7f0000000b80)=@nl=@proc, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000c00)=""/219, 0xdb}, {&(0x7f0000000d00)=""/31, 0x1f}], 0x2, &(0x7f0000000d80)=""/60, 0x3c}, 0x0, 0x12100, 0x1, {0x1}}, 0x7) 13:17:46 executing program 4: ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000000)={0x5, 0x1, 0x4, 0x1, 0x6}) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0x80, 0x80) socket$inet(0x2, 0x800, 0x4) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000080)=""/4096) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000001100)={'ip6gre0\x00', &(0x7f0000001080)={'syztnl0\x00', 0x0, 0x2f, 0x72, 0x4, 0x7f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, 0x40, 0x40, 0x5, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000011c0)={'ip6gre0\x00', &(0x7f0000001140)={'syztnl2\x00', r1, 0x2f, 0xf7, 0xfe, 0x4, 0x8, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x20, 0xfe2, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000001280)={'syztnl0\x00', &(0x7f0000001200)={'ip6gre0\x00', r2, 0x4, 0x2, 0x4, 0xffffffff, 0x12, @mcast1, @loopback, 0x7800, 0x8, 0xbc, 0xd96}}) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001300), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x38, r4, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x402c890}, 0x40000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r0}, 0x21) r5 = syz_genetlink_get_family_id$team(&(0x7f0000001480), r0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000015c0)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={0x90, r5, 0x12, 0x70bd26, 0x25dfdbfc, {}, [{{0x8, 0x1, r3}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x8000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001740)={'ip_vti0\x00', &(0x7f0000001600)={'ip_vti0\x00', r2, 0x7800, 0x0, 0x7ba6, 0x3, {{0x3f, 0x4, 0x0, 0x23, 0xfc, 0x67, 0x0, 0xff, 0x4, 0x0, @private=0xa010100, @empty, {[@generic={0x0, 0xa, "40ebf02080ba2927"}, @timestamp_prespec={0x44, 0xc, 0x43, 0x3, 0x4, [{@loopback, 0x100}]}, @cipso={0x86, 0x51, 0x2, [{0x2, 0x4, "ca84"}, {0x1, 0xe, "0fb6e4ebf725212a1f4921ab"}, {0x0, 0x10, "4e91c861d05464ee62c7e2524b76"}, {0x0, 0x12, "b421989cb68da381e74d9a94bb264171"}, {0x2, 0x8, "0c43715770af"}, {0x7, 0xf, "3af348b6e9faa379f4f34958e2"}]}, @rr={0x7, 0xf, 0x65, [@empty, @dev={0xac, 0x14, 0x14, 0x10}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_prespec={0x44, 0x34, 0xbd, 0x3, 0x2, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1ff}, {@multicast2, 0xbc}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x1}, {@rand_addr=0x64010102, 0xa5f}, {@remote}, {@private=0xa010101, 0x2}]}, @timestamp_prespec={0x44, 0x14, 0x52, 0x3, 0xc, [{@local, 0xff}, {@loopback, 0x7ff}]}, @ssrr={0x89, 0xb, 0x67, [@remote, @empty]}, @cipso={0x86, 0x1c, 0x0, [{0x1, 0x8, "09576fd99f05"}, {0x5, 0xe, "3b7b886315736799754d0f1e"}]}, @noop]}}}}}) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x4cfd, &(0x7f0000001a80)={0x0, 0xe6d8, 0x2, 0x1, 0x150}) 13:17:46 executing program 0: clock_nanosleep(0x1, 0x1, &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f0000000040)) r0 = getpgrp(0x0) sched_rr_get_interval(r0, &(0x7f0000000080)) r1 = getpgrp(r0) sched_rr_get_interval(r1, &(0x7f00000000c0)) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000100)={[0x5ab]}, &(0x7f0000000140), &(0x7f0000000200)={r2, r3+60000000}, 0x8) r4 = getpgrp(r1) waitid(0x3, r4, &(0x7f0000000240), 0x20000000, &(0x7f00000002c0)) sched_rr_get_interval(r4, &(0x7f0000000380)) clock_nanosleep(0x2, 0x0, &(0x7f00000003c0)={0x77359400}, &(0x7f0000000400)) timer_create(0x0, &(0x7f0000000440)={0x0, 0x3c, 0x4, @tid=r0}, &(0x7f0000000480)) wait4(r0, &(0x7f00000004c0), 0x8, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000a40)=[{{&(0x7f0000000500), 0x80, &(0x7f0000000600)=[{&(0x7f0000000580)=""/92, 0x5c}], 0x1, &(0x7f0000000640)=""/61, 0x3d}, 0x1}, {{&(0x7f0000000680)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000700)=""/217, 0xd9}, {&(0x7f0000000800)=""/165, 0xa5}, {&(0x7f00000008c0)}, {&(0x7f0000000900)=""/247, 0xf7}], 0x4}, 0x10000}], 0x2, 0x12041, 0x0) gettid() 13:17:46 executing program 7: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)="3c83aba66cc4e07e77a76c5edaaaeb2c142196dcb4948d1bea7cc7c56c0522d946cb5ac4231e337744cd43286b5d06c909b77ba0b1dfa735763b470323ffa9785312df86d54ab56c63f169c855da890385e79ba7c12224570381988ffe8d2b65a733b2b77981ee7865d86a0dd49f2d3d71ba26e167eb653682c8fb6d85ea2cee1876e5e45d8d6f35f9920ea42fd04de7fa1e08de2e345b5c79da16e0f38f87b93c79d554bdf32aa1cdf40cebec88412bea62d90d3915360fdeab0e5ac3a9df3b64a91136855c82d51ab174ac5cd6bd6b9d223bcd6f79ffce263b54bd9999c01459a72d54dffa20773c8d28d00c5e0ea136538365", 0xf4}, 0x1, 0x0, 0x0, 0x4000}, 0x20000001) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000180)) sysinfo(&(0x7f00000001c0)=""/142) ioctl$sock_ifreq(r1, 0x8931, &(0x7f0000000280)={'batadv_slave_0\x00', @ifru_addrs=@in={0x2, 0x0, @local}}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/bus/platform', 0x16001, 0x9) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r3, 0x2, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000090) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f00000004c0)={0x14c, r3, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x81, 0x6}, {0xe9, 0x1}, {0x6, 0x5}, {0x2d, 0x6}, {0x81, 0x2}, {0x3f, 0x6}, {0x8, 0x2}, {0x1, 0x7}, {0x48, 0x5}, {0x80, 0x5}, {0xff, 0x6}, {0x2, 0x5}], "c1060bf1205e1788"}}, @NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x5, 0x6}, {0x2, 0x5}, {0x5, 0x7}, {0xff, 0x7}, {0x0, 0x5}, {0x3, 0x2}, {0xfa, 0x2}, {0x1, 0x7}, {0x0, 0x2}, {0x6f}, {}, {0x7, 0x7}, {0x81, 0x7}, {0x6, 0x7}, {0x7, 0x7}, {0x4, 0x5}, {0x1f}, {0x5, 0x4}], "98cb2e5ab9500d0c"}}, @NL80211_ATTR_QOS_MAP={0xe, 0xc7, {[{0x81, 0x6}], "57fcf5f60644f176"}}, @NL80211_ATTR_QOS_MAP={0x34, 0xc7, {[{0x1, 0x7}, {0xff, 0x3}, {0x4, 0x1}, {0x40}, {0x8, 0x6}, {0x6, 0x2}, {0x5b, 0x6}, {0x40, 0x6}, {0x5, 0x2}, {0x2, 0x3}, {0xff, 0x1}, {0x7, 0x5}, {0x81, 0x6}, {0x1}, {0xfa, 0x7}, {0xb2, 0x7}, {0x6, 0x7}, {0x2, 0x5}, {0x7f, 0x4}, {0x9}], "c94f799edde58374"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "71a679bb7dfeab0b"}}, @NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0x3f, 0x3}, {0x15, 0x1}, {0xc0, 0x4}, {0x3}, {0x1, 0x7}, {0x9, 0x7}, {0x6}, {0x4, 0x3}, {0x0, 0x3}, {0x7, 0x2}, {0xd4, 0x7}, {0x1, 0x4}, {0x4}, {0x6, 0x7}], "73aa28212d51194b"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0xff, 0x5}, {0x2, 0x1}, {0x7, 0x5}, {0x2, 0x2}, {0x1, 0x6}, {0x6, 0x5}, {0xa1}, {0x1, 0x1}], "402ab314775a4ac1"}}, @NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0x40, 0x3}, {0x20, 0x7}, {0x9, 0x1}, {0x3, 0x2}, {0x40, 0x6}, {0x2, 0x4}, {0x3a, 0x6}, {0x20, 0x6}, {0x0, 0x4}, {0x7f, 0x7}, {0x1, 0x7}, {0x8, 0x3}, {0x7, 0x4}, {0x3f, 0x1}, {0x3, 0x4}, {0x2}, {0x1f, 0x1}, {0xf8, 0x3}, {0x1, 0x5}], "2f10c13b1320f82b"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0x3, 0x7}, {0x7, 0x4}, {0x4, 0x7}, {0x2, 0x1}, {0x1f, 0x7}, {0xa5, 0x4}, {0x65, 0x4}, {0x9, 0x7}], "be02396e2de23506"}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) sysinfo(&(0x7f0000000840)=""/122) accept(r0, &(0x7f0000000ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000b40)=0x80) 13:17:46 executing program 6: clock_nanosleep(0x0, 0x1, 0x0, &(0x7f0000000600)) 13:17:46 executing program 1: prctl$PR_SET_IO_FLUSHER(0x39, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) clock_gettime(0x5, &(0x7f0000000000)) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000040)) clock_nanosleep(0x5, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x80, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x5c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xe0}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "60ba389c00a5ea1d6dd65713749c7a02"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x3f}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x49}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3d3e46fd6bbaaa3c6a156013bb6a5a36"}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x10) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) setfsgid(0xee00) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) 13:17:46 executing program 6: clock_nanosleep(0x0, 0x1, &(0x7f00000005c0), 0x0) 13:17:46 executing program 1: prctl$PR_SET_IO_FLUSHER(0x39, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) clock_gettime(0x5, &(0x7f0000000000)) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000040)) clock_nanosleep(0x5, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x80, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x5c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xe0}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "60ba389c00a5ea1d6dd65713749c7a02"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x3f}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x49}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3d3e46fd6bbaaa3c6a156013bb6a5a36"}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x10) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) setfsgid(0xee00) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) 13:17:46 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000002d40)={'syztnl1\x00', &(0x7f0000002cc0)={'syztnl1\x00', 0x0, 0x29, 0xe0, 0x9, 0x3, 0x20, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8, 0x7, 0x5, 0xad3}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000002e00)={'syztnl1\x00', &(0x7f0000002d80)={'syztnl2\x00', r1, 0x29, 0x1f, 0x8, 0x5a34e2c7, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x20, 0x7800, 0xd83, 0x1f}}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000003680)={'ip6_vti0\x00', &(0x7f0000003600)={'ip6_vti0\x00', r1, 0x29, 0x7f, 0x1e, 0x513, 0x30, @rand_addr=' \x01\x00', @mcast1, 0x20, 0x10, 0x4, 0x81000000}}) 13:17:46 executing program 4: ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000000)={0x5, 0x1, 0x4, 0x1, 0x6}) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0x80, 0x80) socket$inet(0x2, 0x800, 0x4) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000080)=""/4096) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000001100)={'ip6gre0\x00', &(0x7f0000001080)={'syztnl0\x00', 0x0, 0x2f, 0x72, 0x4, 0x7f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, 0x40, 0x40, 0x5, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000011c0)={'ip6gre0\x00', &(0x7f0000001140)={'syztnl2\x00', r1, 0x2f, 0xf7, 0xfe, 0x4, 0x8, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x20, 0xfe2, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000001280)={'syztnl0\x00', &(0x7f0000001200)={'ip6gre0\x00', r2, 0x4, 0x2, 0x4, 0xffffffff, 0x12, @mcast1, @loopback, 0x7800, 0x8, 0xbc, 0xd96}}) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001300), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x38, r4, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x402c890}, 0x40000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r0}, 0x21) r5 = syz_genetlink_get_family_id$team(&(0x7f0000001480), r0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000015c0)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={0x90, r5, 0x12, 0x70bd26, 0x25dfdbfc, {}, [{{0x8, 0x1, r3}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x8000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001740)={'ip_vti0\x00', &(0x7f0000001600)={'ip_vti0\x00', r2, 0x7800, 0x0, 0x7ba6, 0x3, {{0x3f, 0x4, 0x0, 0x23, 0xfc, 0x67, 0x0, 0xff, 0x4, 0x0, @private=0xa010100, @empty, {[@generic={0x0, 0xa, "40ebf02080ba2927"}, @timestamp_prespec={0x44, 0xc, 0x43, 0x3, 0x4, [{@loopback, 0x100}]}, @cipso={0x86, 0x51, 0x2, [{0x2, 0x4, "ca84"}, {0x1, 0xe, "0fb6e4ebf725212a1f4921ab"}, {0x0, 0x10, "4e91c861d05464ee62c7e2524b76"}, {0x0, 0x12, "b421989cb68da381e74d9a94bb264171"}, {0x2, 0x8, "0c43715770af"}, {0x7, 0xf, "3af348b6e9faa379f4f34958e2"}]}, @rr={0x7, 0xf, 0x65, [@empty, @dev={0xac, 0x14, 0x14, 0x10}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_prespec={0x44, 0x34, 0xbd, 0x3, 0x2, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1ff}, {@multicast2, 0xbc}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x1}, {@rand_addr=0x64010102, 0xa5f}, {@remote}, {@private=0xa010101, 0x2}]}, @timestamp_prespec={0x44, 0x14, 0x52, 0x3, 0xc, [{@local, 0xff}, {@loopback, 0x7ff}]}, @ssrr={0x89, 0xb, 0x67, [@remote, @empty]}, @cipso={0x86, 0x1c, 0x0, [{0x1, 0x8, "09576fd99f05"}, {0x5, 0xe, "3b7b886315736799754d0f1e"}]}, @noop]}}}}}) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x4cfd, &(0x7f0000001a80)={0x0, 0xe6d8, 0x2, 0x1, 0x150}) 13:17:46 executing program 7: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)="3c83aba66cc4e07e77a76c5edaaaeb2c142196dcb4948d1bea7cc7c56c0522d946cb5ac4231e337744cd43286b5d06c909b77ba0b1dfa735763b470323ffa9785312df86d54ab56c63f169c855da890385e79ba7c12224570381988ffe8d2b65a733b2b77981ee7865d86a0dd49f2d3d71ba26e167eb653682c8fb6d85ea2cee1876e5e45d8d6f35f9920ea42fd04de7fa1e08de2e345b5c79da16e0f38f87b93c79d554bdf32aa1cdf40cebec88412bea62d90d3915360fdeab0e5ac3a9df3b64a91136855c82d51ab174ac5cd6bd6b9d223bcd6f79ffce263b54bd9999c01459a72d54dffa20773c8d28d00c5e0ea136538365", 0xf4}, 0x1, 0x0, 0x0, 0x4000}, 0x20000001) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000180)) sysinfo(&(0x7f00000001c0)=""/142) ioctl$sock_ifreq(r1, 0x8931, &(0x7f0000000280)={'batadv_slave_0\x00', @ifru_addrs=@in={0x2, 0x0, @local}}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/bus/platform', 0x16001, 0x9) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r3, 0x2, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000090) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f00000004c0)={0x14c, r3, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x81, 0x6}, {0xe9, 0x1}, {0x6, 0x5}, {0x2d, 0x6}, {0x81, 0x2}, {0x3f, 0x6}, {0x8, 0x2}, {0x1, 0x7}, {0x48, 0x5}, {0x80, 0x5}, {0xff, 0x6}, {0x2, 0x5}], "c1060bf1205e1788"}}, @NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x5, 0x6}, {0x2, 0x5}, {0x5, 0x7}, {0xff, 0x7}, {0x0, 0x5}, {0x3, 0x2}, {0xfa, 0x2}, {0x1, 0x7}, {0x0, 0x2}, {0x6f}, {}, {0x7, 0x7}, {0x81, 0x7}, {0x6, 0x7}, {0x7, 0x7}, {0x4, 0x5}, {0x1f}, {0x5, 0x4}], "98cb2e5ab9500d0c"}}, @NL80211_ATTR_QOS_MAP={0xe, 0xc7, {[{0x81, 0x6}], "57fcf5f60644f176"}}, @NL80211_ATTR_QOS_MAP={0x34, 0xc7, {[{0x1, 0x7}, {0xff, 0x3}, {0x4, 0x1}, {0x40}, {0x8, 0x6}, {0x6, 0x2}, {0x5b, 0x6}, {0x40, 0x6}, {0x5, 0x2}, {0x2, 0x3}, {0xff, 0x1}, {0x7, 0x5}, {0x81, 0x6}, {0x1}, {0xfa, 0x7}, {0xb2, 0x7}, {0x6, 0x7}, {0x2, 0x5}, {0x7f, 0x4}, {0x9}], "c94f799edde58374"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "71a679bb7dfeab0b"}}, @NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0x3f, 0x3}, {0x15, 0x1}, {0xc0, 0x4}, {0x3}, {0x1, 0x7}, {0x9, 0x7}, {0x6}, {0x4, 0x3}, {0x0, 0x3}, {0x7, 0x2}, {0xd4, 0x7}, {0x1, 0x4}, {0x4}, {0x6, 0x7}], "73aa28212d51194b"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0xff, 0x5}, {0x2, 0x1}, {0x7, 0x5}, {0x2, 0x2}, {0x1, 0x6}, {0x6, 0x5}, {0xa1}, {0x1, 0x1}], "402ab314775a4ac1"}}, @NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0x40, 0x3}, {0x20, 0x7}, {0x9, 0x1}, {0x3, 0x2}, {0x40, 0x6}, {0x2, 0x4}, {0x3a, 0x6}, {0x20, 0x6}, {0x0, 0x4}, {0x7f, 0x7}, {0x1, 0x7}, {0x8, 0x3}, {0x7, 0x4}, {0x3f, 0x1}, {0x3, 0x4}, {0x2}, {0x1f, 0x1}, {0xf8, 0x3}, {0x1, 0x5}], "2f10c13b1320f82b"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0x3, 0x7}, {0x7, 0x4}, {0x4, 0x7}, {0x2, 0x1}, {0x1f, 0x7}, {0xa5, 0x4}, {0x65, 0x4}, {0x9, 0x7}], "be02396e2de23506"}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) sysinfo(&(0x7f0000000840)=""/122) accept(r0, &(0x7f0000000ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000b40)=0x80) 13:17:46 executing program 2: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)="3c83aba66cc4e07e77a76c5edaaaeb2c142196dcb4948d1bea7cc7c56c0522d946cb5ac4231e337744cd43286b5d06c909b77ba0b1dfa735763b470323ffa9785312df86d54ab56c63f169c855da890385e79ba7c12224570381988ffe8d2b65a733b2b77981ee7865d86a0dd49f2d3d71ba26e167eb653682c8fb6d85ea2cee1876e5e45d8d6f35f9920ea42fd04de7fa1e08de2e345b5c79da16e0f38f87b93c79d554bdf32aa1cdf40cebec88412bea62d90d3915360fdeab0e5ac3a9df3b64a91136855c82d51ab174ac5cd6bd6b9d223bcd6f79ffce263b54bd9999c01459a72d54dffa20773c8d28d00c5e0ea136538365", 0xf4}, 0x1, 0x0, 0x0, 0x4000}, 0x20000001) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000180)) sysinfo(&(0x7f00000001c0)=""/142) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/bus/platform', 0x16001, 0x9) sysinfo(&(0x7f0000000840)=""/122) accept(r0, &(0x7f0000000ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000b40)=0x80) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000e00)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000dc0)={&(0x7f0000000b80)=@nl=@proc, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000c00)=""/219, 0xdb}, {&(0x7f0000000d00)=""/31, 0x1f}], 0x2, &(0x7f0000000d80)=""/60, 0x3c}, 0x0, 0x12100, 0x1, {0x1}}, 0x7) 13:17:46 executing program 6: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)="3c83aba66cc4e07e77a76c5edaaaeb2c142196dcb4948d1bea7cc7c56c0522d946cb5ac4231e337744cd43286b5d06c909b77ba0b1dfa735763b470323ffa9785312df86d54ab56c63f169c855da890385e79ba7c12224570381988ffe8d2b65a733b2b77981ee7865d86a0dd49f2d3d71ba26e167eb653682c8fb6d85ea2cee1876e5e45d8d6f35f9920ea42fd04de7fa1e08de2e345b5c79da16e0f38f87b93c79d554bdf32aa1cdf40cebec88412bea62d90d3915360fdeab0e5ac3a9df3b64a91136855c82d51ab174ac5cd6bd6b9d223bcd6f79ffce263b54bd9999c01459a72d54dffa20773c8d28d00c5e0ea136538365", 0xf4}, 0x1, 0x0, 0x0, 0x4000}, 0x20000001) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000180)) sysinfo(&(0x7f00000001c0)=""/142) ioctl$sock_ifreq(r1, 0x8931, &(0x7f0000000280)={'batadv_slave_0\x00', @ifru_addrs=@in={0x2, 0x0, @local}}) sysinfo(&(0x7f0000000840)=""/122) accept(r0, &(0x7f0000000ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000b40)=0x80) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000e00)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000dc0)={&(0x7f0000000b80)=@nl=@proc, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000c00)=""/219, 0xdb}, {&(0x7f0000000d00)=""/31, 0x1f}], 0x2, &(0x7f0000000d80)=""/60, 0x3c}, 0x0, 0x12100, 0x1, {0x1}}, 0x7) 13:17:46 executing program 1: prctl$PR_SET_IO_FLUSHER(0x39, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) clock_gettime(0x5, &(0x7f0000000000)) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000040)) clock_nanosleep(0x5, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x80, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x5c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xe0}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "60ba389c00a5ea1d6dd65713749c7a02"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x3f}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x49}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3d3e46fd6bbaaa3c6a156013bb6a5a36"}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x10) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) setfsgid(0xee00) 13:17:47 executing program 1: prctl$PR_SET_IO_FLUSHER(0x39, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) clock_gettime(0x5, &(0x7f0000000000)) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000040)) clock_nanosleep(0x5, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x80, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x5c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xe0}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "60ba389c00a5ea1d6dd65713749c7a02"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x3f}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x49}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3d3e46fd6bbaaa3c6a156013bb6a5a36"}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x10) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) setfsgid(0xee00) 13:17:56 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000002d40)={'syztnl1\x00', &(0x7f0000002cc0)={'syztnl1\x00', 0x0, 0x29, 0xe0, 0x9, 0x3, 0x20, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8, 0x7, 0x5, 0xad3}}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000003680)={'ip6_vti0\x00', &(0x7f0000003600)={'ip6_vti0\x00', r0, 0x29, 0x7f, 0x1e, 0x513, 0x30, @rand_addr=' \x01\x00', @mcast1, 0x20, 0x10, 0x4, 0x81000000}}) 13:17:56 executing program 6: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)="3c83aba66cc4e07e77a76c5edaaaeb2c142196dcb4948d1bea7cc7c56c0522d946cb5ac4231e337744cd43286b5d06c909b77ba0b1dfa735763b470323ffa9785312df86d54ab56c63f169c855da890385e79ba7c12224570381988ffe8d2b65a733b2b77981ee7865d86a0dd49f2d3d71ba26e167eb653682c8fb6d85ea2cee1876e5e45d8d6f35f9920ea42fd04de7fa1e08de2e345b5c79da16e0f38f87b93c79d554bdf32aa1cdf40cebec88412bea62d90d3915360fdeab0e5ac3a9df3b64a91136855c82d51ab174ac5cd6bd6b9d223bcd6f79ffce263b54bd9999c01459a72d54dffa20773c8d28d00c5e0ea136538365", 0xf4}, 0x1, 0x0, 0x0, 0x4000}, 0x20000001) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000180)) sysinfo(&(0x7f00000001c0)=""/142) ioctl$sock_ifreq(r1, 0x8931, &(0x7f0000000280)={'batadv_slave_0\x00', @ifru_addrs=@in={0x2, 0x0, @local}}) sysinfo(&(0x7f0000000840)=""/122) accept(r0, &(0x7f0000000ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000b40)=0x80) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000e00)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000dc0)={&(0x7f0000000b80)=@nl=@proc, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000c00)=""/219, 0xdb}, {&(0x7f0000000d00)=""/31, 0x1f}], 0x2, &(0x7f0000000d80)=""/60, 0x3c}, 0x0, 0x12100, 0x1, {0x1}}, 0x7) 13:17:56 executing program 4: ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000000)={0x5, 0x1, 0x4, 0x1, 0x6}) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0x80, 0x80) socket$inet(0x2, 0x800, 0x4) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000080)=""/4096) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000001100)={'ip6gre0\x00', &(0x7f0000001080)={'syztnl0\x00', 0x0, 0x2f, 0x72, 0x4, 0x7f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, 0x40, 0x40, 0x5, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000011c0)={'ip6gre0\x00', &(0x7f0000001140)={'syztnl2\x00', r1, 0x2f, 0xf7, 0xfe, 0x4, 0x8, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x20, 0xfe2, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000001280)={'syztnl0\x00', &(0x7f0000001200)={'ip6gre0\x00', r2, 0x4, 0x2, 0x4, 0xffffffff, 0x12, @mcast1, @loopback, 0x7800, 0x8, 0xbc, 0xd96}}) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001300), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x38, r4, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x402c890}, 0x40000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r0}, 0x21) r5 = syz_genetlink_get_family_id$team(&(0x7f0000001480), r0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000015c0)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={0x90, r5, 0x12, 0x70bd26, 0x25dfdbfc, {}, [{{0x8, 0x1, r3}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x8000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001740)={'ip_vti0\x00', &(0x7f0000001600)={'ip_vti0\x00', r2, 0x7800, 0x0, 0x7ba6, 0x3, {{0x3f, 0x4, 0x0, 0x23, 0xfc, 0x67, 0x0, 0xff, 0x4, 0x0, @private=0xa010100, @empty, {[@generic={0x0, 0xa, "40ebf02080ba2927"}, @timestamp_prespec={0x44, 0xc, 0x43, 0x3, 0x4, [{@loopback, 0x100}]}, @cipso={0x86, 0x51, 0x2, [{0x2, 0x4, "ca84"}, {0x1, 0xe, "0fb6e4ebf725212a1f4921ab"}, {0x0, 0x10, "4e91c861d05464ee62c7e2524b76"}, {0x0, 0x12, "b421989cb68da381e74d9a94bb264171"}, {0x2, 0x8, "0c43715770af"}, {0x7, 0xf, "3af348b6e9faa379f4f34958e2"}]}, @rr={0x7, 0xf, 0x65, [@empty, @dev={0xac, 0x14, 0x14, 0x10}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_prespec={0x44, 0x34, 0xbd, 0x3, 0x2, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1ff}, {@multicast2, 0xbc}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x1}, {@rand_addr=0x64010102, 0xa5f}, {@remote}, {@private=0xa010101, 0x2}]}, @timestamp_prespec={0x44, 0x14, 0x52, 0x3, 0xc, [{@local, 0xff}, {@loopback, 0x7ff}]}, @ssrr={0x89, 0xb, 0x67, [@remote, @empty]}, @cipso={0x86, 0x1c, 0x0, [{0x1, 0x8, "09576fd99f05"}, {0x5, 0xe, "3b7b886315736799754d0f1e"}]}, @noop]}}}}}) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x4cfd, &(0x7f0000001a80)={0x0, 0xe6d8, 0x2, 0x1, 0x150}) 13:17:56 executing program 2: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)="3c83aba66cc4e07e77a76c5edaaaeb2c142196dcb4948d1bea7cc7c56c0522d946cb5ac4231e337744cd43286b5d06c909b77ba0b1dfa735763b470323ffa9785312df86d54ab56c63f169c855da890385e79ba7c12224570381988ffe8d2b65a733b2b77981ee7865d86a0dd49f2d3d71ba26e167eb653682c8fb6d85ea2cee1876e5e45d8d6f35f9920ea42fd04de7fa1e08de2e345b5c79da16e0f38f87b93c79d554bdf32aa1cdf40cebec88412bea62d90d3915360fdeab0e5ac3a9df3b64a91136855c82d51ab174ac5cd6bd6b9d223bcd6f79ffce263b54bd9999c01459a72d54dffa20773c8d28d00c5e0ea136538365", 0xf4}, 0x1, 0x0, 0x0, 0x4000}, 0x20000001) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000180)) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/bus/platform', 0x16001, 0x9) sysinfo(&(0x7f0000000840)=""/122) accept(r0, &(0x7f0000000ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000b40)=0x80) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000e00)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000dc0)={&(0x7f0000000b80)=@nl=@proc, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000c00)=""/219, 0xdb}, {&(0x7f0000000d00)=""/31, 0x1f}], 0x2, &(0x7f0000000d80)=""/60, 0x3c}, 0x0, 0x12100, 0x1, {0x1}}, 0x7) 13:17:56 executing program 1: prctl$PR_SET_IO_FLUSHER(0x39, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) clock_gettime(0x5, &(0x7f0000000000)) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000040)) clock_nanosleep(0x5, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x80, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x5c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xe0}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "60ba389c00a5ea1d6dd65713749c7a02"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x3f}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x49}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3d3e46fd6bbaaa3c6a156013bb6a5a36"}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x10) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) setfsgid(0xee00) 13:17:56 executing program 3: clock_nanosleep(0x1, 0x1, &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f0000000040)) r0 = getpgrp(0x0) sched_rr_get_interval(r0, &(0x7f0000000080)) r1 = getpgrp(r0) sched_rr_get_interval(r1, &(0x7f00000000c0)) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000100)={[0x5ab]}, &(0x7f0000000140), &(0x7f0000000200)={r2, r3+60000000}, 0x8) r4 = getpgrp(r1) waitid(0x3, r4, &(0x7f0000000240), 0x20000000, &(0x7f00000002c0)) r5 = gettid() waitid(0x2, r5, &(0x7f0000000ac0), 0x2, &(0x7f0000000b40)) 13:17:56 executing program 0: clock_nanosleep(0x1, 0x1, &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f0000000040)) r0 = getpgrp(0x0) sched_rr_get_interval(r0, &(0x7f0000000080)) r1 = getpgrp(r0) sched_rr_get_interval(r1, &(0x7f00000000c0)) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000100)={[0x5ab]}, &(0x7f0000000140), &(0x7f0000000200)={r2, r3+60000000}, 0x8) r4 = getpgrp(r1) waitid(0x3, r4, &(0x7f0000000240), 0x20000000, &(0x7f00000002c0)) sched_rr_get_interval(r4, &(0x7f0000000380)) clock_nanosleep(0x2, 0x0, &(0x7f00000003c0)={0x77359400}, &(0x7f0000000400)) timer_create(0x0, &(0x7f0000000440)={0x0, 0x3c, 0x4, @tid=r0}, &(0x7f0000000480)) wait4(r0, &(0x7f00000004c0), 0x8, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000a40)=[{{&(0x7f0000000500), 0x80, &(0x7f0000000600)=[{&(0x7f0000000580)=""/92, 0x5c}], 0x1, &(0x7f0000000640)=""/61, 0x3d}, 0x1}, {{&(0x7f0000000680)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000700)=""/217, 0xd9}, {&(0x7f0000000800)=""/165, 0xa5}, {&(0x7f00000008c0)}, {&(0x7f0000000900)=""/247, 0xf7}], 0x4}, 0x10000}], 0x2, 0x12041, 0x0) 13:17:56 executing program 7: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)="3c83aba66cc4e07e77a76c5edaaaeb2c142196dcb4948d1bea7cc7c56c0522d946cb5ac4231e337744cd43286b5d06c909b77ba0b1dfa735763b470323ffa9785312df86d54ab56c63f169c855da890385e79ba7c12224570381988ffe8d2b65a733b2b77981ee7865d86a0dd49f2d3d71ba26e167eb653682c8fb6d85ea2cee1876e5e45d8d6f35f9920ea42fd04de7fa1e08de2e345b5c79da16e0f38f87b93c79d554bdf32aa1cdf40cebec88412bea62d90d3915360fdeab0e5ac3a9df3b64a91136855c82d51ab174ac5cd6bd6b9d223bcd6f79ffce263b54bd9999c01459a72d54dffa20773c8d28d00c5e0ea136538365", 0xf4}, 0x1, 0x0, 0x0, 0x4000}, 0x20000001) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000180)) sysinfo(&(0x7f00000001c0)=""/142) ioctl$sock_ifreq(r1, 0x8931, &(0x7f0000000280)={'batadv_slave_0\x00', @ifru_addrs=@in={0x2, 0x0, @local}}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/bus/platform', 0x16001, 0x9) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r3, 0x2, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000090) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f00000004c0)={0x14c, r3, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x81, 0x6}, {0xe9, 0x1}, {0x6, 0x5}, {0x2d, 0x6}, {0x81, 0x2}, {0x3f, 0x6}, {0x8, 0x2}, {0x1, 0x7}, {0x48, 0x5}, {0x80, 0x5}, {0xff, 0x6}, {0x2, 0x5}], "c1060bf1205e1788"}}, @NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x5, 0x6}, {0x2, 0x5}, {0x5, 0x7}, {0xff, 0x7}, {0x0, 0x5}, {0x3, 0x2}, {0xfa, 0x2}, {0x1, 0x7}, {0x0, 0x2}, {0x6f}, {}, {0x7, 0x7}, {0x81, 0x7}, {0x6, 0x7}, {0x7, 0x7}, {0x4, 0x5}, {0x1f}, {0x5, 0x4}], "98cb2e5ab9500d0c"}}, @NL80211_ATTR_QOS_MAP={0xe, 0xc7, {[{0x81, 0x6}], "57fcf5f60644f176"}}, @NL80211_ATTR_QOS_MAP={0x34, 0xc7, {[{0x1, 0x7}, {0xff, 0x3}, {0x4, 0x1}, {0x40}, {0x8, 0x6}, {0x6, 0x2}, {0x5b, 0x6}, {0x40, 0x6}, {0x5, 0x2}, {0x2, 0x3}, {0xff, 0x1}, {0x7, 0x5}, {0x81, 0x6}, {0x1}, {0xfa, 0x7}, {0xb2, 0x7}, {0x6, 0x7}, {0x2, 0x5}, {0x7f, 0x4}, {0x9}], "c94f799edde58374"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "71a679bb7dfeab0b"}}, @NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0x3f, 0x3}, {0x15, 0x1}, {0xc0, 0x4}, {0x3}, {0x1, 0x7}, {0x9, 0x7}, {0x6}, {0x4, 0x3}, {0x0, 0x3}, {0x7, 0x2}, {0xd4, 0x7}, {0x1, 0x4}, {0x4}, {0x6, 0x7}], "73aa28212d51194b"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0xff, 0x5}, {0x2, 0x1}, {0x7, 0x5}, {0x2, 0x2}, {0x1, 0x6}, {0x6, 0x5}, {0xa1}, {0x1, 0x1}], "402ab314775a4ac1"}}, @NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0x40, 0x3}, {0x20, 0x7}, {0x9, 0x1}, {0x3, 0x2}, {0x40, 0x6}, {0x2, 0x4}, {0x3a, 0x6}, {0x20, 0x6}, {0x0, 0x4}, {0x7f, 0x7}, {0x1, 0x7}, {0x8, 0x3}, {0x7, 0x4}, {0x3f, 0x1}, {0x3, 0x4}, {0x2}, {0x1f, 0x1}, {0xf8, 0x3}, {0x1, 0x5}], "2f10c13b1320f82b"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0x3, 0x7}, {0x7, 0x4}, {0x4, 0x7}, {0x2, 0x1}, {0x1f, 0x7}, {0xa5, 0x4}, {0x65, 0x4}, {0x9, 0x7}], "be02396e2de23506"}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) sysinfo(&(0x7f0000000840)=""/122) 13:17:56 executing program 1: prctl$PR_SET_IO_FLUSHER(0x39, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) clock_gettime(0x5, &(0x7f0000000000)) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000040)) clock_nanosleep(0x5, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x80, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x5c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xe0}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "60ba389c00a5ea1d6dd65713749c7a02"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x3f}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x49}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3d3e46fd6bbaaa3c6a156013bb6a5a36"}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x10) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) 13:17:56 executing program 4: ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000000)={0x5, 0x1, 0x4, 0x1, 0x6}) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0x80, 0x80) socket$inet(0x2, 0x800, 0x4) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000080)=""/4096) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000001100)={'ip6gre0\x00', &(0x7f0000001080)={'syztnl0\x00', 0x0, 0x2f, 0x72, 0x4, 0x7f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, 0x40, 0x40, 0x5, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000011c0)={'ip6gre0\x00', &(0x7f0000001140)={'syztnl2\x00', r1, 0x2f, 0xf7, 0xfe, 0x4, 0x8, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x20, 0xfe2, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000001280)={'syztnl0\x00', &(0x7f0000001200)={'ip6gre0\x00', r2, 0x4, 0x2, 0x4, 0xffffffff, 0x12, @mcast1, @loopback, 0x7800, 0x8, 0xbc, 0xd96}}) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001300), 0xffffffffffffffff) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r4}}, 0x21) r5 = syz_genetlink_get_family_id$team(&(0x7f0000001480), r0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000015c0)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={0x90, r5, 0x12, 0x70bd26, 0x25dfdbfc, {}, [{{0x8, 0x1, r3}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x8000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001740)={'ip_vti0\x00', &(0x7f0000001600)={'ip_vti0\x00', r2, 0x7800, 0x0, 0x7ba6, 0x3, {{0x3f, 0x4, 0x0, 0x23, 0xfc, 0x67, 0x0, 0xff, 0x4, 0x0, @private=0xa010100, @empty, {[@generic={0x0, 0xa, "40ebf02080ba2927"}, @timestamp_prespec={0x44, 0xc, 0x43, 0x3, 0x4, [{@loopback, 0x100}]}, @cipso={0x86, 0x51, 0x2, [{0x2, 0x4, "ca84"}, {0x1, 0xe, "0fb6e4ebf725212a1f4921ab"}, {0x0, 0x10, "4e91c861d05464ee62c7e2524b76"}, {0x0, 0x12, "b421989cb68da381e74d9a94bb264171"}, {0x2, 0x8, "0c43715770af"}, {0x7, 0xf, "3af348b6e9faa379f4f34958e2"}]}, @rr={0x7, 0xf, 0x65, [@empty, @dev={0xac, 0x14, 0x14, 0x10}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_prespec={0x44, 0x34, 0xbd, 0x3, 0x2, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1ff}, {@multicast2, 0xbc}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x1}, {@rand_addr=0x64010102, 0xa5f}, {@remote}, {@private=0xa010101, 0x2}]}, @timestamp_prespec={0x44, 0x14, 0x52, 0x3, 0xc, [{@local, 0xff}, {@loopback, 0x7ff}]}, @ssrr={0x89, 0xb, 0x67, [@remote, @empty]}, @cipso={0x86, 0x1c, 0x0, [{0x1, 0x8, "09576fd99f05"}, {0x5, 0xe, "3b7b886315736799754d0f1e"}]}, @noop]}}}}}) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x4cfd, &(0x7f0000001a80)={0x0, 0xe6d8, 0x2, 0x1, 0x150}) 13:17:56 executing program 1: prctl$PR_SET_IO_FLUSHER(0x39, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) clock_gettime(0x5, &(0x7f0000000000)) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000040)) clock_nanosleep(0x5, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x80, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x5c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xe0}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "60ba389c00a5ea1d6dd65713749c7a02"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x3f}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x49}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3d3e46fd6bbaaa3c6a156013bb6a5a36"}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x10) 13:17:56 executing program 2: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)="3c83aba66cc4e07e77a76c5edaaaeb2c142196dcb4948d1bea7cc7c56c0522d946cb5ac4231e337744cd43286b5d06c909b77ba0b1dfa735763b470323ffa9785312df86d54ab56c63f169c855da890385e79ba7c12224570381988ffe8d2b65a733b2b77981ee7865d86a0dd49f2d3d71ba26e167eb653682c8fb6d85ea2cee1876e5e45d8d6f35f9920ea42fd04de7fa1e08de2e345b5c79da16e0f38f87b93c79d554bdf32aa1cdf40cebec88412bea62d90d3915360fdeab0e5ac3a9df3b64a91136855c82d51ab174ac5cd6bd6b9d223bcd6f79ffce263b54bd9999c01459a72d54dffa20773c8d28d00c5e0ea136538365", 0xf4}, 0x1, 0x0, 0x0, 0x4000}, 0x20000001) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000180)) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/bus/platform', 0x16001, 0x9) sysinfo(&(0x7f0000000840)=""/122) accept(r0, &(0x7f0000000ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000b40)=0x80) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000e00)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000dc0)={&(0x7f0000000b80)=@nl=@proc, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000c00)=""/219, 0xdb}, {&(0x7f0000000d00)=""/31, 0x1f}], 0x2, &(0x7f0000000d80)=""/60, 0x3c}, 0x0, 0x12100, 0x1, {0x1}}, 0x7) 13:17:56 executing program 1: prctl$PR_SET_IO_FLUSHER(0x39, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) clock_gettime(0x5, &(0x7f0000000000)) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000040)) clock_nanosleep(0x5, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan0\x00'}) 13:17:56 executing program 6: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)="3c83aba66cc4e07e77a76c5edaaaeb2c142196dcb4948d1bea7cc7c56c0522d946cb5ac4231e337744cd43286b5d06c909b77ba0b1dfa735763b470323ffa9785312df86d54ab56c63f169c855da890385e79ba7c12224570381988ffe8d2b65a733b2b77981ee7865d86a0dd49f2d3d71ba26e167eb653682c8fb6d85ea2cee1876e5e45d8d6f35f9920ea42fd04de7fa1e08de2e345b5c79da16e0f38f87b93c79d554bdf32aa1cdf40cebec88412bea62d90d3915360fdeab0e5ac3a9df3b64a91136855c82d51ab174ac5cd6bd6b9d223bcd6f79ffce263b54bd9999c01459a72d54dffa20773c8d28d00c5e0ea136538365", 0xf4}, 0x1, 0x0, 0x0, 0x4000}, 0x20000001) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000180)) sysinfo(&(0x7f00000001c0)=""/142) ioctl$sock_ifreq(r1, 0x8931, &(0x7f0000000280)={'batadv_slave_0\x00', @ifru_addrs=@in={0x2, 0x0, @local}}) sysinfo(&(0x7f0000000840)=""/122) accept(r0, &(0x7f0000000ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000b40)=0x80) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000e00)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000dc0)={&(0x7f0000000b80)=@nl=@proc, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000c00)=""/219, 0xdb}, {&(0x7f0000000d00)=""/31, 0x1f}], 0x2, &(0x7f0000000d80)=""/60, 0x3c}, 0x0, 0x12100, 0x1, {0x1}}, 0x7) 13:17:56 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000003680)={'ip6_vti0\x00', &(0x7f0000003600)={'ip6_vti0\x00', 0x0, 0x29, 0x7f, 0x1e, 0x513, 0x30, @rand_addr=' \x01\x00', @mcast1, 0x20, 0x10, 0x4, 0x81000000}}) 13:17:56 executing program 7: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)="3c83aba66cc4e07e77a76c5edaaaeb2c142196dcb4948d1bea7cc7c56c0522d946cb5ac4231e337744cd43286b5d06c909b77ba0b1dfa735763b470323ffa9785312df86d54ab56c63f169c855da890385e79ba7c12224570381988ffe8d2b65a733b2b77981ee7865d86a0dd49f2d3d71ba26e167eb653682c8fb6d85ea2cee1876e5e45d8d6f35f9920ea42fd04de7fa1e08de2e345b5c79da16e0f38f87b93c79d554bdf32aa1cdf40cebec88412bea62d90d3915360fdeab0e5ac3a9df3b64a91136855c82d51ab174ac5cd6bd6b9d223bcd6f79ffce263b54bd9999c01459a72d54dffa20773c8d28d00c5e0ea136538365", 0xf4}, 0x1, 0x0, 0x0, 0x4000}, 0x20000001) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000180)) sysinfo(&(0x7f00000001c0)=""/142) ioctl$sock_ifreq(r1, 0x8931, &(0x7f0000000280)={'batadv_slave_0\x00', @ifru_addrs=@in={0x2, 0x0, @local}}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/bus/platform', 0x16001, 0x9) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r3, 0x2, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000090) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f00000004c0)={0x14c, r3, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x81, 0x6}, {0xe9, 0x1}, {0x6, 0x5}, {0x2d, 0x6}, {0x81, 0x2}, {0x3f, 0x6}, {0x8, 0x2}, {0x1, 0x7}, {0x48, 0x5}, {0x80, 0x5}, {0xff, 0x6}, {0x2, 0x5}], "c1060bf1205e1788"}}, @NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x5, 0x6}, {0x2, 0x5}, {0x5, 0x7}, {0xff, 0x7}, {0x0, 0x5}, {0x3, 0x2}, {0xfa, 0x2}, {0x1, 0x7}, {0x0, 0x2}, {0x6f}, {}, {0x7, 0x7}, {0x81, 0x7}, {0x6, 0x7}, {0x7, 0x7}, {0x4, 0x5}, {0x1f}, {0x5, 0x4}], "98cb2e5ab9500d0c"}}, @NL80211_ATTR_QOS_MAP={0xe, 0xc7, {[{0x81, 0x6}], "57fcf5f60644f176"}}, @NL80211_ATTR_QOS_MAP={0x34, 0xc7, {[{0x1, 0x7}, {0xff, 0x3}, {0x4, 0x1}, {0x40}, {0x8, 0x6}, {0x6, 0x2}, {0x5b, 0x6}, {0x40, 0x6}, {0x5, 0x2}, {0x2, 0x3}, {0xff, 0x1}, {0x7, 0x5}, {0x81, 0x6}, {0x1}, {0xfa, 0x7}, {0xb2, 0x7}, {0x6, 0x7}, {0x2, 0x5}, {0x7f, 0x4}, {0x9}], "c94f799edde58374"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "71a679bb7dfeab0b"}}, @NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0x3f, 0x3}, {0x15, 0x1}, {0xc0, 0x4}, {0x3}, {0x1, 0x7}, {0x9, 0x7}, {0x6}, {0x4, 0x3}, {0x0, 0x3}, {0x7, 0x2}, {0xd4, 0x7}, {0x1, 0x4}, {0x4}, {0x6, 0x7}], "73aa28212d51194b"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0xff, 0x5}, {0x2, 0x1}, {0x7, 0x5}, {0x2, 0x2}, {0x1, 0x6}, {0x6, 0x5}, {0xa1}, {0x1, 0x1}], "402ab314775a4ac1"}}, @NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0x40, 0x3}, {0x20, 0x7}, {0x9, 0x1}, {0x3, 0x2}, {0x40, 0x6}, {0x2, 0x4}, {0x3a, 0x6}, {0x20, 0x6}, {0x0, 0x4}, {0x7f, 0x7}, {0x1, 0x7}, {0x8, 0x3}, {0x7, 0x4}, {0x3f, 0x1}, {0x3, 0x4}, {0x2}, {0x1f, 0x1}, {0xf8, 0x3}, {0x1, 0x5}], "2f10c13b1320f82b"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0x3, 0x7}, {0x7, 0x4}, {0x4, 0x7}, {0x2, 0x1}, {0x1f, 0x7}, {0xa5, 0x4}, {0x65, 0x4}, {0x9, 0x7}], "be02396e2de23506"}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) 13:17:57 executing program 1: prctl$PR_SET_IO_FLUSHER(0x39, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) clock_gettime(0x5, &(0x7f0000000000)) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000040)) clock_nanosleep(0x5, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan0\x00'}) 13:17:57 executing program 4: ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000000)={0x5, 0x1, 0x4, 0x1, 0x6}) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0x80, 0x80) socket$inet(0x2, 0x800, 0x4) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000080)=""/4096) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000001100)={'ip6gre0\x00', &(0x7f0000001080)={'syztnl0\x00', 0x0, 0x2f, 0x72, 0x4, 0x7f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, 0x40, 0x40, 0x5, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000011c0)={'ip6gre0\x00', &(0x7f0000001140)={'syztnl2\x00', r1, 0x2f, 0xf7, 0xfe, 0x4, 0x8, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x20, 0xfe2, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000001280)={'syztnl0\x00', &(0x7f0000001200)={'ip6gre0\x00', r2, 0x4, 0x2, 0x4, 0xffffffff, 0x12, @mcast1, @loopback, 0x7800, 0x8, 0xbc, 0xd96}}) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001300), 0xffffffffffffffff) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r4}}, 0x21) r5 = syz_genetlink_get_family_id$team(&(0x7f0000001480), r0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000015c0)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={0x90, r5, 0x12, 0x70bd26, 0x25dfdbfc, {}, [{{0x8, 0x1, r3}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x8000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001740)={'ip_vti0\x00', &(0x7f0000001600)={'ip_vti0\x00', r2, 0x7800, 0x0, 0x7ba6, 0x3, {{0x3f, 0x4, 0x0, 0x23, 0xfc, 0x67, 0x0, 0xff, 0x4, 0x0, @private=0xa010100, @empty, {[@generic={0x0, 0xa, "40ebf02080ba2927"}, @timestamp_prespec={0x44, 0xc, 0x43, 0x3, 0x4, [{@loopback, 0x100}]}, @cipso={0x86, 0x51, 0x2, [{0x2, 0x4, "ca84"}, {0x1, 0xe, "0fb6e4ebf725212a1f4921ab"}, {0x0, 0x10, "4e91c861d05464ee62c7e2524b76"}, {0x0, 0x12, "b421989cb68da381e74d9a94bb264171"}, {0x2, 0x8, "0c43715770af"}, {0x7, 0xf, "3af348b6e9faa379f4f34958e2"}]}, @rr={0x7, 0xf, 0x65, [@empty, @dev={0xac, 0x14, 0x14, 0x10}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_prespec={0x44, 0x34, 0xbd, 0x3, 0x2, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1ff}, {@multicast2, 0xbc}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x1}, {@rand_addr=0x64010102, 0xa5f}, {@remote}, {@private=0xa010101, 0x2}]}, @timestamp_prespec={0x44, 0x14, 0x52, 0x3, 0xc, [{@local, 0xff}, {@loopback, 0x7ff}]}, @ssrr={0x89, 0xb, 0x67, [@remote, @empty]}, @cipso={0x86, 0x1c, 0x0, [{0x1, 0x8, "09576fd99f05"}, {0x5, 0xe, "3b7b886315736799754d0f1e"}]}, @noop]}}}}}) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x4cfd, &(0x7f0000001a80)={0x0, 0xe6d8, 0x2, 0x1, 0x150}) 13:17:57 executing program 1: prctl$PR_SET_IO_FLUSHER(0x39, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) clock_gettime(0x5, &(0x7f0000000000)) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000040)) clock_nanosleep(0x5, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) 13:18:05 executing program 1: prctl$PR_SET_IO_FLUSHER(0x39, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) clock_gettime(0x5, &(0x7f0000000000)) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000040)) 13:18:05 executing program 4: ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000000)={0x5, 0x1, 0x4, 0x1, 0x6}) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0x80, 0x80) socket$inet(0x2, 0x800, 0x4) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000080)=""/4096) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000001100)={'ip6gre0\x00', &(0x7f0000001080)={'syztnl0\x00', 0x0, 0x2f, 0x72, 0x4, 0x7f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, 0x40, 0x40, 0x5, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000011c0)={'ip6gre0\x00', &(0x7f0000001140)={'syztnl2\x00', r1, 0x2f, 0xf7, 0xfe, 0x4, 0x8, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x20, 0xfe2, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000001280)={'syztnl0\x00', &(0x7f0000001200)={'ip6gre0\x00', r2, 0x4, 0x2, 0x4, 0xffffffff, 0x12, @mcast1, @loopback, 0x7800, 0x8, 0xbc, 0xd96}}) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001300), 0xffffffffffffffff) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r4}}, 0x21) r5 = syz_genetlink_get_family_id$team(&(0x7f0000001480), r0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000015c0)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={0x90, r5, 0x12, 0x70bd26, 0x25dfdbfc, {}, [{{0x8, 0x1, r3}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x8000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001740)={'ip_vti0\x00', &(0x7f0000001600)={'ip_vti0\x00', r2, 0x7800, 0x0, 0x7ba6, 0x3, {{0x3f, 0x4, 0x0, 0x23, 0xfc, 0x67, 0x0, 0xff, 0x4, 0x0, @private=0xa010100, @empty, {[@generic={0x0, 0xa, "40ebf02080ba2927"}, @timestamp_prespec={0x44, 0xc, 0x43, 0x3, 0x4, [{@loopback, 0x100}]}, @cipso={0x86, 0x51, 0x2, [{0x2, 0x4, "ca84"}, {0x1, 0xe, "0fb6e4ebf725212a1f4921ab"}, {0x0, 0x10, "4e91c861d05464ee62c7e2524b76"}, {0x0, 0x12, "b421989cb68da381e74d9a94bb264171"}, {0x2, 0x8, "0c43715770af"}, {0x7, 0xf, "3af348b6e9faa379f4f34958e2"}]}, @rr={0x7, 0xf, 0x65, [@empty, @dev={0xac, 0x14, 0x14, 0x10}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_prespec={0x44, 0x34, 0xbd, 0x3, 0x2, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1ff}, {@multicast2, 0xbc}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x1}, {@rand_addr=0x64010102, 0xa5f}, {@remote}, {@private=0xa010101, 0x2}]}, @timestamp_prespec={0x44, 0x14, 0x52, 0x3, 0xc, [{@local, 0xff}, {@loopback, 0x7ff}]}, @ssrr={0x89, 0xb, 0x67, [@remote, @empty]}, @cipso={0x86, 0x1c, 0x0, [{0x1, 0x8, "09576fd99f05"}, {0x5, 0xe, "3b7b886315736799754d0f1e"}]}, @noop]}}}}}) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x4cfd, &(0x7f0000001a80)={0x0, 0xe6d8, 0x2, 0x1, 0x150}) 13:18:05 executing program 2: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)="3c83aba66cc4e07e77a76c5edaaaeb2c142196dcb4948d1bea7cc7c56c0522d946cb5ac4231e337744cd43286b5d06c909b77ba0b1dfa735763b470323ffa9785312df86d54ab56c63f169c855da890385e79ba7c12224570381988ffe8d2b65a733b2b77981ee7865d86a0dd49f2d3d71ba26e167eb653682c8fb6d85ea2cee1876e5e45d8d6f35f9920ea42fd04de7fa1e08de2e345b5c79da16e0f38f87b93c79d554bdf32aa1cdf40cebec88412bea62d90d3915360fdeab0e5ac3a9df3b64a91136855c82d51ab174ac5cd6bd6b9d223bcd6f79ffce263b54bd9999c01459a72d54dffa20773c8d28d00c5e0ea136538365", 0xf4}, 0x1, 0x0, 0x0, 0x4000}, 0x20000001) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/bus/platform', 0x16001, 0x9) sysinfo(&(0x7f0000000840)=""/122) accept(r0, &(0x7f0000000ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000b40)=0x80) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000e00)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000dc0)={&(0x7f0000000b80)=@nl=@proc, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000c00)=""/219, 0xdb}, {&(0x7f0000000d00)=""/31, 0x1f}], 0x2, &(0x7f0000000d80)=""/60, 0x3c}, 0x0, 0x12100, 0x1, {0x1}}, 0x7) 13:18:05 executing program 6: prctl$PR_SET_IO_FLUSHER(0x39, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) clock_gettime(0x5, &(0x7f0000000000)) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000040)) clock_nanosleep(0x5, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan0\x00'}) 13:18:05 executing program 0: clock_nanosleep(0x1, 0x1, &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f0000000040)) r0 = getpgrp(0x0) sched_rr_get_interval(r0, &(0x7f0000000080)) r1 = getpgrp(r0) sched_rr_get_interval(r1, &(0x7f00000000c0)) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000100)={[0x5ab]}, &(0x7f0000000140), &(0x7f0000000200)={r2, r3+60000000}, 0x8) r4 = getpgrp(r1) waitid(0x3, r4, &(0x7f0000000240), 0x20000000, &(0x7f00000002c0)) sched_rr_get_interval(r4, &(0x7f0000000380)) clock_nanosleep(0x2, 0x0, &(0x7f00000003c0)={0x77359400}, &(0x7f0000000400)) timer_create(0x0, &(0x7f0000000440)={0x0, 0x3c, 0x4, @tid=r0}, &(0x7f0000000480)) wait4(r0, &(0x7f00000004c0), 0x8, 0x0) 13:18:05 executing program 3: clock_nanosleep(0x1, 0x1, &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f0000000040)) r0 = getpgrp(0x0) sched_rr_get_interval(r0, &(0x7f0000000080)) r1 = getpgrp(r0) sched_rr_get_interval(r1, &(0x7f00000000c0)) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000100)={[0x5ab]}, &(0x7f0000000140), &(0x7f0000000200)={r2, r3+60000000}, 0x8) getpgrp(r1) r4 = gettid() waitid(0x2, r4, &(0x7f0000000ac0), 0x2, &(0x7f0000000b40)) 13:18:05 executing program 7: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)="3c83aba66cc4e07e77a76c5edaaaeb2c142196dcb4948d1bea7cc7c56c0522d946cb5ac4231e337744cd43286b5d06c909b77ba0b1dfa735763b470323ffa9785312df86d54ab56c63f169c855da890385e79ba7c12224570381988ffe8d2b65a733b2b77981ee7865d86a0dd49f2d3d71ba26e167eb653682c8fb6d85ea2cee1876e5e45d8d6f35f9920ea42fd04de7fa1e08de2e345b5c79da16e0f38f87b93c79d554bdf32aa1cdf40cebec88412bea62d90d3915360fdeab0e5ac3a9df3b64a91136855c82d51ab174ac5cd6bd6b9d223bcd6f79ffce263b54bd9999c01459a72d54dffa20773c8d28d00c5e0ea136538365", 0xf4}, 0x1, 0x0, 0x0, 0x4000}, 0x20000001) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000180)) sysinfo(&(0x7f00000001c0)=""/142) ioctl$sock_ifreq(r1, 0x8931, &(0x7f0000000280)={'batadv_slave_0\x00', @ifru_addrs=@in={0x2, 0x0, @local}}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/bus/platform', 0x16001, 0x9) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r3, 0x2, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000090) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f00000004c0)={0x14c, r3, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x81, 0x6}, {0xe9, 0x1}, {0x6, 0x5}, {0x2d, 0x6}, {0x81, 0x2}, {0x3f, 0x6}, {0x8, 0x2}, {0x1, 0x7}, {0x48, 0x5}, {0x80, 0x5}, {0xff, 0x6}, {0x2, 0x5}], "c1060bf1205e1788"}}, @NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x5, 0x6}, {0x2, 0x5}, {0x5, 0x7}, {0xff, 0x7}, {0x0, 0x5}, {0x3, 0x2}, {0xfa, 0x2}, {0x1, 0x7}, {0x0, 0x2}, {0x6f}, {}, {0x7, 0x7}, {0x81, 0x7}, {0x6, 0x7}, {0x7, 0x7}, {0x4, 0x5}, {0x1f}, {0x5, 0x4}], "98cb2e5ab9500d0c"}}, @NL80211_ATTR_QOS_MAP={0xe, 0xc7, {[{0x81, 0x6}], "57fcf5f60644f176"}}, @NL80211_ATTR_QOS_MAP={0x34, 0xc7, {[{0x1, 0x7}, {0xff, 0x3}, {0x4, 0x1}, {0x40}, {0x8, 0x6}, {0x6, 0x2}, {0x5b, 0x6}, {0x40, 0x6}, {0x5, 0x2}, {0x2, 0x3}, {0xff, 0x1}, {0x7, 0x5}, {0x81, 0x6}, {0x1}, {0xfa, 0x7}, {0xb2, 0x7}, {0x6, 0x7}, {0x2, 0x5}, {0x7f, 0x4}, {0x9}], "c94f799edde58374"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "71a679bb7dfeab0b"}}, @NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0x3f, 0x3}, {0x15, 0x1}, {0xc0, 0x4}, {0x3}, {0x1, 0x7}, {0x9, 0x7}, {0x6}, {0x4, 0x3}, {0x0, 0x3}, {0x7, 0x2}, {0xd4, 0x7}, {0x1, 0x4}, {0x4}, {0x6, 0x7}], "73aa28212d51194b"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0xff, 0x5}, {0x2, 0x1}, {0x7, 0x5}, {0x2, 0x2}, {0x1, 0x6}, {0x6, 0x5}, {0xa1}, {0x1, 0x1}], "402ab314775a4ac1"}}, @NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0x40, 0x3}, {0x20, 0x7}, {0x9, 0x1}, {0x3, 0x2}, {0x40, 0x6}, {0x2, 0x4}, {0x3a, 0x6}, {0x20, 0x6}, {0x0, 0x4}, {0x7f, 0x7}, {0x1, 0x7}, {0x8, 0x3}, {0x7, 0x4}, {0x3f, 0x1}, {0x3, 0x4}, {0x2}, {0x1f, 0x1}, {0xf8, 0x3}, {0x1, 0x5}], "2f10c13b1320f82b"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0x3, 0x7}, {0x7, 0x4}, {0x4, 0x7}, {0x2, 0x1}, {0x1f, 0x7}, {0xa5, 0x4}, {0x65, 0x4}, {0x9, 0x7}], "be02396e2de23506"}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) 13:18:05 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000003680)={'ip6_vti0\x00', &(0x7f0000003600)={'ip6_vti0\x00', 0x0, 0x29, 0x7f, 0x1e, 0x513, 0x30, @rand_addr=' \x01\x00', @mcast1, 0x20, 0x10, 0x4, 0x81000000}}) 13:18:05 executing program 1: prctl$PR_SET_IO_FLUSHER(0x39, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) clock_gettime(0x5, &(0x7f0000000000)) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000040)) 13:18:05 executing program 6: prctl$PR_SET_IO_FLUSHER(0x39, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) clock_gettime(0x5, &(0x7f0000000000)) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000040)) clock_nanosleep(0x5, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan0\x00'}) 13:18:13 executing program 1: prctl$PR_SET_IO_FLUSHER(0x39, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) clock_gettime(0x5, &(0x7f0000000000)) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) 13:18:13 executing program 2: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)="3c83aba66cc4e07e77a76c5edaaaeb2c142196dcb4948d1bea7cc7c56c0522d946cb5ac4231e337744cd43286b5d06c909b77ba0b1dfa735763b470323ffa9785312df86d54ab56c63f169c855da890385e79ba7c12224570381988ffe8d2b65a733b2b77981ee7865d86a0dd49f2d3d71ba26e167eb653682c8fb6d85ea2cee1876e5e45d8d6f35f9920ea42fd04de7fa1e08de2e345b5c79da16e0f38f87b93c79d554bdf32aa1cdf40cebec88412bea62d90d3915360fdeab0e5ac3a9df3b64a91136855c82d51ab174ac5cd6bd6b9d223bcd6f79ffce263b54bd9999c01459a72d54dffa20773c8d28d00c5e0ea136538365", 0xf4}, 0x1, 0x0, 0x0, 0x4000}, 0x20000001) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/bus/platform', 0x16001, 0x9) sysinfo(&(0x7f0000000840)=""/122) accept(r0, &(0x7f0000000ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000b40)=0x80) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000e00)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000dc0)={&(0x7f0000000b80)=@nl=@proc, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000c00)=""/219, 0xdb}, {&(0x7f0000000d00)=""/31, 0x1f}], 0x2, &(0x7f0000000d80)=""/60, 0x3c}, 0x0, 0x12100, 0x1, {0x1}}, 0x7) 13:18:13 executing program 3: clock_nanosleep(0x1, 0x1, &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f0000000040)) r0 = getpgrp(0x0) sched_rr_get_interval(r0, &(0x7f0000000080)) r1 = getpgrp(r0) sched_rr_get_interval(r1, &(0x7f00000000c0)) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000100)={[0x5ab]}, &(0x7f0000000140), &(0x7f0000000200)={r2, r3+60000000}, 0x8) r4 = gettid() waitid(0x2, r4, &(0x7f0000000ac0), 0x2, &(0x7f0000000b40)) 13:18:13 executing program 0: clock_nanosleep(0x1, 0x1, &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f0000000040)) r0 = getpgrp(0x0) sched_rr_get_interval(r0, &(0x7f0000000080)) r1 = getpgrp(r0) sched_rr_get_interval(r1, &(0x7f00000000c0)) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000100)={[0x5ab]}, &(0x7f0000000140), &(0x7f0000000200)={r2, r3+60000000}, 0x8) r4 = getpgrp(r1) waitid(0x3, r4, &(0x7f0000000240), 0x20000000, &(0x7f00000002c0)) sched_rr_get_interval(r4, &(0x7f0000000380)) clock_nanosleep(0x2, 0x0, &(0x7f00000003c0)={0x77359400}, &(0x7f0000000400)) timer_create(0x0, &(0x7f0000000440)={0x0, 0x3c, 0x4, @tid=r0}, &(0x7f0000000480)) 13:18:13 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000003680)={'ip6_vti0\x00', &(0x7f0000003600)={'ip6_vti0\x00', 0x0, 0x29, 0x7f, 0x1e, 0x513, 0x30, @rand_addr=' \x01\x00', @mcast1, 0x20, 0x10, 0x4, 0x81000000}}) 13:18:13 executing program 7: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)="3c83aba66cc4e07e77a76c5edaaaeb2c142196dcb4948d1bea7cc7c56c0522d946cb5ac4231e337744cd43286b5d06c909b77ba0b1dfa735763b470323ffa9785312df86d54ab56c63f169c855da890385e79ba7c12224570381988ffe8d2b65a733b2b77981ee7865d86a0dd49f2d3d71ba26e167eb653682c8fb6d85ea2cee1876e5e45d8d6f35f9920ea42fd04de7fa1e08de2e345b5c79da16e0f38f87b93c79d554bdf32aa1cdf40cebec88412bea62d90d3915360fdeab0e5ac3a9df3b64a91136855c82d51ab174ac5cd6bd6b9d223bcd6f79ffce263b54bd9999c01459a72d54dffa20773c8d28d00c5e0ea136538365", 0xf4}, 0x1, 0x0, 0x0, 0x4000}, 0x20000001) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000180)) sysinfo(&(0x7f00000001c0)=""/142) ioctl$sock_ifreq(r1, 0x8931, &(0x7f0000000280)={'batadv_slave_0\x00', @ifru_addrs=@in={0x2, 0x0, @local}}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/bus/platform', 0x16001, 0x9) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r3, 0x2, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000090) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f00000004c0)={0x14c, r3, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x81, 0x6}, {0xe9, 0x1}, {0x6, 0x5}, {0x2d, 0x6}, {0x81, 0x2}, {0x3f, 0x6}, {0x8, 0x2}, {0x1, 0x7}, {0x48, 0x5}, {0x80, 0x5}, {0xff, 0x6}, {0x2, 0x5}], "c1060bf1205e1788"}}, @NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x5, 0x6}, {0x2, 0x5}, {0x5, 0x7}, {0xff, 0x7}, {0x0, 0x5}, {0x3, 0x2}, {0xfa, 0x2}, {0x1, 0x7}, {0x0, 0x2}, {0x6f}, {}, {0x7, 0x7}, {0x81, 0x7}, {0x6, 0x7}, {0x7, 0x7}, {0x4, 0x5}, {0x1f}, {0x5, 0x4}], "98cb2e5ab9500d0c"}}, @NL80211_ATTR_QOS_MAP={0xe, 0xc7, {[{0x81, 0x6}], "57fcf5f60644f176"}}, @NL80211_ATTR_QOS_MAP={0x34, 0xc7, {[{0x1, 0x7}, {0xff, 0x3}, {0x4, 0x1}, {0x40}, {0x8, 0x6}, {0x6, 0x2}, {0x5b, 0x6}, {0x40, 0x6}, {0x5, 0x2}, {0x2, 0x3}, {0xff, 0x1}, {0x7, 0x5}, {0x81, 0x6}, {0x1}, {0xfa, 0x7}, {0xb2, 0x7}, {0x6, 0x7}, {0x2, 0x5}, {0x7f, 0x4}, {0x9}], "c94f799edde58374"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "71a679bb7dfeab0b"}}, @NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0x3f, 0x3}, {0x15, 0x1}, {0xc0, 0x4}, {0x3}, {0x1, 0x7}, {0x9, 0x7}, {0x6}, {0x4, 0x3}, {0x0, 0x3}, {0x7, 0x2}, {0xd4, 0x7}, {0x1, 0x4}, {0x4}, {0x6, 0x7}], "73aa28212d51194b"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0xff, 0x5}, {0x2, 0x1}, {0x7, 0x5}, {0x2, 0x2}, {0x1, 0x6}, {0x6, 0x5}, {0xa1}, {0x1, 0x1}], "402ab314775a4ac1"}}, @NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0x40, 0x3}, {0x20, 0x7}, {0x9, 0x1}, {0x3, 0x2}, {0x40, 0x6}, {0x2, 0x4}, {0x3a, 0x6}, {0x20, 0x6}, {0x0, 0x4}, {0x7f, 0x7}, {0x1, 0x7}, {0x8, 0x3}, {0x7, 0x4}, {0x3f, 0x1}, {0x3, 0x4}, {0x2}, {0x1f, 0x1}, {0xf8, 0x3}, {0x1, 0x5}], "2f10c13b1320f82b"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0x3, 0x7}, {0x7, 0x4}, {0x4, 0x7}, {0x2, 0x1}, {0x1f, 0x7}, {0xa5, 0x4}, {0x65, 0x4}, {0x9, 0x7}], "be02396e2de23506"}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) 13:18:13 executing program 6: prctl$PR_SET_IO_FLUSHER(0x39, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) clock_gettime(0x5, &(0x7f0000000000)) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000040)) clock_nanosleep(0x5, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan0\x00'}) 13:18:13 executing program 4: ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000000)={0x5, 0x1, 0x4, 0x1, 0x6}) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0x80, 0x80) socket$inet(0x2, 0x800, 0x4) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000080)=""/4096) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000001100)={'ip6gre0\x00', &(0x7f0000001080)={'syztnl0\x00', 0x0, 0x2f, 0x72, 0x4, 0x7f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, 0x40, 0x40, 0x5, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000011c0)={'ip6gre0\x00', &(0x7f0000001140)={'syztnl2\x00', r1, 0x2f, 0xf7, 0xfe, 0x4, 0x8, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x20, 0xfe2, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000001280)={'syztnl0\x00', &(0x7f0000001200)={'ip6gre0\x00', r2, 0x4, 0x2, 0x4, 0xffffffff, 0x12, @mcast1, @loopback, 0x7800, 0x8, 0xbc, 0xd96}}) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x38, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x402c890}, 0x40000) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r4}}, 0x21) r5 = syz_genetlink_get_family_id$team(&(0x7f0000001480), r0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000015c0)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={0x90, r5, 0x12, 0x70bd26, 0x25dfdbfc, {}, [{{0x8, 0x1, r3}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x8000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001740)={'ip_vti0\x00', &(0x7f0000001600)={'ip_vti0\x00', r2, 0x7800, 0x0, 0x7ba6, 0x3, {{0x3f, 0x4, 0x0, 0x23, 0xfc, 0x67, 0x0, 0xff, 0x4, 0x0, @private=0xa010100, @empty, {[@generic={0x0, 0xa, "40ebf02080ba2927"}, @timestamp_prespec={0x44, 0xc, 0x43, 0x3, 0x4, [{@loopback, 0x100}]}, @cipso={0x86, 0x51, 0x2, [{0x2, 0x4, "ca84"}, {0x1, 0xe, "0fb6e4ebf725212a1f4921ab"}, {0x0, 0x10, "4e91c861d05464ee62c7e2524b76"}, {0x0, 0x12, "b421989cb68da381e74d9a94bb264171"}, {0x2, 0x8, "0c43715770af"}, {0x7, 0xf, "3af348b6e9faa379f4f34958e2"}]}, @rr={0x7, 0xf, 0x65, [@empty, @dev={0xac, 0x14, 0x14, 0x10}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_prespec={0x44, 0x34, 0xbd, 0x3, 0x2, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1ff}, {@multicast2, 0xbc}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x1}, {@rand_addr=0x64010102, 0xa5f}, {@remote}, {@private=0xa010101, 0x2}]}, @timestamp_prespec={0x44, 0x14, 0x52, 0x3, 0xc, [{@local, 0xff}, {@loopback, 0x7ff}]}, @ssrr={0x89, 0xb, 0x67, [@remote, @empty]}, @cipso={0x86, 0x1c, 0x0, [{0x1, 0x8, "09576fd99f05"}, {0x5, 0xe, "3b7b886315736799754d0f1e"}]}, @noop]}}}}}) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x4cfd, &(0x7f0000001a80)={0x0, 0xe6d8, 0x2, 0x1, 0x150}) 13:18:14 executing program 1: prctl$PR_SET_IO_FLUSHER(0x39, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) clock_gettime(0x5, &(0x7f0000000000)) 13:18:14 executing program 2: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)="3c83aba66cc4e07e77a76c5edaaaeb2c142196dcb4948d1bea7cc7c56c0522d946cb5ac4231e337744cd43286b5d06c909b77ba0b1dfa735763b470323ffa9785312df86d54ab56c63f169c855da890385e79ba7c12224570381988ffe8d2b65a733b2b77981ee7865d86a0dd49f2d3d71ba26e167eb653682c8fb6d85ea2cee1876e5e45d8d6f35f9920ea42fd04de7fa1e08de2e345b5c79da16e0f38f87b93c79d554bdf32aa1cdf40cebec88412bea62d90d3915360fdeab0e5ac3a9df3b64a91136855c82d51ab174ac5cd6bd6b9d223bcd6f79ffce263b54bd9999c01459a72d54dffa20773c8d28d00c5e0ea136538365", 0xf4}, 0x1, 0x0, 0x0, 0x4000}, 0x20000001) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/bus/platform', 0x16001, 0x9) sysinfo(&(0x7f0000000840)=""/122) accept(r0, &(0x7f0000000ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000b40)=0x80) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000e00)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000dc0)={&(0x7f0000000b80)=@nl=@proc, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000c00)=""/219, 0xdb}, {&(0x7f0000000d00)=""/31, 0x1f}], 0x2, &(0x7f0000000d80)=""/60, 0x3c}, 0x0, 0x12100, 0x1, {0x1}}, 0x7) 13:18:14 executing program 6: prctl$PR_SET_IO_FLUSHER(0x39, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) clock_gettime(0x5, &(0x7f0000000000)) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000040)) clock_nanosleep(0x5, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) 13:18:14 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000003680)={'ip6_vti0\x00', &(0x7f0000003600)={'ip6_vti0\x00', 0x0, 0x29, 0x7f, 0x1e, 0x513, 0x30, @rand_addr=' \x01\x00', @mcast1, 0x20, 0x10, 0x4, 0x81000000}}) 13:18:14 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000003680)={'ip6_vti0\x00', &(0x7f0000003600)={'ip6_vti0\x00', 0x0, 0x29, 0x7f, 0x1e, 0x513, 0x30, @rand_addr=' \x01\x00', @mcast1, 0x20, 0x10, 0x4, 0x81000000}}) 13:18:14 executing program 6: prctl$PR_SET_IO_FLUSHER(0x39, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) clock_gettime(0x5, &(0x7f0000000000)) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000040)) 13:18:14 executing program 7: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)="3c83aba66cc4e07e77a76c5edaaaeb2c142196dcb4948d1bea7cc7c56c0522d946cb5ac4231e337744cd43286b5d06c909b77ba0b1dfa735763b470323ffa9785312df86d54ab56c63f169c855da890385e79ba7c12224570381988ffe8d2b65a733b2b77981ee7865d86a0dd49f2d3d71ba26e167eb653682c8fb6d85ea2cee1876e5e45d8d6f35f9920ea42fd04de7fa1e08de2e345b5c79da16e0f38f87b93c79d554bdf32aa1cdf40cebec88412bea62d90d3915360fdeab0e5ac3a9df3b64a91136855c82d51ab174ac5cd6bd6b9d223bcd6f79ffce263b54bd9999c01459a72d54dffa20773c8d28d00c5e0ea136538365", 0xf4}, 0x1, 0x0, 0x0, 0x4000}, 0x20000001) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000180)) sysinfo(&(0x7f00000001c0)=""/142) ioctl$sock_ifreq(r1, 0x8931, &(0x7f0000000280)={'batadv_slave_0\x00', @ifru_addrs=@in={0x2, 0x0, @local}}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/bus/platform', 0x16001, 0x9) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r3, 0x2, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000090) 13:18:14 executing program 2: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/bus/platform', 0x16001, 0x9) sysinfo(&(0x7f0000000840)=""/122) accept(r0, &(0x7f0000000ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000b40)=0x80) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000e00)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000dc0)={&(0x7f0000000b80)=@nl=@proc, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000c00)=""/219, 0xdb}, {&(0x7f0000000d00)=""/31, 0x1f}], 0x2, &(0x7f0000000d80)=""/60, 0x3c}, 0x0, 0x12100, 0x1, {0x1}}, 0x7) 13:18:14 executing program 1: prctl$PR_SET_IO_FLUSHER(0x39, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) clock_gettime(0x5, &(0x7f0000000000)) 13:18:14 executing program 4: ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000000)={0x5, 0x1, 0x4, 0x1, 0x6}) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0x80, 0x80) socket$inet(0x2, 0x800, 0x4) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000080)=""/4096) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000001100)={'ip6gre0\x00', &(0x7f0000001080)={'syztnl0\x00', 0x0, 0x2f, 0x72, 0x4, 0x7f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, 0x40, 0x40, 0x5, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000011c0)={'ip6gre0\x00', &(0x7f0000001140)={'syztnl2\x00', r1, 0x2f, 0xf7, 0xfe, 0x4, 0x8, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x20, 0xfe2, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000001280)={'syztnl0\x00', &(0x7f0000001200)={'ip6gre0\x00', r2, 0x4, 0x2, 0x4, 0xffffffff, 0x12, @mcast1, @loopback, 0x7800, 0x8, 0xbc, 0xd96}}) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x38, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x402c890}, 0x40000) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r4}}, 0x21) r5 = syz_genetlink_get_family_id$team(&(0x7f0000001480), r0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000015c0)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={0x90, r5, 0x12, 0x70bd26, 0x25dfdbfc, {}, [{{0x8, 0x1, r3}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x8000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001740)={'ip_vti0\x00', &(0x7f0000001600)={'ip_vti0\x00', r2, 0x7800, 0x0, 0x7ba6, 0x3, {{0x3f, 0x4, 0x0, 0x23, 0xfc, 0x67, 0x0, 0xff, 0x4, 0x0, @private=0xa010100, @empty, {[@generic={0x0, 0xa, "40ebf02080ba2927"}, @timestamp_prespec={0x44, 0xc, 0x43, 0x3, 0x4, [{@loopback, 0x100}]}, @cipso={0x86, 0x51, 0x2, [{0x2, 0x4, "ca84"}, {0x1, 0xe, "0fb6e4ebf725212a1f4921ab"}, {0x0, 0x10, "4e91c861d05464ee62c7e2524b76"}, {0x0, 0x12, "b421989cb68da381e74d9a94bb264171"}, {0x2, 0x8, "0c43715770af"}, {0x7, 0xf, "3af348b6e9faa379f4f34958e2"}]}, @rr={0x7, 0xf, 0x65, [@empty, @dev={0xac, 0x14, 0x14, 0x10}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_prespec={0x44, 0x34, 0xbd, 0x3, 0x2, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1ff}, {@multicast2, 0xbc}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x1}, {@rand_addr=0x64010102, 0xa5f}, {@remote}, {@private=0xa010101, 0x2}]}, @timestamp_prespec={0x44, 0x14, 0x52, 0x3, 0xc, [{@local, 0xff}, {@loopback, 0x7ff}]}, @ssrr={0x89, 0xb, 0x67, [@remote, @empty]}, @cipso={0x86, 0x1c, 0x0, [{0x1, 0x8, "09576fd99f05"}, {0x5, 0xe, "3b7b886315736799754d0f1e"}]}, @noop]}}}}}) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x4cfd, &(0x7f0000001a80)={0x0, 0xe6d8, 0x2, 0x1, 0x150}) 13:18:23 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) 13:18:23 executing program 1: prctl$PR_SET_IO_FLUSHER(0x39, 0x0) clock_gettime(0x5, &(0x7f0000000000)) 13:18:23 executing program 4: ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000000)={0x5, 0x1, 0x4, 0x1, 0x6}) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0x80, 0x80) socket$inet(0x2, 0x800, 0x4) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000080)=""/4096) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000001100)={'ip6gre0\x00', &(0x7f0000001080)={'syztnl0\x00', 0x0, 0x2f, 0x72, 0x4, 0x7f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, 0x40, 0x40, 0x5, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000011c0)={'ip6gre0\x00', &(0x7f0000001140)={'syztnl2\x00', r1, 0x2f, 0xf7, 0xfe, 0x4, 0x8, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x20, 0xfe2, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000001280)={'syztnl0\x00', &(0x7f0000001200)={'ip6gre0\x00', r2, 0x4, 0x2, 0x4, 0xffffffff, 0x12, @mcast1, @loopback, 0x7800, 0x8, 0xbc, 0xd96}}) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x38, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x402c890}, 0x40000) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r4}}, 0x21) r5 = syz_genetlink_get_family_id$team(&(0x7f0000001480), r0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000015c0)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={0x90, r5, 0x12, 0x70bd26, 0x25dfdbfc, {}, [{{0x8, 0x1, r3}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x8000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001740)={'ip_vti0\x00', &(0x7f0000001600)={'ip_vti0\x00', r2, 0x7800, 0x0, 0x7ba6, 0x3, {{0x3f, 0x4, 0x0, 0x23, 0xfc, 0x67, 0x0, 0xff, 0x4, 0x0, @private=0xa010100, @empty, {[@generic={0x0, 0xa, "40ebf02080ba2927"}, @timestamp_prespec={0x44, 0xc, 0x43, 0x3, 0x4, [{@loopback, 0x100}]}, @cipso={0x86, 0x51, 0x2, [{0x2, 0x4, "ca84"}, {0x1, 0xe, "0fb6e4ebf725212a1f4921ab"}, {0x0, 0x10, "4e91c861d05464ee62c7e2524b76"}, {0x0, 0x12, "b421989cb68da381e74d9a94bb264171"}, {0x2, 0x8, "0c43715770af"}, {0x7, 0xf, "3af348b6e9faa379f4f34958e2"}]}, @rr={0x7, 0xf, 0x65, [@empty, @dev={0xac, 0x14, 0x14, 0x10}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_prespec={0x44, 0x34, 0xbd, 0x3, 0x2, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1ff}, {@multicast2, 0xbc}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x1}, {@rand_addr=0x64010102, 0xa5f}, {@remote}, {@private=0xa010101, 0x2}]}, @timestamp_prespec={0x44, 0x14, 0x52, 0x3, 0xc, [{@local, 0xff}, {@loopback, 0x7ff}]}, @ssrr={0x89, 0xb, 0x67, [@remote, @empty]}, @cipso={0x86, 0x1c, 0x0, [{0x1, 0x8, "09576fd99f05"}, {0x5, 0xe, "3b7b886315736799754d0f1e"}]}, @noop]}}}}}) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x4cfd, &(0x7f0000001a80)={0x0, 0xe6d8, 0x2, 0x1, 0x150}) 13:18:23 executing program 6: prctl$PR_SET_IO_FLUSHER(0x39, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) clock_gettime(0x5, &(0x7f0000000000)) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000040)) 13:18:23 executing program 2: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/bus/platform', 0x16001, 0x9) sysinfo(&(0x7f0000000840)=""/122) accept(r0, &(0x7f0000000ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000b40)=0x80) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000e00)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000dc0)={&(0x7f0000000b80)=@nl=@proc, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000c00)=""/219, 0xdb}, {&(0x7f0000000d00)=""/31, 0x1f}], 0x2, &(0x7f0000000d80)=""/60, 0x3c}, 0x0, 0x12100, 0x1, {0x1}}, 0x7) 13:18:23 executing program 7: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)="3c83aba66cc4e07e77a76c5edaaaeb2c142196dcb4948d1bea7cc7c56c0522d946cb5ac4231e337744cd43286b5d06c909b77ba0b1dfa735763b470323ffa9785312df86d54ab56c63f169c855da890385e79ba7c12224570381988ffe8d2b65a733b2b77981ee7865d86a0dd49f2d3d71ba26e167eb653682c8fb6d85ea2cee1876e5e45d8d6f35f9920ea42fd04de7fa1e08de2e345b5c79da16e0f38f87b93c79d554bdf32aa1cdf40cebec88412bea62d90d3915360fdeab0e5ac3a9df3b64a91136855c82d51ab174ac5cd6bd6b9d223bcd6f79ffce263b54bd9999c01459a72d54dffa20773c8d28d00c5e0ea136538365", 0xf4}, 0x1, 0x0, 0x0, 0x4000}, 0x20000001) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000180)) sysinfo(&(0x7f00000001c0)=""/142) ioctl$sock_ifreq(r1, 0x8931, &(0x7f0000000280)={'batadv_slave_0\x00', @ifru_addrs=@in={0x2, 0x0, @local}}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/bus/platform', 0x16001, 0x9) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00'}) 13:18:23 executing program 3: clock_nanosleep(0x1, 0x1, &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f0000000040)) r0 = getpgrp(0x0) sched_rr_get_interval(r0, &(0x7f0000000080)) r1 = getpgrp(r0) sched_rr_get_interval(r1, &(0x7f00000000c0)) clock_gettime(0x0, &(0x7f00000001c0)) r2 = gettid() waitid(0x2, r2, &(0x7f0000000ac0), 0x2, &(0x7f0000000b40)) 13:18:23 executing program 0: clock_nanosleep(0x1, 0x1, &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f0000000040)) r0 = getpgrp(0x0) sched_rr_get_interval(r0, &(0x7f0000000080)) r1 = getpgrp(r0) sched_rr_get_interval(r1, &(0x7f00000000c0)) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000100)={[0x5ab]}, &(0x7f0000000140), &(0x7f0000000200)={r2, r3+60000000}, 0x8) r4 = getpgrp(r1) waitid(0x3, r4, &(0x7f0000000240), 0x20000000, &(0x7f00000002c0)) sched_rr_get_interval(r4, &(0x7f0000000380)) clock_nanosleep(0x2, 0x0, &(0x7f00000003c0)={0x77359400}, &(0x7f0000000400)) 13:18:23 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) 13:18:23 executing program 3: clock_nanosleep(0x1, 0x1, &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f0000000040)) r0 = getpgrp(0x0) sched_rr_get_interval(r0, &(0x7f0000000080)) r1 = getpgrp(r0) sched_rr_get_interval(r1, &(0x7f00000000c0)) r2 = gettid() waitid(0x2, r2, &(0x7f0000000ac0), 0x2, &(0x7f0000000b40)) 13:18:23 executing program 1: prctl$PR_SET_IO_FLUSHER(0x39, 0x0) clock_gettime(0x5, &(0x7f0000000000)) 13:18:23 executing program 2: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/bus/platform', 0x16001, 0x9) sysinfo(&(0x7f0000000840)=""/122) accept(r0, &(0x7f0000000ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000b40)=0x80) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000e00)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000dc0)={&(0x7f0000000b80)=@nl=@proc, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000c00)=""/219, 0xdb}, {&(0x7f0000000d00)=""/31, 0x1f}], 0x2, &(0x7f0000000d80)=""/60, 0x3c}, 0x0, 0x12100, 0x1, {0x1}}, 0x7) 13:18:23 executing program 6: prctl$PR_SET_IO_FLUSHER(0x39, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) clock_gettime(0x5, &(0x7f0000000000)) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) 13:18:23 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) 13:18:23 executing program 3: clock_nanosleep(0x1, 0x1, &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f0000000040)) r0 = getpgrp(0x0) sched_rr_get_interval(r0, &(0x7f0000000080)) getpgrp(r0) r1 = gettid() waitid(0x2, r1, &(0x7f0000000ac0), 0x2, &(0x7f0000000b40)) 13:18:32 executing program 4: ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000000)={0x5, 0x1, 0x4, 0x1, 0x6}) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0x80, 0x80) socket$inet(0x2, 0x800, 0x4) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000080)=""/4096) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000001100)={'ip6gre0\x00', &(0x7f0000001080)={'syztnl0\x00', 0x0, 0x2f, 0x72, 0x4, 0x7f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, 0x40, 0x40, 0x5, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000011c0)={'ip6gre0\x00', &(0x7f0000001140)={'syztnl2\x00', r1, 0x2f, 0xf7, 0xfe, 0x4, 0x8, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x20, 0xfe2, 0x10001}}) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001300), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x38, r3, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x402c890}, 0x40000) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r4}}, 0x21) r5 = syz_genetlink_get_family_id$team(&(0x7f0000001480), r0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000015c0)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={0x90, r5, 0x12, 0x70bd26, 0x25dfdbfc, {}, [{{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x8000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001740)={'ip_vti0\x00', &(0x7f0000001600)={'ip_vti0\x00', r2, 0x7800, 0x0, 0x7ba6, 0x3, {{0x3f, 0x4, 0x0, 0x23, 0xfc, 0x67, 0x0, 0xff, 0x4, 0x0, @private=0xa010100, @empty, {[@generic={0x0, 0xa, "40ebf02080ba2927"}, @timestamp_prespec={0x44, 0xc, 0x43, 0x3, 0x4, [{@loopback, 0x100}]}, @cipso={0x86, 0x51, 0x2, [{0x2, 0x4, "ca84"}, {0x1, 0xe, "0fb6e4ebf725212a1f4921ab"}, {0x0, 0x10, "4e91c861d05464ee62c7e2524b76"}, {0x0, 0x12, "b421989cb68da381e74d9a94bb264171"}, {0x2, 0x8, "0c43715770af"}, {0x7, 0xf, "3af348b6e9faa379f4f34958e2"}]}, @rr={0x7, 0xf, 0x65, [@empty, @dev={0xac, 0x14, 0x14, 0x10}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_prespec={0x44, 0x34, 0xbd, 0x3, 0x2, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1ff}, {@multicast2, 0xbc}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x1}, {@rand_addr=0x64010102, 0xa5f}, {@remote}, {@private=0xa010101, 0x2}]}, @timestamp_prespec={0x44, 0x14, 0x52, 0x3, 0xc, [{@local, 0xff}, {@loopback, 0x7ff}]}, @ssrr={0x89, 0xb, 0x67, [@remote, @empty]}, @cipso={0x86, 0x1c, 0x0, [{0x1, 0x8, "09576fd99f05"}, {0x5, 0xe, "3b7b886315736799754d0f1e"}]}, @noop]}}}}}) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x4cfd, &(0x7f0000001a80)={0x0, 0xe6d8, 0x2, 0x1, 0x150}) 13:18:32 executing program 6: prctl$PR_SET_IO_FLUSHER(0x39, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) clock_gettime(0x5, &(0x7f0000000000)) 13:18:32 executing program 0: clock_nanosleep(0x1, 0x1, &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f0000000040)) r0 = getpgrp(0x0) sched_rr_get_interval(r0, &(0x7f0000000080)) r1 = getpgrp(r0) sched_rr_get_interval(r1, &(0x7f00000000c0)) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000100)={[0x5ab]}, &(0x7f0000000140), &(0x7f0000000200)={r2, r3+60000000}, 0x8) r4 = getpgrp(r1) waitid(0x3, r4, &(0x7f0000000240), 0x20000000, &(0x7f00000002c0)) clock_nanosleep(0x2, 0x0, &(0x7f00000003c0)={0x77359400}, &(0x7f0000000400)) 13:18:32 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000003680)={'ip6_vti0\x00', 0x0}) 13:18:32 executing program 7: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)="3c83aba66cc4e07e77a76c5edaaaeb2c142196dcb4948d1bea7cc7c56c0522d946cb5ac4231e337744cd43286b5d06c909b77ba0b1dfa735763b470323ffa9785312df86d54ab56c63f169c855da890385e79ba7c12224570381988ffe8d2b65a733b2b77981ee7865d86a0dd49f2d3d71ba26e167eb653682c8fb6d85ea2cee1876e5e45d8d6f35f9920ea42fd04de7fa1e08de2e345b5c79da16e0f38f87b93c79d554bdf32aa1cdf40cebec88412bea62d90d3915360fdeab0e5ac3a9df3b64a91136855c82d51ab174ac5cd6bd6b9d223bcd6f79ffce263b54bd9999c01459a72d54dffa20773c8d28d00c5e0ea136538365", 0xf4}, 0x1, 0x0, 0x0, 0x4000}, 0x20000001) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000180)) sysinfo(&(0x7f00000001c0)=""/142) ioctl$sock_ifreq(r1, 0x8931, &(0x7f0000000280)={'batadv_slave_0\x00', @ifru_addrs=@in={0x2, 0x0, @local}}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/bus/platform', 0x16001, 0x9) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) 13:18:32 executing program 2: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)="3c83aba66cc4e07e77a76c5edaaaeb2c142196dcb4948d1bea7cc7c56c0522d946cb5ac4231e337744cd43286b5d06c909b77ba0b1dfa735763b470323ffa9785312df86d54ab56c63f169c855da890385e79ba7c12224570381988ffe8d2b65a733b2b77981ee7865d86a0dd49f2d3d71ba26e167eb653682c8fb6d85ea2cee1876e5e45d8d6f35f9920ea42fd04de7fa1e08de2e345b5c79da16e0f38f87b93c79d554bdf32aa1cdf40cebec88412bea62d90d3915360fdeab0e5ac3a9df3b64a91136855c82d51ab174ac5cd6bd6b9d223bcd6f79ffce263b54bd9999c01459a72d54dffa20773c8d28d00c5e0ea136538365", 0xf4}, 0x1, 0x0, 0x0, 0x4000}, 0x20000001) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/bus/platform', 0x16001, 0x9) sysinfo(&(0x7f0000000840)=""/122) accept(r0, &(0x7f0000000ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000b40)=0x80) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000e00)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000dc0)={&(0x7f0000000b80)=@nl=@proc, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000c00)=""/219, 0xdb}, {&(0x7f0000000d00)=""/31, 0x1f}], 0x2, &(0x7f0000000d80)=""/60, 0x3c}, 0x0, 0x12100, 0x1, {0x1}}, 0x7) 13:18:32 executing program 3: clock_nanosleep(0x1, 0x1, &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f0000000040)) r0 = getpgrp(0x0) sched_rr_get_interval(r0, &(0x7f0000000080)) r1 = gettid() waitid(0x2, r1, &(0x7f0000000ac0), 0x2, &(0x7f0000000b40)) 13:18:32 executing program 1: clock_gettime(0x5, &(0x7f0000000000)) 13:18:32 executing program 3: clock_nanosleep(0x1, 0x1, &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f0000000040)) getpgrp(0x0) r0 = gettid() waitid(0x2, r0, &(0x7f0000000ac0), 0x2, &(0x7f0000000b40)) 13:18:32 executing program 6: prctl$PR_SET_IO_FLUSHER(0x39, 0x0) clock_gettime(0x5, &(0x7f0000000000)) 13:18:32 executing program 2: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)="3c83aba66cc4e07e77a76c5edaaaeb2c142196dcb4948d1bea7cc7c56c0522d946cb5ac4231e337744cd43286b5d06c909b77ba0b1dfa735763b470323ffa9785312df86d54ab56c63f169c855da890385e79ba7c12224570381988ffe8d2b65a733b2b77981ee7865d86a0dd49f2d3d71ba26e167eb653682c8fb6d85ea2cee1876e5e45d8d6f35f9920ea42fd04de7fa1e08de2e345b5c79da16e0f38f87b93c79d554bdf32aa1cdf40cebec88412bea62d90d3915360fdeab0e5ac3a9df3b64a91136855c82d51ab174ac5cd6bd6b9d223bcd6f79ffce263b54bd9999c01459a72d54dffa20773c8d28d00c5e0ea136538365", 0xf4}, 0x1, 0x0, 0x0, 0x4000}, 0x20000001) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/bus/platform', 0x16001, 0x9) sysinfo(&(0x7f0000000840)=""/122) accept(r0, &(0x7f0000000ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000b40)=0x80) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000e00)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000dc0)={&(0x7f0000000b80)=@nl=@proc, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000c00)=""/219, 0xdb}, {&(0x7f0000000d00)=""/31, 0x1f}], 0x2, &(0x7f0000000d80)=""/60, 0x3c}, 0x0, 0x12100, 0x1, {0x1}}, 0x7) 13:18:32 executing program 1: clock_gettime(0x0, &(0x7f0000000000)) 13:18:32 executing program 3: clock_nanosleep(0x1, 0x1, &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f0000000040)) r0 = gettid() waitid(0x2, r0, &(0x7f0000000ac0), 0x2, &(0x7f0000000b40)) 13:18:32 executing program 6: clock_gettime(0x5, &(0x7f0000000000)) 13:18:32 executing program 1: clock_gettime(0x0, &(0x7f0000000000)) 13:18:32 executing program 4: ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000000)={0x5, 0x1, 0x4, 0x1, 0x6}) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0x80, 0x80) socket$inet(0x2, 0x800, 0x4) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000080)=""/4096) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000001100)={'ip6gre0\x00', &(0x7f0000001080)={'syztnl0\x00', 0x0, 0x2f, 0x72, 0x4, 0x7f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, 0x40, 0x40, 0x5, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000011c0)={'ip6gre0\x00', &(0x7f0000001140)={'syztnl2\x00', r1, 0x2f, 0xf7, 0xfe, 0x4, 0x8, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x20, 0xfe2, 0x10001}}) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001300), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x38, r3, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x402c890}, 0x40000) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r4}}, 0x21) r5 = syz_genetlink_get_family_id$team(&(0x7f0000001480), r0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000015c0)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={0x90, r5, 0x12, 0x70bd26, 0x25dfdbfc, {}, [{{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x8000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001740)={'ip_vti0\x00', &(0x7f0000001600)={'ip_vti0\x00', r2, 0x7800, 0x0, 0x7ba6, 0x3, {{0x3f, 0x4, 0x0, 0x23, 0xfc, 0x67, 0x0, 0xff, 0x4, 0x0, @private=0xa010100, @empty, {[@generic={0x0, 0xa, "40ebf02080ba2927"}, @timestamp_prespec={0x44, 0xc, 0x43, 0x3, 0x4, [{@loopback, 0x100}]}, @cipso={0x86, 0x51, 0x2, [{0x2, 0x4, "ca84"}, {0x1, 0xe, "0fb6e4ebf725212a1f4921ab"}, {0x0, 0x10, "4e91c861d05464ee62c7e2524b76"}, {0x0, 0x12, "b421989cb68da381e74d9a94bb264171"}, {0x2, 0x8, "0c43715770af"}, {0x7, 0xf, "3af348b6e9faa379f4f34958e2"}]}, @rr={0x7, 0xf, 0x65, [@empty, @dev={0xac, 0x14, 0x14, 0x10}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_prespec={0x44, 0x34, 0xbd, 0x3, 0x2, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1ff}, {@multicast2, 0xbc}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x1}, {@rand_addr=0x64010102, 0xa5f}, {@remote}, {@private=0xa010101, 0x2}]}, @timestamp_prespec={0x44, 0x14, 0x52, 0x3, 0xc, [{@local, 0xff}, {@loopback, 0x7ff}]}, @ssrr={0x89, 0xb, 0x67, [@remote, @empty]}, @cipso={0x86, 0x1c, 0x0, [{0x1, 0x8, "09576fd99f05"}, {0x5, 0xe, "3b7b886315736799754d0f1e"}]}, @noop]}}}}}) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x4cfd, &(0x7f0000001a80)={0x0, 0xe6d8, 0x2, 0x1, 0x150}) 13:18:32 executing program 2: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)="3c83aba66cc4e07e77a76c5edaaaeb2c142196dcb4948d1bea7cc7c56c0522d946cb5ac4231e337744cd43286b5d06c909b77ba0b1dfa735763b470323ffa9785312df86d54ab56c63f169c855da890385e79ba7c12224570381988ffe8d2b65a733b2b77981ee7865d86a0dd49f2d3d71ba26e167eb653682c8fb6d85ea2cee1876e5e45d8d6f35f9920ea42fd04de7fa1e08de2e345b5c79da16e0f38f87b93c79d554bdf32aa1cdf40cebec88412bea62d90d3915360fdeab0e5ac3a9df3b64a91136855c82d51ab174ac5cd6bd6b9d223bcd6f79ffce263b54bd9999c01459a72d54dffa20773c8d28d00c5e0ea136538365", 0xf4}, 0x1, 0x0, 0x0, 0x4000}, 0x20000001) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/bus/platform', 0x16001, 0x9) sysinfo(&(0x7f0000000840)=""/122) accept(r0, &(0x7f0000000ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000b40)=0x80) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000e00)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000dc0)={&(0x7f0000000b80)=@nl=@proc, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000c00)=""/219, 0xdb}, {&(0x7f0000000d00)=""/31, 0x1f}], 0x2, &(0x7f0000000d80)=""/60, 0x3c}, 0x0, 0x12100, 0x1, {0x1}}, 0x7) 13:18:32 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000003680)={'ip6_vti0\x00', 0x0}) [ 282.229991] [ 282.230376] ===================================== [ 282.231181] WARNING: bad unlock balance detected! [ 282.231973] 6.19.0-rc5-next-20260116 #1 Not tainted [ 282.232805] ------------------------------------- [ 282.233596] syz-executor.3/283 is trying to release lock (rcu_read_lock) at: [ 282.234800] [] __wait_on_freeing_inode+0x105/0x350 [ 282.235889] but there are no more locks to release! [ 282.236714] [ 282.236714] other info that might help us debug this: [ 282.241254] 4 locks held by syz-executor.3/283: [ 282.244277] #0: ffff88800f86a3f8 (sb_writers#3){.+.+}-{0:0}, at: filename_create+0xf7/0x400 [ 282.245776] #1: ffff88801b7583e0 (&type->i_mutex_dir_key#3/1){+.+.}-{4:4}, at: filename_create+0x1b1/0x400 [ 282.247500] #2: ffff88800f86e950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xe32/0x12d0 [ 282.249002] #3: ffffffff85c16898 (inode_hash_lock){+.+.}-{3:3}, at: insert_inode_locked+0xf9/0x890 [ 282.250565] [ 282.250565] stack backtrace: [ 282.251319] CPU: 1 UID: 0 PID: 283 Comm: syz-executor.3 Not tainted 6.19.0-rc5-next-20260116 #1 PREEMPT(lazy) [ 282.251349] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 282.251363] Call Trace: [ 282.251372] [ 282.251381] dump_stack_lvl+0xca/0x120 [ 282.251430] ? __wait_on_freeing_inode+0x105/0x350 [ 282.251461] print_unlock_imbalance_bug+0x118/0x130 [ 282.251492] ? __wait_on_freeing_inode+0x105/0x350 [ 282.251522] lock_release+0x1ee/0x270 [ 282.251553] __wait_on_freeing_inode+0x10a/0x350 [ 282.251586] ? __pfx___wait_on_freeing_inode+0x10/0x10 [ 282.251621] ? __pfx_var_wake_function+0x10/0x10 [ 282.251657] ? lock_is_held_type+0x9e/0x120 [ 282.251681] insert_inode_locked+0x25f/0x890 [ 282.251717] __ext4_new_inode+0x223d/0x4cd0 [ 282.251752] ? __pfx___ext4_new_inode+0x10/0x10 [ 282.251781] ? __pfx_avc_has_perm+0x10/0x10 [ 282.251810] ? __pfx___dquot_initialize+0x10/0x10 [ 282.251853] ext4_mkdir+0x331/0xb30 [ 282.251891] ? __pfx_ext4_mkdir+0x10/0x10 [ 282.251923] ? security_inode_permission+0x72/0xe0 [ 282.251951] vfs_mkdir+0x6d8/0xc00 [ 282.251985] filename_mkdirat+0x118/0x430 [ 282.252013] ? __pfx_filename_mkdirat+0x10/0x10 [ 282.252040] ? strncpy_from_user+0x21b/0x2f0 [ 282.252074] __x64_sys_mkdir+0x6e/0xd0 [ 282.252100] do_syscall_64+0xbf/0x420 [ 282.252127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.252154] RIP: 0033:0x7f5434b2fc27 [ 282.252172] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 282.252195] RSP: 002b:00007ffe0e949438 EFLAGS: 00000202 ORIG_RAX: 0000000000000053 [ 282.252218] RAX: ffffffffffffffda RBX: 00007ffe0e9494c0 RCX: 00007f5434b2fc27 [ 282.252234] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 00007ffe0e9494c0 [ 282.252249] RBP: 00007ffe0e94949c R08: 0000000000000000 R09: 0000000000000004 [ 282.252264] R10: 00007ffe0e9491d6 R11: 0000000000000202 R12: 0000000000000032 [ 282.252279] R13: 0000000000044d56 R14: 0000000000000003 R15: 00007ffe0e949500 [ 282.252301] [ 282.284854] ------------[ cut here ]------------ [ 282.285740] WARNING: kernel/rcu/tree_plugin.h:443 at __rcu_read_unlock+0x25f/0x5c0, CPU#1: syz-executor.3/283 [ 282.287726] Modules linked in: [ 282.288337] CPU: 1 UID: 0 PID: 283 Comm: syz-executor.3 Not tainted 6.19.0-rc5-next-20260116 #1 PREEMPT(lazy) [ 282.290120] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 282.291718] RIP: 0010:__rcu_read_unlock+0x25f/0x5c0 [ 282.292815] Code: f2 02 00 00 c7 43 58 01 00 00 00 bf 09 00 00 00 e8 d6 b7 de ff 4d 85 f6 0f 84 73 fe ff ff e8 38 8a 20 00 fb e9 68 fe ff ff 90 <0f> 0b 90 5b 5d 41 5c 41 5d 41 5e e9 81 4d 74 03 e8 2c 5d 56 00 e9 [ 282.295958] RSP: 0018:ffff88800d4c79e0 EFLAGS: 00010286 [ 282.296964] RAX: 00000000ffffffff RBX: ffff888017d70000 RCX: ffffffff815660f7 [ 282.300746] RDX: 0000000000000000 RSI: ffffffff81566100 RDI: ffff888017d703fc [ 282.303967] RBP: ffff888017d70000 R08: 0000000000000000 R09: fffffbfff0ba7040 [ 282.305309] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888017d70000 [ 282.306685] R13: 0000000000000001 R14: ffffffff85c0fa90 R15: ffff88802e4f8ca0 [ 282.307991] FS: 0000555589563400(0000) GS:ffff8880e5442000(0000) knlGS:0000000000000000 [ 282.309441] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 282.310531] CR2: 00007feee5bcc368 CR3: 000000000fba6000 CR4: 0000000000350ef0 [ 282.311832] Call Trace: [ 282.312342] [ 282.313976] __wait_on_freeing_inode+0x10f/0x350 [ 282.315540] ? __pfx___wait_on_freeing_inode+0x10/0x10 [ 282.318047] ? __pfx_var_wake_function+0x10/0x10 [ 282.320891] ? lock_is_held_type+0x9e/0x120 [ 282.323368] insert_inode_locked+0x25f/0x890 [ 282.327076] __ext4_new_inode+0x223d/0x4cd0 [ 282.332712] ? __pfx___ext4_new_inode+0x10/0x10 [ 282.334912] ? __pfx_avc_has_perm+0x10/0x10 [ 282.336323] ? __pfx___dquot_initialize+0x10/0x10 [ 282.341282] ext4_mkdir+0x331/0xb30 [ 282.345760] ? __pfx_ext4_mkdir+0x10/0x10 [ 282.347158] ? security_inode_permission+0x72/0xe0 [ 282.351013] vfs_mkdir+0x6d8/0xc00 [ 282.354090] filename_mkdirat+0x118/0x430 [ 282.356440] ? __pfx_filename_mkdirat+0x10/0x10 [ 282.358158] ? strncpy_from_user+0x21b/0x2f0 [ 282.362496] __x64_sys_mkdir+0x6e/0xd0 [ 282.363970] do_syscall_64+0xbf/0x420 [ 282.365802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.367006] RIP: 0033:0x7f5434b2fc27 [ 282.367879] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 282.371058] RSP: 002b:00007ffe0e949438 EFLAGS: 00000202 ORIG_RAX: 0000000000000053 [ 282.372455] RAX: ffffffffffffffda RBX: 00007ffe0e9494c0 RCX: 00007f5434b2fc27 [ 282.373750] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 00007ffe0e9494c0 [ 282.375051] RBP: 00007ffe0e94949c R08: 0000000000000000 R09: 0000000000000004 [ 282.376349] R10: 00007ffe0e9491d6 R11: 0000000000000202 R12: 0000000000000032 [ 282.377743] R13: 0000000000044d56 R14: 0000000000000003 R15: 00007ffe0e949500 [ 282.384071] [ 282.384499] irq event stamp: 427599 [ 282.385209] hardirqs last enabled at (427599): [] _raw_spin_unlock_irqrestore+0x2c/0x50 [ 282.387100] hardirqs last disabled at (427598): [] _raw_spin_lock_irqsave+0x53/0x60 [ 282.388892] softirqs last enabled at (427594): [] kernel_fpu_end+0x59/0x70 [ 282.390591] softirqs last disabled at (427592): [] kernel_fpu_begin_mask+0x1bb/0x300 [ 282.392529] ---[ end trace 0000000000000000 ]--- 13:18:40 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000003680)={'ip6_vti0\x00', 0x0}) 13:18:40 executing program 4: ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000000)={0x5, 0x1, 0x4, 0x1, 0x6}) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0x80, 0x80) socket$inet(0x2, 0x800, 0x4) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000080)=""/4096) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000001100)={'ip6gre0\x00', &(0x7f0000001080)={'syztnl0\x00', 0x0, 0x2f, 0x72, 0x4, 0x7f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, 0x40, 0x40, 0x5, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000011c0)={'ip6gre0\x00', &(0x7f0000001140)={'syztnl2\x00', r1, 0x2f, 0xf7, 0xfe, 0x4, 0x8, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x20, 0xfe2, 0x10001}}) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001300), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x38, r3, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x402c890}, 0x40000) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r4}}, 0x21) r5 = syz_genetlink_get_family_id$team(&(0x7f0000001480), r0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000015c0)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={0x90, r5, 0x12, 0x70bd26, 0x25dfdbfc, {}, [{{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x8000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001740)={'ip_vti0\x00', &(0x7f0000001600)={'ip_vti0\x00', r2, 0x7800, 0x0, 0x7ba6, 0x3, {{0x3f, 0x4, 0x0, 0x23, 0xfc, 0x67, 0x0, 0xff, 0x4, 0x0, @private=0xa010100, @empty, {[@generic={0x0, 0xa, "40ebf02080ba2927"}, @timestamp_prespec={0x44, 0xc, 0x43, 0x3, 0x4, [{@loopback, 0x100}]}, @cipso={0x86, 0x51, 0x2, [{0x2, 0x4, "ca84"}, {0x1, 0xe, "0fb6e4ebf725212a1f4921ab"}, {0x0, 0x10, "4e91c861d05464ee62c7e2524b76"}, {0x0, 0x12, "b421989cb68da381e74d9a94bb264171"}, {0x2, 0x8, "0c43715770af"}, {0x7, 0xf, "3af348b6e9faa379f4f34958e2"}]}, @rr={0x7, 0xf, 0x65, [@empty, @dev={0xac, 0x14, 0x14, 0x10}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_prespec={0x44, 0x34, 0xbd, 0x3, 0x2, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1ff}, {@multicast2, 0xbc}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x1}, {@rand_addr=0x64010102, 0xa5f}, {@remote}, {@private=0xa010101, 0x2}]}, @timestamp_prespec={0x44, 0x14, 0x52, 0x3, 0xc, [{@local, 0xff}, {@loopback, 0x7ff}]}, @ssrr={0x89, 0xb, 0x67, [@remote, @empty]}, @cipso={0x86, 0x1c, 0x0, [{0x1, 0x8, "09576fd99f05"}, {0x5, 0xe, "3b7b886315736799754d0f1e"}]}, @noop]}}}}}) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x4cfd, &(0x7f0000001a80)={0x0, 0xe6d8, 0x2, 0x1, 0x150}) 13:18:40 executing program 0: clock_nanosleep(0x1, 0x1, &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f0000000040)) r0 = getpgrp(0x0) sched_rr_get_interval(r0, &(0x7f0000000080)) r1 = getpgrp(r0) sched_rr_get_interval(r1, &(0x7f00000000c0)) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000100)={[0x5ab]}, &(0x7f0000000140), &(0x7f0000000200)={r2, r3+60000000}, 0x8) getpgrp(r1) clock_nanosleep(0x2, 0x0, &(0x7f00000003c0)={0x77359400}, &(0x7f0000000400)) 13:18:40 executing program 7: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)="3c83aba66cc4e07e77a76c5edaaaeb2c142196dcb4948d1bea7cc7c56c0522d946cb5ac4231e337744cd43286b5d06c909b77ba0b1dfa735763b470323ffa9785312df86d54ab56c63f169c855da890385e79ba7c12224570381988ffe8d2b65a733b2b77981ee7865d86a0dd49f2d3d71ba26e167eb653682c8fb6d85ea2cee1876e5e45d8d6f35f9920ea42fd04de7fa1e08de2e345b5c79da16e0f38f87b93c79d554bdf32aa1cdf40cebec88412bea62d90d3915360fdeab0e5ac3a9df3b64a91136855c82d51ab174ac5cd6bd6b9d223bcd6f79ffce263b54bd9999c01459a72d54dffa20773c8d28d00c5e0ea136538365", 0xf4}, 0x1, 0x0, 0x0, 0x4000}, 0x20000001) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000180)) sysinfo(&(0x7f00000001c0)=""/142) ioctl$sock_ifreq(r1, 0x8931, &(0x7f0000000280)={'batadv_slave_0\x00', @ifru_addrs=@in={0x2, 0x0, @local}}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/bus/platform', 0x16001, 0x9) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) 13:18:40 executing program 6: clock_gettime(0x0, &(0x7f0000000000)) 13:18:40 executing program 1: clock_gettime(0x0, &(0x7f0000000000)) 13:18:40 executing program 3: r0 = gettid() waitid(0x2, r0, &(0x7f0000000ac0), 0x2, &(0x7f0000000b40)) 13:18:40 executing program 2: syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)="3c83aba66cc4e07e77a76c5edaaaeb2c142196dcb4948d1bea7cc7c56c0522d946cb5ac4231e337744cd43286b5d06c909b77ba0b1dfa735763b470323ffa9785312df86d54ab56c63f169c855da890385e79ba7c12224570381988ffe8d2b65a733b2b77981ee7865d86a0dd49f2d3d71ba26e167eb653682c8fb6d85ea2cee1876e5e45d8d6f35f9920ea42fd04de7fa1e08de2e345b5c79da16e0f38f87b93c79d554bdf32aa1cdf40cebec88412bea62d90d3915360fdeab0e5ac3a9df3b64a91136855c82d51ab174ac5cd6bd6b9d223bcd6f79ffce263b54bd9999c01459a72d54dffa20773c8d28d00c5e0ea136538365", 0xf4}, 0x1, 0x0, 0x0, 0x4000}, 0x20000001) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/bus/platform', 0x16001, 0x9) sysinfo(&(0x7f0000000840)=""/122) accept(0xffffffffffffffff, &(0x7f0000000ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000b40)=0x80) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000e00)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000dc0)={&(0x7f0000000b80)=@nl=@proc, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000c00)=""/219, 0xdb}, {&(0x7f0000000d00)=""/31, 0x1f}], 0x2, &(0x7f0000000d80)=""/60, 0x3c}, 0x0, 0x12100, 0x1, {0x1}}, 0x7) 13:18:40 executing program 1: clock_gettime(0x5, 0x0) 13:18:40 executing program 3: r0 = gettid() waitid(0x0, r0, &(0x7f0000000ac0), 0x2, &(0x7f0000000b40)) 13:18:40 executing program 6: clock_gettime(0x0, &(0x7f0000000000)) 13:18:40 executing program 2: syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)="3c83aba66cc4e07e77a76c5edaaaeb2c142196dcb4948d1bea7cc7c56c0522d946cb5ac4231e337744cd43286b5d06c909b77ba0b1dfa735763b470323ffa9785312df86d54ab56c63f169c855da890385e79ba7c12224570381988ffe8d2b65a733b2b77981ee7865d86a0dd49f2d3d71ba26e167eb653682c8fb6d85ea2cee1876e5e45d8d6f35f9920ea42fd04de7fa1e08de2e345b5c79da16e0f38f87b93c79d554bdf32aa1cdf40cebec88412bea62d90d3915360fdeab0e5ac3a9df3b64a91136855c82d51ab174ac5cd6bd6b9d223bcd6f79ffce263b54bd9999c01459a72d54dffa20773c8d28d00c5e0ea136538365", 0xf4}, 0x1, 0x0, 0x0, 0x4000}, 0x20000001) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/bus/platform', 0x16001, 0x9) sysinfo(&(0x7f0000000840)=""/122) accept(0xffffffffffffffff, &(0x7f0000000ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000b40)=0x80) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000e00)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000dc0)={&(0x7f0000000b80)=@nl=@proc, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000c00)=""/219, 0xdb}, {&(0x7f0000000d00)=""/31, 0x1f}], 0x2, &(0x7f0000000d80)=""/60, 0x3c}, 0x0, 0x12100, 0x1, {0x1}}, 0x7) 13:18:40 executing program 4: ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000000)={0x5, 0x1, 0x4, 0x1, 0x6}) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0x80, 0x80) socket$inet(0x2, 0x800, 0x4) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000080)=""/4096) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000001100)={'ip6gre0\x00', &(0x7f0000001080)={'syztnl0\x00', 0x0, 0x2f, 0x72, 0x4, 0x7f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, 0x40, 0x40, 0x5, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000001280)={'syztnl0\x00', &(0x7f0000001200)={'ip6gre0\x00', 0x0, 0x4, 0x2, 0x4, 0xffffffff, 0x12, @mcast1, @loopback, 0x7800, 0x8, 0xbc, 0xd96}}) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001300), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x38, r2, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x402c890}, 0x40000) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}, 0x21) r4 = syz_genetlink_get_family_id$team(&(0x7f0000001480), r0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000015c0)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={0x90, r4, 0x12, 0x70bd26, 0x25dfdbfc, {}, [{{0x8, 0x1, r1}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x8000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001740)={'ip_vti0\x00', &(0x7f0000001600)={'ip_vti0\x00', 0x0, 0x7800, 0x0, 0x7ba6, 0x3, {{0x3f, 0x4, 0x0, 0x23, 0xfc, 0x67, 0x0, 0xff, 0x4, 0x0, @private=0xa010100, @empty, {[@generic={0x0, 0xa, "40ebf02080ba2927"}, @timestamp_prespec={0x44, 0xc, 0x43, 0x3, 0x4, [{@loopback, 0x100}]}, @cipso={0x86, 0x51, 0x2, [{0x2, 0x4, "ca84"}, {0x1, 0xe, "0fb6e4ebf725212a1f4921ab"}, {0x0, 0x10, "4e91c861d05464ee62c7e2524b76"}, {0x0, 0x12, "b421989cb68da381e74d9a94bb264171"}, {0x2, 0x8, "0c43715770af"}, {0x7, 0xf, "3af348b6e9faa379f4f34958e2"}]}, @rr={0x7, 0xf, 0x65, [@empty, @dev={0xac, 0x14, 0x14, 0x10}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_prespec={0x44, 0x34, 0xbd, 0x3, 0x2, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1ff}, {@multicast2, 0xbc}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x1}, {@rand_addr=0x64010102, 0xa5f}, {@remote}, {@private=0xa010101, 0x2}]}, @timestamp_prespec={0x44, 0x14, 0x52, 0x3, 0xc, [{@local, 0xff}, {@loopback, 0x7ff}]}, @ssrr={0x89, 0xb, 0x67, [@remote, @empty]}, @cipso={0x86, 0x1c, 0x0, [{0x1, 0x8, "09576fd99f05"}, {0x5, 0xe, "3b7b886315736799754d0f1e"}]}, @noop]}}}}}) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x4cfd, &(0x7f0000001a80)={0x0, 0xe6d8, 0x2, 0x1, 0x150}) 13:18:40 executing program 1: clock_gettime(0x5, 0x0) 13:18:40 executing program 6: clock_gettime(0x0, &(0x7f0000000000)) 13:18:40 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000003680)={'ip6_vti0\x00', 0x0}) 13:18:40 executing program 3: r0 = gettid() waitid(0x0, r0, &(0x7f0000000ac0), 0x2, &(0x7f0000000b40)) VM DIAGNOSIS: 13:18:33 Registers: info registers vcpu 0 RAX=ffffffff86a396c7 RBX=0000000000000002 RCX=ffffffff86a396c6 RDX=0000000000000000 RSI=0000000000000000 RDI=0000000000000001 RBP=ffff88806ce08ae8 RSP=ffff88806ce089d0 R8 =ffffffff86a396ca R9 =0000000000000000 R10=000000000003d20b R11=0000000000006dfd R12=ffff88806ce08af0 R13=ffff88806ce08ad8 R14=ffff88806ce08a40 R15=ffff88806ce08a90 RIP=ffffffff8135fa70 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 000055558cfd2400 00000000 00000000 GS =0000 ffff8880e5342000 00000000 00000000 LDT=0000 fffffe3d00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000020000140 CR3=000000001f051000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=0000000000000021000055a379739030 XMM02=ffffffffffffff00ffff000000000000 XMM03=00000000000000000000000000000000 XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=000055a379739000000055a37974e4f0 XMM06=0000000000000000ffffffff00000003 XMM07=00000000000000000000000000000000 XMM08=6e753c007325732575253a5d73255b00 XMM09=00000000000000000000000000000000 XMM10=00000000002000000000000000200000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=000000000000005b RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff82975135 RDI=ffffffff889c19e0 RBP=ffffffff889c19a0 RSP=ffff88800d4c74c8 R8 =0000000000000000 R9 =ffffed10013c5046 R10=000000000000005b R11=3a3338322f332034 R12=000000000000005b R13=0000000000000010 R14=ffffffff889c19a0 R15=ffffffff82975120 RIP=ffffffff8297518d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555589563400 00000000 00000000 GS =0000 ffff8880e5442000 00000000 00000000 LDT=0000 fffffe6300000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007feee5bcc368 CR3=000000000fba6000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000a60ce07b00000000cec3662e XMM01=000000000000000003515b82db34ca11 XMM02=0000000000000000333bebdfd0a6a21d XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000