Warning: Permanently added '[localhost]:44017' (ECDSA) to the list of known hosts. 2026/01/18 20:44:05 fuzzer started 2026/01/18 20:44:06 dialing manager at localhost:42157 syzkaller login: [ 52.617189] cgroup: Unknown subsys name 'net' [ 52.677940] cgroup: Unknown subsys name 'cpuset' [ 52.689255] cgroup: Unknown subsys name 'rlimit' 2026/01/18 20:44:17 syscalls: 208 2026/01/18 20:44:17 code coverage: enabled 2026/01/18 20:44:17 comparison tracing: enabled 2026/01/18 20:44:17 extra coverage: enabled 2026/01/18 20:44:17 setuid sandbox: enabled 2026/01/18 20:44:17 namespace sandbox: enabled 2026/01/18 20:44:17 Android sandbox: enabled 2026/01/18 20:44:17 fault injection: enabled 2026/01/18 20:44:17 leak checking: enabled 2026/01/18 20:44:17 net packet injection: enabled 2026/01/18 20:44:17 net device setup: enabled 2026/01/18 20:44:17 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2026/01/18 20:44:17 devlink PCI setup: PCI device 0000:00:10.0 is not available 2026/01/18 20:44:17 USB emulation: enabled 2026/01/18 20:44:17 hci packet injection: enabled 2026/01/18 20:44:17 wifi device emulation: enabled 2026/01/18 20:44:17 802.15.4 emulation: enabled 2026/01/18 20:44:17 fetching corpus: 0, signal 0/0 (executing program) 2026/01/18 20:44:18 starting 8 fuzzer processes 20:44:18 executing program 0: r0 = getuid() r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TUNSETOWNER(r1, 0x400454cc, r0) ioprio_get$uid(0x0, r0) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000040)={'wg2\x00'}) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x1) r2 = syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x46d, 0xc101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x9, 0xa0, 0xfd, [{{0x9, 0x4, 0x0, 0xf9, 0x1, 0x3, 0x1, 0x0, 0x5, {0x9, 0x21, 0x7, 0x3f, 0x1, {0x22, 0xc46}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x4, 0x1f, 0x8}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0xe2, 0x3, 0x40}}]}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x10, 0x0, 0x1f, 0x20, 0x8}, 0x72, &(0x7f0000000100)={0x5, 0xf, 0x72, 0x4, [@wireless={0xb, 0x10, 0x1, 0x2, 0x0, 0x3, 0x5, 0x80, 0x80}, @generic={0x3f, 0x10, 0x1, "13eabcbedc7e85361568ba82957512f9fc3dc29c3335eacf761eb23847dd322ade415ab9dabe332209a130b7c151897613085a1787d6b6748b0354d0"}, @ssp_cap={0x18, 0x10, 0xa, 0x3f, 0x3, 0x1, 0xff0f, 0x9, [0x0, 0x3fc0, 0xc000]}, @wireless={0xb, 0x10, 0x1, 0x2, 0x40, 0x3e, 0xc7, 0xffff, 0x8}]}, 0x1, [{0xc7, &(0x7f0000000180)=@string={0xc7, 0x3, "7f126e6ffa050bba81edaf647a108d9fd37fbe3d11c15a3707477a6757d84b545a36669de4aa342241c88f7d526936f675209a74339730655071e3fcb25a208bbc069d6df4c07b4705d393a371da12cad8aaf6778ad74c8d58df24aaa77a7230a9f3628e71abaf0f819fdc49a07c577564df79e1300f987b6d6f0677e40fce2bb108a04a299c04e4bf6756185d8f38f7b15524ba0d91f7e2e25eec64a5523257550e35539b7efd2f71cc57e3428c7c38353ccfddec9577d5854e54703d3bf8b4132cd5932a"}}]}) syz_usb_ep_write(r2, 0x1f, 0x17, &(0x7f00000002c0)="18676c5fbcc850892fbc37961384e6dc244a9c136edf28") ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000300)=[0x9, 0x7]) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r3, 0x29, 0x2d, &(0x7f0000000340)={0x0, {{0xa, 0x4e20, 0x9, @mcast2, 0x83}}}, 0x88) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000400)=""/151) ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, &(0x7f00000004c0)=""/9) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000005c0)={'ip6_vti0\x00', &(0x7f0000000540)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0x8, 0x8000, 0x2e, @private0, @remote, 0x7800, 0x8, 0xb0b, 0x1ff}}) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000800)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000600)={0x1bc, 0x0, 0x2, 0x70bd29, 0x25dfdbfc, {}, [{{0x8}, {0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r4}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x81}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r5 = syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000840)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x46a, 0x23, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x7f, 0x60, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x8, {0x9, 0x21, 0x8, 0x3f, 0x1, {0x22, 0x4d6}}, {{{0x9, 0x5, 0x81, 0x3, 0x1af, 0x3, 0x0, 0x8}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x9, 0xad, 0x5a}}]}}}]}}]}}, &(0x7f0000000a80)={0xa, &(0x7f0000000880)={0xa, 0x6, 0x201, 0x8, 0x3f, 0x55, 0xff, 0x4}, 0x112, &(0x7f00000008c0)={0x5, 0xf, 0x112, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x0, 0x4, 0x5, 0xb4}, @generic={0xee, 0x10, 0x4, "d0031eae4efd237341c8a1bdb1418904fc37f74fdabfad1df4fe696990c75cc8518ee96883820f53592b5ba731abeef63833d04c5340b79bff983649da27141de3a17e7d857083f7f8c13daf1e65de8ff19e6a50698f4e1d7bd3e6c943f1e27efd3bd1764199faf293d79d65c7acb5cc89446d89f9b70b1497b481fbc6d8d97602a51e7dfcf1a3893bf6c45e2f44f0570480ac72d25d25c82f01b3d6ebaab63fb5a5f4fd0482bc1de2fb31178f6f3e72bac9d72289115497618203e4211f1f810b23a49c119d48fe0db66a3b71fa247b94f3c2f657e92dd120fe78a0c943d5d8b0930d89f099b08058e47b"}, @ssp_cap={0x14, 0x10, 0xa, 0xcd, 0x2, 0x0, 0x7800, 0x8, [0xfe8000, 0xff00]}]}, 0x2, [{0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x406}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0xf0ff}}]}) syz_usb_ep_read(r5, 0x3f, 0x4b, &(0x7f0000000ac0)=""/75) getuid() socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000cc0)={'ip6_vti0\x00', &(0x7f0000000c40)={'ip6gre0\x00', 0x0, 0x56, 0x6, 0xff, 0x2, 0x5a, @private2, @initdev={0xfe, 0x88, '\x00', 0x7, 0x0}, 0x20, 0x1, 0xffff, 0x7}}) 20:44:18 executing program 1: ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000000)={'vlan0\x00'}) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000040)={0x1, 0x4, [@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="65c82b4389bb"]}) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x102, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000140)) eventfd(0x8) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000180)) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f00000001c0)) write$eventfd(r1, &(0x7f0000000200)=0x4, 0x8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x50800, 0x0) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000280)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$TUNSETIFINDEX(r3, 0x400454da, &(0x7f0000000300)) r4 = socket(0x2, 0x80003, 0x3) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, &(0x7f0000000340)={0x2c, 0x9, '\x00', [@hao={0xc9, 0x10, @mcast2}, @ra={0x5, 0x2, 0xffea}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x8}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x58) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f00000003c0)={'veth0_to_hsr\x00'}) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000400), 0x20000, 0x0) ioctl$TUNSETOWNER(r5, 0x400454cc, 0x0) 20:44:18 executing program 2: io_uring_enter(0xffffffffffffffff, 0x2d60, 0x28f3, 0x1, &(0x7f0000000000)={[0x1ff]}, 0x8) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000001300)=[{&(0x7f0000000040)=""/172, 0xac}, {&(0x7f0000000100)=""/212, 0xd4}, {&(0x7f0000000200)=""/116, 0x74}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/82, 0x52}], 0x5) r0 = io_uring_setup(0x4582, &(0x7f0000001380)={0x0, 0xb150, 0x8, 0x6, 0x38f}) r1 = syz_io_uring_setup(0x40, &(0x7f0000001400)={0x0, 0x108e, 0x1, 0x0, 0x1e, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001480), &(0x7f00000014c0)) ioprio_get$uid(0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001580)={'ip6_vti0\x00', &(0x7f0000001500)={'syztnl0\x00', 0x0, 0x29, 0x7f, 0x5, 0x81, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x7, 0xf5e, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000001640)={'syztnl1\x00', &(0x7f00000015c0)={'ip6_vti0\x00', r2, 0x4, 0x1, 0x0, 0x80000001, 0x40, @ipv4={'\x00', '\xff\xff', @local}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7800, 0x10, 0x4, 0x400000}}) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000016c0)='ns/uts\x00') sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001780)={&(0x7f0000001700)={0x6c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@GTPA_O_TEI={0x8}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r2}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_NET_NS_FD={0x8, 0x7, r3}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x41) r4 = syz_io_uring_setup(0x1382, &(0x7f0000001800)={0x0, 0x419b, 0x10, 0x0, 0x2f2, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000001880), &(0x7f00000018c0)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0) syz_io_uring_setup(0x4d2f, &(0x7f0000001900)={0x0, 0xacea, 0x10, 0x3, 0x5, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001980), &(0x7f00000019c0)) syz_genetlink_get_family_id$nbd(&(0x7f0000001a00), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001a80), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r5, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x44, r6, 0x0, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @multicast2}}, @NLBL_MGMT_A_DOMAIN={0x14, 0x1, '^-[#\'@:/[@^*\\$&\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x8010}, 0x20000000) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_DSTOPTS(r7, 0x29, 0x3b, &(0x7f0000001bc0)={0xff}, 0x8) r8 = io_uring_setup(0x7d7f, &(0x7f0000001c00)={0x0, 0x6e7, 0x8, 0x1, 0x11a, 0x0, r0}) io_uring_setup(0x778d, &(0x7f0000001c80)={0x0, 0xf775, 0x10, 0x0, 0x3a8, 0x0, r8}) 20:44:19 executing program 3: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f0000000000)=""/148) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f00000000c0)=""/40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x10000, 0x0) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000140)=""/183) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x901, 0x0) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000280)=0x7) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x44002, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000300)=""/4096) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000001300), 0x101002, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000001340)={'netpci0\x00'}) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001380), 0x70380, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000001400), r0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r5, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x2c, r6, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x10001}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000024) ioctl$TUNGETIFF(r3, 0x800454d2, &(0x7f0000001500)={'ipvlan1\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x17) ioctl$TUNGETFEATURES(r5, 0x800454cf, &(0x7f0000001540)) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x20, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xc650}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x48000) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000001680)) 20:44:19 executing program 4: ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000080)=@req={0x28, &(0x7f0000000040)={'ip6tnl0\x00', @ifru_data=&(0x7f0000000000)="f17494704e68b47eaad8fb9da92ff99b5cce055ddc13dc72692e77db7acc710c"}}) r0 = syz_io_uring_setup(0x682e, &(0x7f00000000c0)={0x0, 0x61b0, 0x4, 0x1, 0x2d2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)) syz_io_uring_setup(0x6fa4, &(0x7f00000001c0)={0x0, 0x45b1, 0x20, 0x2, 0x62}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fef000/0xe000)=nil, &(0x7f0000000240), &(0x7f0000000280)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_SEND={0x1a, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)="b72d90afab83524e5a67d39021a498ec674b4d2ca9113ff899e0d0f9b83e4bf0e5c7aa9df47be19e9a203e183c82e8042b2828fee967fd5f214e5a80dad31344738967859ee7c7408a45a6d559e9a086f7e05e104e2a4f30aac4aa379c63d71cd8e1c3343a37e93d01bc888eb7592e29d80dfb0e02f86afd532c9d0cfaf2a42c924a791fd05dd6f753e129d61651f1de6a9f72994cbb6a582ac3531e36fe5fa6477b2b98f35e1dd5", 0xa8, 0x840, 0x1, {0x0, r3}}, 0xfffff516) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff2000/0x1000)=nil, 0x1000, 0x2000000, 0x10010, r0, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000480)=@buf={0xbf, &(0x7f00000003c0)="2b4d53922143fe2395390a2145533f7bdcdb30c3bf09285c2bf6fe927deea3a89f0dbabebefdfa91c21096b9dddcbfa0d039b15c68be2b65234ebc1b9b90bfbf785f6481eab0db2dc826e1f7c8e0b94ea9641466150b090811b54951baefc0cde8c67d871e2c5d0d431598e7ada503479215055a88cd67c2e709732acfb98dc78e48141083d9bf6983dec0dd4acf6c6382bec2eec2bf195d806f2955a8ce60b05fe65bff960999faad64df00c7588262a6320066f76791f5459f9d9de1749e"}) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [""]}, 0x14}}, 0x40881) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r4 = io_uring_setup(0x6033, &(0x7f00000005c0)={0x0, 0xacab, 0x4, 0x0, 0x1, 0x0, r0}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x2000000, 0x13, r4, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002580)=[{{&(0x7f0000000640)=@isdn, 0x80, &(0x7f0000000740)=[{&(0x7f00000006c0)=""/80, 0x50}], 0x1, &(0x7f0000000780)=""/80, 0x50}}, {{&(0x7f0000000800)=@generic, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000880)=""/215, 0xd7}, {&(0x7f0000000980)=""/145, 0x91}, {&(0x7f0000000a40)=""/187, 0xbb}], 0x3}, 0x2}, {{0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000000b40)=""/121, 0x79}, {&(0x7f0000000bc0)=""/162, 0xa2}, {&(0x7f0000000c80)=""/201, 0xc9}, {&(0x7f0000000d80)=""/19, 0x13}, {&(0x7f0000000dc0)=""/4096, 0x1000}, {&(0x7f0000001dc0)=""/206, 0xce}, {&(0x7f0000001ec0)=""/33, 0x21}, {&(0x7f0000001f00)=""/27, 0x1b}, {&(0x7f0000001f40)=""/239, 0xef}], 0x9, &(0x7f0000002100)=""/234, 0xea}, 0x2}, {{&(0x7f0000002200)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000002540)=[{&(0x7f0000002280)=""/195, 0xc3}, {&(0x7f0000002380)=""/229, 0xe5}, {&(0x7f0000002480)=""/167, 0xa7}], 0x3}, 0x800}], 0x4, 0x2000, &(0x7f0000002680)={0x0, 0x3938700}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x20010, r0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f00000026c0), 0x1) r5 = syz_io_uring_setup(0x4170, &(0x7f0000002700)={0x0, 0xc7db, 0x52c9ea573c6af5bf, 0x1, 0x1af, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000002780), &(0x7f00000027c0)) r6 = syz_io_uring_setup(0x51c7, &(0x7f0000002800)={0x0, 0x5d6e, 0x0, 0x3, 0x38a, 0x0, r5}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000002880), &(0x7f00000028c0)) r7 = syz_io_uring_setup(0x3e47, &(0x7f0000002900)={0x0, 0x2baf, 0x4, 0x1, 0x62, 0x0, r6}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000002980), &(0x7f00000029c0)) syz_io_uring_setup(0x3a60, &(0x7f0000002a00)={0x0, 0x5114, 0x4, 0x3, 0xbc, 0x0, r7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000002a80), &(0x7f0000002ac0)) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000002b40), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000002c00)={&(0x7f0000002b00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002bc0)={&(0x7f0000002b80)={0x30, r8, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_TID={0xc, 0x3, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x850) [ 63.989697] audit: type=1400 audit(1768769059.052:7): avc: denied { execmem } for pid=274 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 20:44:19 executing program 5: ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x2f, 0x2, 0x9, 0x9b8c, 0x20, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x20, 0x1, 0xfff0000, 0x200}}) socketpair(0x28, 0xa, 0x5, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000100)=0x5, 0x4) socketpair(0x1e, 0x6, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r3) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r3) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, r4, 0x10, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7, 0x56}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x54}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6f}]}, 0x50}, 0x1, 0x0, 0x0, 0x801}, 0x8801) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000380), r2) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x3c, r5, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48c9ea108b1f44ee}, 0x800) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x18, 0x0, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x40040c0) socketpair(0x6, 0x4, 0x8001, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000580), r7) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000600), r9) r10 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r10, 0x89f3, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f0000000640)={'syztnl1\x00', r0, 0x29, 0x3, 0xfe, 0x80000000, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x40, 0x7, 0x3, 0xffffff81}}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r8, &(0x7f0000000f40)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000b40)={0x39c, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [{{0x8, 0x1, r0}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8, 0x1, r0}, {0x194, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xba66}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8, 0x1, r11}, {0x198, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x42}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r11}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x80}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xa4f}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r0}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}]}, 0x39c}, 0x1, 0x0, 0x0, 0x50}, 0x2000a004) 20:44:19 executing program 7: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x29, 0x2, 0x9, 0x1000, 0x7f, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40, 0x1, 0xfffffff9, 0x3}}) socketpair(0x22, 0x3, 0x4e3, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r2, 0x89f6, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'ip6gre0\x00', r0, 0x4, 0xfc, 0x20, 0xffff, 0x30, @remote, @loopback, 0x40, 0x8020, 0x6a1a, 0xffff}}) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f00000001c0)=0x4, 0x4) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, 0x0, 0x28, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xff}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040002}, 0xc050) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000380)={'sit0\x00', &(0x7f0000000300)={'ip6gre0\x00', r3, 0x4, 0x7f, 0x5, 0x2, 0x8, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @loopback, 0x1, 0x1, 0x3, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r2, 0x89f4, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'ip6tnl0\x00', r4, 0x29, 0xfe, 0xf7, 0x7, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, 0x8000, 0x7, 0x7, 0x401}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000500)={'ip6tnl0\x00', &(0x7f0000000480)={'syztnl2\x00', r4, 0x29, 0x81, 0x8, 0x7, 0xa, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8, 0x8000, 0x20, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000005c0)={'ip6tnl0\x00', &(0x7f0000000540)={'syztnl0\x00', r6, 0x29, 0x0, 0x3f, 0x8000, 0x8, @remote, @local, 0x700, 0x48, 0x0, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000680)={'syztnl1\x00', &(0x7f0000000600)={'ip6gre0\x00', r3, 0x4, 0x7, 0x7, 0xffffffff, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x700, 0x7800, 0x9, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r2, 0x89f4, &(0x7f0000000740)={'sit0\x00', &(0x7f00000006c0)={'ip6gre0\x00', r6, 0x2f, 0x0, 0xff, 0x7, 0x11, @loopback, @mcast2, 0x40, 0x700, 0x2fdf9be1, 0x3}}) getsockopt$sock_int(r2, 0x1, 0x23, &(0x7f0000000780), &(0x7f00000007c0)=0x4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000880)={'ip6tnl0\x00', &(0x7f0000000800)={'syztnl0\x00', r7, 0x2f, 0x6, 0xc7, 0x7, 0x71, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x8, 0x7, 0x1, 0x4}}) r8 = socket$inet6(0xa, 0x4, 0x3) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f00000008c0)={'team0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r1, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x40, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xf}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xf}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000a80)={'ip6_vti0\x00', &(0x7f0000000a00)={'syztnl2\x00', r3, 0x29, 0x8, 0x1, 0x3, 0x10, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80, 0x7800, 0x9, 0x8}}) syz_genetlink_get_family_id$team(&(0x7f0000000ac0), r8) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000b80)={'ip6tnl0\x00', &(0x7f0000000b00)={'ip6gre0\x00', r6, 0x2f, 0x8c, 0xff, 0x2, 0x4, @mcast1, @mcast1, 0x10, 0x40, 0xffff, 0x80000001}}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000001740)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001700)={&(0x7f0000000f40)={0x7b4, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8, 0x1, r7}, {0x170, 0x2, 0x0, 0x1, [{0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x8, 0x7, 0x4, 0x1}, {0x0, 0x0, 0x8, 0x24452c92}, {0xe6f4, 0xff, 0x7, 0x1}, {0x5, 0x80, 0x5}, {0x4, 0xf9, 0x4, 0x8000}, {0x7, 0x5, 0x2, 0x9}, {0x3, 0x1, 0x87, 0x1}, {0x0, 0x0, 0x3, 0x975d}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r9}, {0x4}}, {{0x8}, {0x13c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r3}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8001}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5c}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x44823a47}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8, 0x1, r10}, {0x224, 0x2, 0x0, 0x1, [{0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x2, 0x9, 0xb4, 0x90}, {0x4, 0x1, 0x7f, 0x80000000}, {0x67, 0x0, 0x0, 0xfffffff9}, {0x7, 0x3f, 0xfb, 0x71}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x8001, 0x7, 0x7, 0x3}, {0x8001, 0x7, 0x1a, 0xffff}, {0x4, 0x3f, 0x20, 0x6e40ef2c}, {0x166, 0x8d, 0x7f}, {0x1e, 0x4, 0x1f, 0x8001}, {0x0, 0x20, 0x9, 0x400}, {0x1, 0x4, 0x3f, 0xffffffff}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xf4af}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r0}}}]}}]}, 0x7b4}, 0x1, 0x0, 0x0, 0x40}, 0x0) 20:44:19 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_FAMILY={0x6}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0xc000) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x6c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010100}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010102}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x4c, 0x0, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x7f}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x4}, @IEEE802154_ATTR_CCA_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4c00c000) r2 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000540), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000005c0)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000680)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x4, 0x8, 0x5a, @dev={0xfe, 0x80, '\x00', 0x2a}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7800, 0x20, 0x7, 0x4aa89fc9}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000740)={'sit0\x00', &(0x7f00000006c0)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x4, 0x3, 0x40, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, 0x1, 0x1, 0x2, 0x100}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000800)={'ip6tnl0\x00', &(0x7f0000000780)={'sit0\x00', 0x0, 0x4, 0x24, 0x79, 0xfffffffd, 0x7, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x700, 0x0, 0x20}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000940)={'ip6tnl0\x00', &(0x7f00000008c0)={'sit0\x00', 0x0, 0x29, 0x1, 0xf7, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, @remote, 0x700, 0x80, 0x3, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000a00)={'syztnl2\x00', &(0x7f0000000980)={'syztnl1\x00', 0x0, 0x2f, 0x9, 0xf0, 0x4, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7800, 0x0, 0x79, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000ac0)={'ip6tnl0\x00', &(0x7f0000000a40)={'ip6_vti0\x00', 0x0, 0x29, 0x4, 0x1, 0x7ff, 0x22, @loopback, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x7, 0x80, 0xc78, 0x1f}}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001100)={&(0x7f0000000b00)={0x5e8, r3, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8}, {0xc4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xcac}}, {0x8, 0x6, r5}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x184, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r7}, {0xfc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8}, {0x228, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r10}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x21}}, {0x8, 0x6, r11}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x2, 0xff, 0x18, 0x2}]}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x401, 0xaf, 0x4, 0x5}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x89e}}}]}}]}, 0x5e8}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) syz_open_dev$evdev(&(0x7f0000001180), 0x3c2, 0x200) r12 = openat$vcs(0xffffffffffffff9c, &(0x7f00000011c0), 0x18b000, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r12, &(0x7f0000001340)={&(0x7f0000001200), 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x70, 0x0, 0x28, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x21}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x31}, @NL80211_ATTR_PMKID={0x14, 0x55, "de6a7d645d6d49b3b5b65b5753264841"}, @NL80211_ATTR_SSID={0x5, 0x34, @random='C'}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x48}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@broadcast}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x38}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x2e}, @NL80211_ATTR_SSID={0x7, 0x34, @random="219d02"}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x4084) [ 65.116368] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 65.119815] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 65.123227] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 65.130993] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 65.134805] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 65.242639] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 65.251167] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 65.252572] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 65.257606] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 65.269830] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 65.272088] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 65.279146] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 65.282752] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 65.300907] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 65.303182] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 65.305075] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 65.308130] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 65.313765] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 65.317096] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 65.331801] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 65.435144] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 65.436775] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 65.453985] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 65.457044] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 65.457145] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 65.458125] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 65.460729] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 65.461991] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 65.463183] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 65.463636] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 65.469959] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 65.469988] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 65.473551] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 65.477990] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 65.479076] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 65.481057] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 65.482904] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 65.488580] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 65.490301] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 65.513530] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 67.213146] Bluetooth: hci0: command tx timeout [ 67.340472] Bluetooth: hci2: command tx timeout [ 67.340540] Bluetooth: hci1: command tx timeout [ 67.404244] Bluetooth: hci3: command tx timeout [ 67.531550] Bluetooth: hci7: command tx timeout [ 67.534166] Bluetooth: hci4: command tx timeout [ 67.596511] Bluetooth: hci6: command tx timeout [ 67.597201] Bluetooth: hci5: command tx timeout [ 69.260503] Bluetooth: hci0: command tx timeout [ 69.387550] Bluetooth: hci2: command tx timeout [ 69.388754] Bluetooth: hci1: command tx timeout [ 69.452495] Bluetooth: hci3: command tx timeout [ 69.581140] Bluetooth: hci4: command tx timeout [ 69.581422] Bluetooth: hci7: command tx timeout [ 69.644484] Bluetooth: hci5: command tx timeout [ 69.644534] Bluetooth: hci6: command tx timeout [ 71.307537] Bluetooth: hci0: command tx timeout [ 71.436444] Bluetooth: hci1: command tx timeout [ 71.436486] Bluetooth: hci2: command tx timeout [ 71.500509] Bluetooth: hci3: command tx timeout [ 71.627630] Bluetooth: hci4: command tx timeout [ 71.628456] Bluetooth: hci7: command tx timeout [ 71.692427] Bluetooth: hci5: command tx timeout [ 71.692468] Bluetooth: hci6: command tx timeout [ 73.357314] Bluetooth: hci0: command tx timeout [ 73.483568] Bluetooth: hci2: command tx timeout [ 73.484482] Bluetooth: hci1: command tx timeout [ 73.547559] Bluetooth: hci3: command tx timeout [ 73.675482] Bluetooth: hci4: command tx timeout [ 73.676609] Bluetooth: hci7: command tx timeout [ 73.740448] Bluetooth: hci6: command tx timeout [ 73.740464] Bluetooth: hci5: command tx timeout [ 100.159383] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.176076] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.311213] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.311863] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.797281] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.797948] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 20:44:55 executing program 1: ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000000)={'vlan0\x00'}) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000040)={0x1, 0x4, [@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="65c82b4389bb"]}) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x102, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000140)) eventfd(0x8) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000180)) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f00000001c0)) write$eventfd(r1, &(0x7f0000000200)=0x4, 0x8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x50800, 0x0) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000280)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$TUNSETIFINDEX(r3, 0x400454da, &(0x7f0000000300)) r4 = socket(0x2, 0x80003, 0x3) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, &(0x7f0000000340)={0x2c, 0x9, '\x00', [@hao={0xc9, 0x10, @mcast2}, @ra={0x5, 0x2, 0xffea}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x8}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x58) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f00000003c0)={'veth0_to_hsr\x00'}) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000400), 0x20000, 0x0) ioctl$TUNSETOWNER(r5, 0x400454cc, 0x0) 20:44:56 executing program 1: ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000000)={'vlan0\x00'}) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000040)={0x1, 0x4, [@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="65c82b4389bb"]}) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x102, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000140)) eventfd(0x8) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000180)) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f00000001c0)) write$eventfd(r1, &(0x7f0000000200)=0x4, 0x8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x50800, 0x0) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000280)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$TUNSETIFINDEX(r3, 0x400454da, &(0x7f0000000300)) r4 = socket(0x2, 0x80003, 0x3) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, &(0x7f0000000340)={0x2c, 0x9, '\x00', [@hao={0xc9, 0x10, @mcast2}, @ra={0x5, 0x2, 0xffea}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x8}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x58) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f00000003c0)={'veth0_to_hsr\x00'}) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000400), 0x20000, 0x0) ioctl$TUNSETOWNER(r5, 0x400454cc, 0x0) [ 100.986709] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.987319] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 20:44:56 executing program 1: ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000000)={'vlan0\x00'}) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000040)={0x1, 0x4, [@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="65c82b4389bb"]}) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x102, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000140)) eventfd(0x8) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000180)) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f00000001c0)) write$eventfd(r1, &(0x7f0000000200)=0x4, 0x8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x50800, 0x0) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000280)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$TUNSETIFINDEX(r3, 0x400454da, &(0x7f0000000300)) r4 = socket(0x2, 0x80003, 0x3) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, &(0x7f0000000340)={0x2c, 0x9, '\x00', [@hao={0xc9, 0x10, @mcast2}, @ra={0x5, 0x2, 0xffea}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x8}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x58) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f00000003c0)={'veth0_to_hsr\x00'}) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000400), 0x20000, 0x0) ioctl$TUNSETOWNER(r5, 0x400454cc, 0x0) 20:44:56 executing program 1: ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000000)={'vlan0\x00'}) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000040)={0x1, 0x4, [@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="65c82b4389bb"]}) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x102, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000140)) eventfd(0x8) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000180)) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f00000001c0)) write$eventfd(r1, &(0x7f0000000200)=0x4, 0x8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x50800, 0x0) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000280)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$TUNSETIFINDEX(r3, 0x400454da, &(0x7f0000000300)) r4 = socket(0x2, 0x80003, 0x3) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, &(0x7f0000000340)={0x2c, 0x9, '\x00', [@hao={0xc9, 0x10, @mcast2}, @ra={0x5, 0x2, 0xffea}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x8}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x58) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f00000003c0)={'veth0_to_hsr\x00'}) openat$vcs(0xffffffffffffff9c, &(0x7f0000000400), 0x20000, 0x0) 20:44:56 executing program 1: ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000000)={'vlan0\x00'}) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000040)={0x1, 0x4, [@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="65c82b4389bb"]}) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x102, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000140)) eventfd(0x8) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000180)) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f00000001c0)) write$eventfd(r1, &(0x7f0000000200)=0x4, 0x8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x50800, 0x0) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000280)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$TUNSETIFINDEX(r3, 0x400454da, &(0x7f0000000300)) r4 = socket(0x2, 0x80003, 0x3) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, &(0x7f0000000340)={0x2c, 0x9, '\x00', [@hao={0xc9, 0x10, @mcast2}, @ra={0x5, 0x2, 0xffea}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x8}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x58) openat$vcs(0xffffffffffffff9c, &(0x7f0000000400), 0x20000, 0x0) [ 101.391549] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.392157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 20:44:56 executing program 1: ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000000)={'vlan0\x00'}) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000040)={0x1, 0x4, [@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="65c82b4389bb"]}) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x102, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000140)) eventfd(0x8) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000180)) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f00000001c0)) write$eventfd(r1, &(0x7f0000000200)=0x4, 0x8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x50800, 0x0) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000280)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$TUNSETIFINDEX(r3, 0x400454da, &(0x7f0000000300)) socket(0x2, 0x80003, 0x3) openat$vcs(0xffffffffffffff9c, &(0x7f0000000400), 0x20000, 0x0) 20:44:56 executing program 1: ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000000)={'vlan0\x00'}) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000040)={0x1, 0x4, [@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="65c82b4389bb"]}) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x102, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000140)) eventfd(0x8) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000180)) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f00000001c0)) write$eventfd(r1, &(0x7f0000000200)=0x4, 0x8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x50800, 0x0) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000280)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$TUNSETIFINDEX(r3, 0x400454da, &(0x7f0000000300)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000400), 0x20000, 0x0) [ 101.539736] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.540371] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 20:44:56 executing program 1: ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000000)={'vlan0\x00'}) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000040)={0x1, 0x4, [@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="65c82b4389bb"]}) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x102, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000140)) eventfd(0x8) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000180)) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f00000001c0)) write$eventfd(r1, &(0x7f0000000200)=0x4, 0x8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x50800, 0x0) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000280)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$TUNSETIFINDEX(r3, 0x400454da, &(0x7f0000000300)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000400), 0x20000, 0x0) [ 101.670594] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.671769] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.826007] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.826675] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.058829] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.059720] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.085061] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 102.173383] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.174034] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.602753] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.604157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.705038] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.705764] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.468543] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.469159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.504310] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.504946] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.693139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.693818] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.726704] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.727330] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 20:45:08 executing program 1: ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000000)={'vlan0\x00'}) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000040)={0x1, 0x4, [@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="65c82b4389bb"]}) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x102, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000140)) eventfd(0x8) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000180)) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f00000001c0)) write$eventfd(r1, &(0x7f0000000200)=0x4, 0x8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x50800, 0x0) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000280)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$TUNSETIFINDEX(r3, 0x400454da, &(0x7f0000000300)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000400), 0x20000, 0x0) 20:45:08 executing program 0: r0 = getuid() r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TUNSETOWNER(r1, 0x400454cc, r0) ioprio_get$uid(0x0, r0) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000040)={'wg2\x00'}) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x1) r2 = syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x46d, 0xc101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x9, 0xa0, 0xfd, [{{0x9, 0x4, 0x0, 0xf9, 0x1, 0x3, 0x1, 0x0, 0x5, {0x9, 0x21, 0x7, 0x3f, 0x1, {0x22, 0xc46}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x4, 0x1f, 0x8}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0xe2, 0x3, 0x40}}]}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x10, 0x0, 0x1f, 0x20, 0x8}, 0x72, &(0x7f0000000100)={0x5, 0xf, 0x72, 0x4, [@wireless={0xb, 0x10, 0x1, 0x2, 0x0, 0x3, 0x5, 0x80, 0x80}, @generic={0x3f, 0x10, 0x1, "13eabcbedc7e85361568ba82957512f9fc3dc29c3335eacf761eb23847dd322ade415ab9dabe332209a130b7c151897613085a1787d6b6748b0354d0"}, @ssp_cap={0x18, 0x10, 0xa, 0x3f, 0x3, 0x1, 0xff0f, 0x9, [0x0, 0x3fc0, 0xc000]}, @wireless={0xb, 0x10, 0x1, 0x2, 0x40, 0x3e, 0xc7, 0xffff, 0x8}]}, 0x1, [{0xc7, &(0x7f0000000180)=@string={0xc7, 0x3, "7f126e6ffa050bba81edaf647a108d9fd37fbe3d11c15a3707477a6757d84b545a36669de4aa342241c88f7d526936f675209a74339730655071e3fcb25a208bbc069d6df4c07b4705d393a371da12cad8aaf6778ad74c8d58df24aaa77a7230a9f3628e71abaf0f819fdc49a07c577564df79e1300f987b6d6f0677e40fce2bb108a04a299c04e4bf6756185d8f38f7b15524ba0d91f7e2e25eec64a5523257550e35539b7efd2f71cc57e3428c7c38353ccfddec9577d5854e54703d3bf8b4132cd5932a"}}]}) syz_usb_ep_write(r2, 0x1f, 0x17, &(0x7f00000002c0)="18676c5fbcc850892fbc37961384e6dc244a9c136edf28") ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000300)=[0x9, 0x7]) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r3, 0x29, 0x2d, &(0x7f0000000340)={0x0, {{0xa, 0x4e20, 0x9, @mcast2, 0x83}}}, 0x88) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000400)=""/151) ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, &(0x7f00000004c0)=""/9) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000005c0)={'ip6_vti0\x00', &(0x7f0000000540)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0x8, 0x8000, 0x2e, @private0, @remote, 0x7800, 0x8, 0xb0b, 0x1ff}}) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000800)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000600)={0x1bc, 0x0, 0x2, 0x70bd29, 0x25dfdbfc, {}, [{{0x8}, {0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r4}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x81}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r5 = syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000840)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x46a, 0x23, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x7f, 0x60, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x8, {0x9, 0x21, 0x8, 0x3f, 0x1, {0x22, 0x4d6}}, {{{0x9, 0x5, 0x81, 0x3, 0x1af, 0x3, 0x0, 0x8}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x9, 0xad, 0x5a}}]}}}]}}]}}, &(0x7f0000000a80)={0xa, &(0x7f0000000880)={0xa, 0x6, 0x201, 0x8, 0x3f, 0x55, 0xff, 0x4}, 0x112, &(0x7f00000008c0)={0x5, 0xf, 0x112, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x0, 0x4, 0x5, 0xb4}, @generic={0xee, 0x10, 0x4, "d0031eae4efd237341c8a1bdb1418904fc37f74fdabfad1df4fe696990c75cc8518ee96883820f53592b5ba731abeef63833d04c5340b79bff983649da27141de3a17e7d857083f7f8c13daf1e65de8ff19e6a50698f4e1d7bd3e6c943f1e27efd3bd1764199faf293d79d65c7acb5cc89446d89f9b70b1497b481fbc6d8d97602a51e7dfcf1a3893bf6c45e2f44f0570480ac72d25d25c82f01b3d6ebaab63fb5a5f4fd0482bc1de2fb31178f6f3e72bac9d72289115497618203e4211f1f810b23a49c119d48fe0db66a3b71fa247b94f3c2f657e92dd120fe78a0c943d5d8b0930d89f099b08058e47b"}, @ssp_cap={0x14, 0x10, 0xa, 0xcd, 0x2, 0x0, 0x7800, 0x8, [0xfe8000, 0xff00]}]}, 0x2, [{0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x406}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0xf0ff}}]}) syz_usb_ep_read(r5, 0x3f, 0x4b, &(0x7f0000000ac0)=""/75) getuid() socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000cc0)={'ip6_vti0\x00', &(0x7f0000000c40)={'ip6gre0\x00', 0x0, 0x56, 0x6, 0xff, 0x2, 0x5a, @private2, @initdev={0xfe, 0x88, '\x00', 0x7, 0x0}, 0x20, 0x1, 0xffff, 0x7}}) 20:45:08 executing program 5: ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x2f, 0x2, 0x9, 0x9b8c, 0x20, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x20, 0x1, 0xfff0000, 0x200}}) socketpair(0x28, 0xa, 0x5, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000100)=0x5, 0x4) socketpair(0x1e, 0x6, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r3) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r3) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, r4, 0x10, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7, 0x56}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x54}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6f}]}, 0x50}, 0x1, 0x0, 0x0, 0x801}, 0x8801) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000380), r2) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x3c, r5, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48c9ea108b1f44ee}, 0x800) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x18, 0x0, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x40040c0) socketpair(0x6, 0x4, 0x8001, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000580), r7) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000600), r9) r10 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r10, 0x89f3, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f0000000640)={'syztnl1\x00', r0, 0x29, 0x3, 0xfe, 0x80000000, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x40, 0x7, 0x3, 0xffffff81}}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r8, &(0x7f0000000f40)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000b40)={0x39c, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [{{0x8, 0x1, r0}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8, 0x1, r0}, {0x194, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xba66}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8, 0x1, r11}, {0x198, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x42}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r11}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x80}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xa4f}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r0}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}]}, 0x39c}, 0x1, 0x0, 0x0, 0x50}, 0x2000a004) 20:45:08 executing program 3: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f0000000000)=""/148) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f00000000c0)=""/40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x10000, 0x0) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000140)=""/183) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x901, 0x0) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000280)=0x7) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x44002, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000300)=""/4096) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000001300), 0x101002, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000001340)={'netpci0\x00'}) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001380), 0x70380, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000001400), r0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r5, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x2c, r6, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x10001}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000024) ioctl$TUNGETIFF(r3, 0x800454d2, &(0x7f0000001500)={'ipvlan1\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x17) ioctl$TUNGETFEATURES(r5, 0x800454cf, &(0x7f0000001540)) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x20, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xc650}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x48000) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000001680)) 20:45:08 executing program 2: io_uring_enter(0xffffffffffffffff, 0x2d60, 0x28f3, 0x1, &(0x7f0000000000)={[0x1ff]}, 0x8) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000001300)=[{&(0x7f0000000040)=""/172, 0xac}, {&(0x7f0000000100)=""/212, 0xd4}, {&(0x7f0000000200)=""/116, 0x74}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/82, 0x52}], 0x5) r0 = io_uring_setup(0x4582, &(0x7f0000001380)={0x0, 0xb150, 0x8, 0x6, 0x38f}) r1 = syz_io_uring_setup(0x40, &(0x7f0000001400)={0x0, 0x108e, 0x1, 0x0, 0x1e, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001480), &(0x7f00000014c0)) ioprio_get$uid(0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001580)={'ip6_vti0\x00', &(0x7f0000001500)={'syztnl0\x00', 0x0, 0x29, 0x7f, 0x5, 0x81, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x7, 0xf5e, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000001640)={'syztnl1\x00', &(0x7f00000015c0)={'ip6_vti0\x00', r2, 0x4, 0x1, 0x0, 0x80000001, 0x40, @ipv4={'\x00', '\xff\xff', @local}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7800, 0x10, 0x4, 0x400000}}) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000016c0)='ns/uts\x00') sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001780)={&(0x7f0000001700)={0x6c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@GTPA_O_TEI={0x8}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r2}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_NET_NS_FD={0x8, 0x7, r3}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x41) r4 = syz_io_uring_setup(0x1382, &(0x7f0000001800)={0x0, 0x419b, 0x10, 0x0, 0x2f2, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000001880), &(0x7f00000018c0)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0) syz_io_uring_setup(0x4d2f, &(0x7f0000001900)={0x0, 0xacea, 0x10, 0x3, 0x5, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001980), &(0x7f00000019c0)) syz_genetlink_get_family_id$nbd(&(0x7f0000001a00), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001a80), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r5, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x44, r6, 0x0, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @multicast2}}, @NLBL_MGMT_A_DOMAIN={0x14, 0x1, '^-[#\'@:/[@^*\\$&\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x8010}, 0x20000000) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_DSTOPTS(r7, 0x29, 0x3b, &(0x7f0000001bc0)={0xff}, 0x8) r8 = io_uring_setup(0x7d7f, &(0x7f0000001c00)={0x0, 0x6e7, 0x8, 0x1, 0x11a, 0x0, r0}) io_uring_setup(0x778d, &(0x7f0000001c80)={0x0, 0xf775, 0x10, 0x0, 0x3a8, 0x0, r8}) 20:45:08 executing program 7: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x29, 0x2, 0x9, 0x1000, 0x7f, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40, 0x1, 0xfffffff9, 0x3}}) socketpair(0x22, 0x3, 0x4e3, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r2, 0x89f6, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'ip6gre0\x00', r0, 0x4, 0xfc, 0x20, 0xffff, 0x30, @remote, @loopback, 0x40, 0x8020, 0x6a1a, 0xffff}}) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f00000001c0)=0x4, 0x4) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, 0x0, 0x28, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xff}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040002}, 0xc050) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000380)={'sit0\x00', &(0x7f0000000300)={'ip6gre0\x00', r3, 0x4, 0x7f, 0x5, 0x2, 0x8, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @loopback, 0x1, 0x1, 0x3, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r2, 0x89f4, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'ip6tnl0\x00', r4, 0x29, 0xfe, 0xf7, 0x7, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, 0x8000, 0x7, 0x7, 0x401}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000500)={'ip6tnl0\x00', &(0x7f0000000480)={'syztnl2\x00', r4, 0x29, 0x81, 0x8, 0x7, 0xa, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8, 0x8000, 0x20, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000005c0)={'ip6tnl0\x00', &(0x7f0000000540)={'syztnl0\x00', r6, 0x29, 0x0, 0x3f, 0x8000, 0x8, @remote, @local, 0x700, 0x48, 0x0, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000680)={'syztnl1\x00', &(0x7f0000000600)={'ip6gre0\x00', r3, 0x4, 0x7, 0x7, 0xffffffff, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x700, 0x7800, 0x9, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r2, 0x89f4, &(0x7f0000000740)={'sit0\x00', &(0x7f00000006c0)={'ip6gre0\x00', r6, 0x2f, 0x0, 0xff, 0x7, 0x11, @loopback, @mcast2, 0x40, 0x700, 0x2fdf9be1, 0x3}}) getsockopt$sock_int(r2, 0x1, 0x23, &(0x7f0000000780), &(0x7f00000007c0)=0x4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000880)={'ip6tnl0\x00', &(0x7f0000000800)={'syztnl0\x00', r7, 0x2f, 0x6, 0xc7, 0x7, 0x71, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x8, 0x7, 0x1, 0x4}}) r8 = socket$inet6(0xa, 0x4, 0x3) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f00000008c0)={'team0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r1, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x40, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xf}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xf}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000a80)={'ip6_vti0\x00', &(0x7f0000000a00)={'syztnl2\x00', r3, 0x29, 0x8, 0x1, 0x3, 0x10, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80, 0x7800, 0x9, 0x8}}) syz_genetlink_get_family_id$team(&(0x7f0000000ac0), r8) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000b80)={'ip6tnl0\x00', &(0x7f0000000b00)={'ip6gre0\x00', r6, 0x2f, 0x8c, 0xff, 0x2, 0x4, @mcast1, @mcast1, 0x10, 0x40, 0xffff, 0x80000001}}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000001740)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001700)={&(0x7f0000000f40)={0x7b4, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8, 0x1, r7}, {0x170, 0x2, 0x0, 0x1, [{0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x8, 0x7, 0x4, 0x1}, {0x0, 0x0, 0x8, 0x24452c92}, {0xe6f4, 0xff, 0x7, 0x1}, {0x5, 0x80, 0x5}, {0x4, 0xf9, 0x4, 0x8000}, {0x7, 0x5, 0x2, 0x9}, {0x3, 0x1, 0x87, 0x1}, {0x0, 0x0, 0x3, 0x975d}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r9}, {0x4}}, {{0x8}, {0x13c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r3}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8001}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5c}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x44823a47}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8, 0x1, r10}, {0x224, 0x2, 0x0, 0x1, [{0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x2, 0x9, 0xb4, 0x90}, {0x4, 0x1, 0x7f, 0x80000000}, {0x67, 0x0, 0x0, 0xfffffff9}, {0x7, 0x3f, 0xfb, 0x71}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x8001, 0x7, 0x7, 0x3}, {0x8001, 0x7, 0x1a, 0xffff}, {0x4, 0x3f, 0x20, 0x6e40ef2c}, {0x166, 0x8d, 0x7f}, {0x1e, 0x4, 0x1f, 0x8001}, {0x0, 0x20, 0x9, 0x400}, {0x1, 0x4, 0x3f, 0xffffffff}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xf4af}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r0}}}]}}]}, 0x7b4}, 0x1, 0x0, 0x0, 0x40}, 0x0) 20:45:08 executing program 4: ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000080)=@req={0x28, &(0x7f0000000040)={'ip6tnl0\x00', @ifru_data=&(0x7f0000000000)="f17494704e68b47eaad8fb9da92ff99b5cce055ddc13dc72692e77db7acc710c"}}) r0 = syz_io_uring_setup(0x682e, &(0x7f00000000c0)={0x0, 0x61b0, 0x4, 0x1, 0x2d2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)) syz_io_uring_setup(0x6fa4, &(0x7f00000001c0)={0x0, 0x45b1, 0x20, 0x2, 0x62}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fef000/0xe000)=nil, &(0x7f0000000240), &(0x7f0000000280)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_SEND={0x1a, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)="b72d90afab83524e5a67d39021a498ec674b4d2ca9113ff899e0d0f9b83e4bf0e5c7aa9df47be19e9a203e183c82e8042b2828fee967fd5f214e5a80dad31344738967859ee7c7408a45a6d559e9a086f7e05e104e2a4f30aac4aa379c63d71cd8e1c3343a37e93d01bc888eb7592e29d80dfb0e02f86afd532c9d0cfaf2a42c924a791fd05dd6f753e129d61651f1de6a9f72994cbb6a582ac3531e36fe5fa6477b2b98f35e1dd5", 0xa8, 0x840, 0x1, {0x0, r3}}, 0xfffff516) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff2000/0x1000)=nil, 0x1000, 0x2000000, 0x10010, r0, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000480)=@buf={0xbf, &(0x7f00000003c0)="2b4d53922143fe2395390a2145533f7bdcdb30c3bf09285c2bf6fe927deea3a89f0dbabebefdfa91c21096b9dddcbfa0d039b15c68be2b65234ebc1b9b90bfbf785f6481eab0db2dc826e1f7c8e0b94ea9641466150b090811b54951baefc0cde8c67d871e2c5d0d431598e7ada503479215055a88cd67c2e709732acfb98dc78e48141083d9bf6983dec0dd4acf6c6382bec2eec2bf195d806f2955a8ce60b05fe65bff960999faad64df00c7588262a6320066f76791f5459f9d9de1749e"}) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [""]}, 0x14}}, 0x40881) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r4 = io_uring_setup(0x6033, &(0x7f00000005c0)={0x0, 0xacab, 0x4, 0x0, 0x1, 0x0, r0}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x2000000, 0x13, r4, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002580)=[{{&(0x7f0000000640)=@isdn, 0x80, &(0x7f0000000740)=[{&(0x7f00000006c0)=""/80, 0x50}], 0x1, &(0x7f0000000780)=""/80, 0x50}}, {{&(0x7f0000000800)=@generic, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000880)=""/215, 0xd7}, {&(0x7f0000000980)=""/145, 0x91}, {&(0x7f0000000a40)=""/187, 0xbb}], 0x3}, 0x2}, {{0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000000b40)=""/121, 0x79}, {&(0x7f0000000bc0)=""/162, 0xa2}, {&(0x7f0000000c80)=""/201, 0xc9}, {&(0x7f0000000d80)=""/19, 0x13}, {&(0x7f0000000dc0)=""/4096, 0x1000}, {&(0x7f0000001dc0)=""/206, 0xce}, {&(0x7f0000001ec0)=""/33, 0x21}, {&(0x7f0000001f00)=""/27, 0x1b}, {&(0x7f0000001f40)=""/239, 0xef}], 0x9, &(0x7f0000002100)=""/234, 0xea}, 0x2}, {{&(0x7f0000002200)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000002540)=[{&(0x7f0000002280)=""/195, 0xc3}, {&(0x7f0000002380)=""/229, 0xe5}, {&(0x7f0000002480)=""/167, 0xa7}], 0x3}, 0x800}], 0x4, 0x2000, &(0x7f0000002680)={0x0, 0x3938700}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x20010, r0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f00000026c0), 0x1) r5 = syz_io_uring_setup(0x4170, &(0x7f0000002700)={0x0, 0xc7db, 0x52c9ea573c6af5bf, 0x1, 0x1af, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000002780), &(0x7f00000027c0)) r6 = syz_io_uring_setup(0x51c7, &(0x7f0000002800)={0x0, 0x5d6e, 0x0, 0x3, 0x38a, 0x0, r5}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000002880), &(0x7f00000028c0)) r7 = syz_io_uring_setup(0x3e47, &(0x7f0000002900)={0x0, 0x2baf, 0x4, 0x1, 0x62, 0x0, r6}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000002980), &(0x7f00000029c0)) syz_io_uring_setup(0x3a60, &(0x7f0000002a00)={0x0, 0x5114, 0x4, 0x3, 0xbc, 0x0, r7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000002a80), &(0x7f0000002ac0)) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000002b40), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000002c00)={&(0x7f0000002b00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002bc0)={&(0x7f0000002b80)={0x30, r8, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_TID={0xc, 0x3, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x850) 20:45:08 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_FAMILY={0x6}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0xc000) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x6c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010100}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010102}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x4c, 0x0, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x7f}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x4}, @IEEE802154_ATTR_CCA_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4c00c000) r2 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000540), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000005c0)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000680)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x4, 0x8, 0x5a, @dev={0xfe, 0x80, '\x00', 0x2a}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7800, 0x20, 0x7, 0x4aa89fc9}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000740)={'sit0\x00', &(0x7f00000006c0)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x4, 0x3, 0x40, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, 0x1, 0x1, 0x2, 0x100}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000800)={'ip6tnl0\x00', &(0x7f0000000780)={'sit0\x00', 0x0, 0x4, 0x24, 0x79, 0xfffffffd, 0x7, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x700, 0x0, 0x20}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000940)={'ip6tnl0\x00', &(0x7f00000008c0)={'sit0\x00', 0x0, 0x29, 0x1, 0xf7, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, @remote, 0x700, 0x80, 0x3, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000a00)={'syztnl2\x00', &(0x7f0000000980)={'syztnl1\x00', 0x0, 0x2f, 0x9, 0xf0, 0x4, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7800, 0x0, 0x79, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000ac0)={'ip6tnl0\x00', &(0x7f0000000a40)={'ip6_vti0\x00', 0x0, 0x29, 0x4, 0x1, 0x7ff, 0x22, @loopback, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x7, 0x80, 0xc78, 0x1f}}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001100)={&(0x7f0000000b00)={0x5e8, r3, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8}, {0xc4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xcac}}, {0x8, 0x6, r5}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x184, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r7}, {0xfc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8}, {0x228, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r10}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x21}}, {0x8, 0x6, r11}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x2, 0xff, 0x18, 0x2}]}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x401, 0xaf, 0x4, 0x5}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x89e}}}]}}]}, 0x5e8}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) syz_open_dev$evdev(&(0x7f0000001180), 0x3c2, 0x200) r12 = openat$vcs(0xffffffffffffff9c, &(0x7f00000011c0), 0x18b000, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r12, &(0x7f0000001340)={&(0x7f0000001200), 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x70, 0x0, 0x28, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x21}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x31}, @NL80211_ATTR_PMKID={0x14, 0x55, "de6a7d645d6d49b3b5b65b5753264841"}, @NL80211_ATTR_SSID={0x5, 0x34, @random='C'}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x48}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@broadcast}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x38}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x2e}, @NL80211_ATTR_SSID={0x7, 0x34, @random="219d02"}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x4084) 20:45:08 executing program 4: ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000080)=@req={0x28, &(0x7f0000000040)={'ip6tnl0\x00', @ifru_data=&(0x7f0000000000)="f17494704e68b47eaad8fb9da92ff99b5cce055ddc13dc72692e77db7acc710c"}}) r0 = syz_io_uring_setup(0x682e, &(0x7f00000000c0)={0x0, 0x61b0, 0x4, 0x1, 0x2d2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)) syz_io_uring_setup(0x6fa4, &(0x7f00000001c0)={0x0, 0x45b1, 0x20, 0x2, 0x62}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fef000/0xe000)=nil, &(0x7f0000000240), &(0x7f0000000280)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_SEND={0x1a, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)="b72d90afab83524e5a67d39021a498ec674b4d2ca9113ff899e0d0f9b83e4bf0e5c7aa9df47be19e9a203e183c82e8042b2828fee967fd5f214e5a80dad31344738967859ee7c7408a45a6d559e9a086f7e05e104e2a4f30aac4aa379c63d71cd8e1c3343a37e93d01bc888eb7592e29d80dfb0e02f86afd532c9d0cfaf2a42c924a791fd05dd6f753e129d61651f1de6a9f72994cbb6a582ac3531e36fe5fa6477b2b98f35e1dd5", 0xa8, 0x840, 0x1, {0x0, r3}}, 0xfffff516) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff2000/0x1000)=nil, 0x1000, 0x2000000, 0x10010, r0, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000480)=@buf={0xbf, &(0x7f00000003c0)="2b4d53922143fe2395390a2145533f7bdcdb30c3bf09285c2bf6fe927deea3a89f0dbabebefdfa91c21096b9dddcbfa0d039b15c68be2b65234ebc1b9b90bfbf785f6481eab0db2dc826e1f7c8e0b94ea9641466150b090811b54951baefc0cde8c67d871e2c5d0d431598e7ada503479215055a88cd67c2e709732acfb98dc78e48141083d9bf6983dec0dd4acf6c6382bec2eec2bf195d806f2955a8ce60b05fe65bff960999faad64df00c7588262a6320066f76791f5459f9d9de1749e"}) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [""]}, 0x14}}, 0x40881) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r4 = io_uring_setup(0x6033, &(0x7f00000005c0)={0x0, 0xacab, 0x4, 0x0, 0x1, 0x0, r0}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x2000000, 0x13, r4, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002580)=[{{&(0x7f0000000640)=@isdn, 0x80, &(0x7f0000000740)=[{&(0x7f00000006c0)=""/80, 0x50}], 0x1, &(0x7f0000000780)=""/80, 0x50}}, {{&(0x7f0000000800)=@generic, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000880)=""/215, 0xd7}, {&(0x7f0000000980)=""/145, 0x91}, {&(0x7f0000000a40)=""/187, 0xbb}], 0x3}, 0x2}, {{0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000000b40)=""/121, 0x79}, {&(0x7f0000000bc0)=""/162, 0xa2}, {&(0x7f0000000c80)=""/201, 0xc9}, {&(0x7f0000000d80)=""/19, 0x13}, {&(0x7f0000000dc0)=""/4096, 0x1000}, {&(0x7f0000001dc0)=""/206, 0xce}, {&(0x7f0000001ec0)=""/33, 0x21}, {&(0x7f0000001f00)=""/27, 0x1b}, {&(0x7f0000001f40)=""/239, 0xef}], 0x9, &(0x7f0000002100)=""/234, 0xea}, 0x2}, {{&(0x7f0000002200)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000002540)=[{&(0x7f0000002280)=""/195, 0xc3}, {&(0x7f0000002380)=""/229, 0xe5}, {&(0x7f0000002480)=""/167, 0xa7}], 0x3}, 0x800}], 0x4, 0x2000, &(0x7f0000002680)={0x0, 0x3938700}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x20010, r0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f00000026c0), 0x1) r5 = syz_io_uring_setup(0x4170, &(0x7f0000002700)={0x0, 0xc7db, 0x52c9ea573c6af5bf, 0x1, 0x1af, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000002780), &(0x7f00000027c0)) r6 = syz_io_uring_setup(0x51c7, &(0x7f0000002800)={0x0, 0x5d6e, 0x0, 0x3, 0x38a, 0x0, r5}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000002880), &(0x7f00000028c0)) r7 = syz_io_uring_setup(0x3e47, &(0x7f0000002900)={0x0, 0x2baf, 0x4, 0x1, 0x62, 0x0, r6}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000002980), &(0x7f00000029c0)) syz_io_uring_setup(0x3a60, &(0x7f0000002a00)={0x0, 0x5114, 0x4, 0x3, 0xbc, 0x0, r7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000002a80), &(0x7f0000002ac0)) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000002b40), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000002c00)={&(0x7f0000002b00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002bc0)={&(0x7f0000002b80)={0x30, r8, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_TID={0xc, 0x3, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x850) 20:45:16 executing program 3: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f0000000000)=""/148) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f00000000c0)=""/40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x10000, 0x0) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000140)=""/183) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x901, 0x0) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000280)=0x7) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x44002, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000300)=""/4096) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000001300), 0x101002, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000001340)={'netpci0\x00'}) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001380), 0x70380, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000001400), r0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r5, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x2c, r6, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x10001}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000024) ioctl$TUNGETIFF(r3, 0x800454d2, &(0x7f0000001500)={'ipvlan1\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x17) ioctl$TUNGETFEATURES(r5, 0x800454cf, &(0x7f0000001540)) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x20, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xc650}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x48000) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000001680)) 20:45:16 executing program 1: ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000000)={'vlan0\x00'}) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000040)={0x1, 0x4, [@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="65c82b4389bb"]}) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x102, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000140)) eventfd(0x8) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000180)) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f00000001c0)) write$eventfd(r1, &(0x7f0000000200)=0x4, 0x8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x50800, 0x0) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000280)) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) socket(0x2, 0x80003, 0x3) openat$vcs(0xffffffffffffff9c, &(0x7f0000000400), 0x20000, 0x0) 20:45:16 executing program 5: ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x2f, 0x2, 0x9, 0x9b8c, 0x20, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x20, 0x1, 0xfff0000, 0x200}}) socketpair(0x28, 0xa, 0x5, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000100)=0x5, 0x4) socketpair(0x1e, 0x6, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r3) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r3) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, r4, 0x10, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7, 0x56}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x54}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6f}]}, 0x50}, 0x1, 0x0, 0x0, 0x801}, 0x8801) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000380), r2) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x3c, r5, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48c9ea108b1f44ee}, 0x800) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x18, 0x0, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x40040c0) socketpair(0x6, 0x4, 0x8001, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000580), r7) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000600), r9) r10 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r10, 0x89f3, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f0000000640)={'syztnl1\x00', r0, 0x29, 0x3, 0xfe, 0x80000000, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x40, 0x7, 0x3, 0xffffff81}}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r8, &(0x7f0000000f40)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000b40)={0x39c, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [{{0x8, 0x1, r0}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8, 0x1, r0}, {0x194, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xba66}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8, 0x1, r11}, {0x198, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x42}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r11}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x80}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xa4f}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r0}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}]}, 0x39c}, 0x1, 0x0, 0x0, 0x50}, 0x2000a004) 20:45:16 executing program 4: ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000080)=@req={0x28, &(0x7f0000000040)={'ip6tnl0\x00', @ifru_data=&(0x7f0000000000)="f17494704e68b47eaad8fb9da92ff99b5cce055ddc13dc72692e77db7acc710c"}}) r0 = syz_io_uring_setup(0x682e, &(0x7f00000000c0)={0x0, 0x61b0, 0x4, 0x1, 0x2d2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)) syz_io_uring_setup(0x6fa4, &(0x7f00000001c0)={0x0, 0x45b1, 0x20, 0x2, 0x62}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fef000/0xe000)=nil, &(0x7f0000000240), &(0x7f0000000280)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_SEND={0x1a, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)="b72d90afab83524e5a67d39021a498ec674b4d2ca9113ff899e0d0f9b83e4bf0e5c7aa9df47be19e9a203e183c82e8042b2828fee967fd5f214e5a80dad31344738967859ee7c7408a45a6d559e9a086f7e05e104e2a4f30aac4aa379c63d71cd8e1c3343a37e93d01bc888eb7592e29d80dfb0e02f86afd532c9d0cfaf2a42c924a791fd05dd6f753e129d61651f1de6a9f72994cbb6a582ac3531e36fe5fa6477b2b98f35e1dd5", 0xa8, 0x840, 0x1, {0x0, r3}}, 0xfffff516) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff2000/0x1000)=nil, 0x1000, 0x2000000, 0x10010, r0, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000480)=@buf={0xbf, &(0x7f00000003c0)="2b4d53922143fe2395390a2145533f7bdcdb30c3bf09285c2bf6fe927deea3a89f0dbabebefdfa91c21096b9dddcbfa0d039b15c68be2b65234ebc1b9b90bfbf785f6481eab0db2dc826e1f7c8e0b94ea9641466150b090811b54951baefc0cde8c67d871e2c5d0d431598e7ada503479215055a88cd67c2e709732acfb98dc78e48141083d9bf6983dec0dd4acf6c6382bec2eec2bf195d806f2955a8ce60b05fe65bff960999faad64df00c7588262a6320066f76791f5459f9d9de1749e"}) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [""]}, 0x14}}, 0x40881) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r4 = io_uring_setup(0x6033, &(0x7f00000005c0)={0x0, 0xacab, 0x4, 0x0, 0x1, 0x0, r0}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x2000000, 0x13, r4, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002580)=[{{&(0x7f0000000640)=@isdn, 0x80, &(0x7f0000000740)=[{&(0x7f00000006c0)=""/80, 0x50}], 0x1, &(0x7f0000000780)=""/80, 0x50}}, {{&(0x7f0000000800)=@generic, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000880)=""/215, 0xd7}, {&(0x7f0000000980)=""/145, 0x91}, {&(0x7f0000000a40)=""/187, 0xbb}], 0x3}, 0x2}, {{0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000000b40)=""/121, 0x79}, {&(0x7f0000000bc0)=""/162, 0xa2}, {&(0x7f0000000c80)=""/201, 0xc9}, {&(0x7f0000000d80)=""/19, 0x13}, {&(0x7f0000000dc0)=""/4096, 0x1000}, {&(0x7f0000001dc0)=""/206, 0xce}, {&(0x7f0000001ec0)=""/33, 0x21}, {&(0x7f0000001f00)=""/27, 0x1b}, {&(0x7f0000001f40)=""/239, 0xef}], 0x9, &(0x7f0000002100)=""/234, 0xea}, 0x2}, {{&(0x7f0000002200)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000002540)=[{&(0x7f0000002280)=""/195, 0xc3}, {&(0x7f0000002380)=""/229, 0xe5}, {&(0x7f0000002480)=""/167, 0xa7}], 0x3}, 0x800}], 0x4, 0x2000, &(0x7f0000002680)={0x0, 0x3938700}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x20010, r0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f00000026c0), 0x1) r5 = syz_io_uring_setup(0x4170, &(0x7f0000002700)={0x0, 0xc7db, 0x52c9ea573c6af5bf, 0x1, 0x1af, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000002780), &(0x7f00000027c0)) r6 = syz_io_uring_setup(0x51c7, &(0x7f0000002800)={0x0, 0x5d6e, 0x0, 0x3, 0x38a, 0x0, r5}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000002880), &(0x7f00000028c0)) r7 = syz_io_uring_setup(0x3e47, &(0x7f0000002900)={0x0, 0x2baf, 0x4, 0x1, 0x62, 0x0, r6}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000002980), &(0x7f00000029c0)) syz_io_uring_setup(0x3a60, &(0x7f0000002a00)={0x0, 0x5114, 0x4, 0x3, 0xbc, 0x0, r7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000002a80), &(0x7f0000002ac0)) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000002b40), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000002c00)={&(0x7f0000002b00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002bc0)={&(0x7f0000002b80)={0x30, r8, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_TID={0xc, 0x3, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x850) 20:45:16 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_FAMILY={0x6}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0xc000) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x6c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010100}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010102}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x4c, 0x0, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x7f}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x4}, @IEEE802154_ATTR_CCA_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4c00c000) r2 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000540), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000005c0)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000680)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x4, 0x8, 0x5a, @dev={0xfe, 0x80, '\x00', 0x2a}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7800, 0x20, 0x7, 0x4aa89fc9}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000740)={'sit0\x00', &(0x7f00000006c0)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x4, 0x3, 0x40, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, 0x1, 0x1, 0x2, 0x100}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000800)={'ip6tnl0\x00', &(0x7f0000000780)={'sit0\x00', 0x0, 0x4, 0x24, 0x79, 0xfffffffd, 0x7, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x700, 0x0, 0x20}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000940)={'ip6tnl0\x00', &(0x7f00000008c0)={'sit0\x00', 0x0, 0x29, 0x1, 0xf7, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, @remote, 0x700, 0x80, 0x3, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000a00)={'syztnl2\x00', &(0x7f0000000980)={'syztnl1\x00', 0x0, 0x2f, 0x9, 0xf0, 0x4, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7800, 0x0, 0x79, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000ac0)={'ip6tnl0\x00', &(0x7f0000000a40)={'ip6_vti0\x00', 0x0, 0x29, 0x4, 0x1, 0x7ff, 0x22, @loopback, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x7, 0x80, 0xc78, 0x1f}}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001100)={&(0x7f0000000b00)={0x5e8, r3, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8}, {0xc4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xcac}}, {0x8, 0x6, r5}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x184, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r7}, {0xfc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8}, {0x228, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r10}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x21}}, {0x8, 0x6, r11}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x2, 0xff, 0x18, 0x2}]}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x401, 0xaf, 0x4, 0x5}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x89e}}}]}}]}, 0x5e8}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) syz_open_dev$evdev(&(0x7f0000001180), 0x3c2, 0x200) r12 = openat$vcs(0xffffffffffffff9c, &(0x7f00000011c0), 0x18b000, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r12, &(0x7f0000001340)={&(0x7f0000001200), 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x70, 0x0, 0x28, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x21}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x31}, @NL80211_ATTR_PMKID={0x14, 0x55, "de6a7d645d6d49b3b5b65b5753264841"}, @NL80211_ATTR_SSID={0x5, 0x34, @random='C'}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x48}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@broadcast}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x38}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x2e}, @NL80211_ATTR_SSID={0x7, 0x34, @random="219d02"}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x4084) 20:45:16 executing program 7: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x29, 0x2, 0x9, 0x1000, 0x7f, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40, 0x1, 0xfffffff9, 0x3}}) socketpair(0x22, 0x3, 0x4e3, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r2, 0x89f6, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'ip6gre0\x00', r0, 0x4, 0xfc, 0x20, 0xffff, 0x30, @remote, @loopback, 0x40, 0x8020, 0x6a1a, 0xffff}}) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f00000001c0)=0x4, 0x4) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, 0x0, 0x28, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xff}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040002}, 0xc050) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000380)={'sit0\x00', &(0x7f0000000300)={'ip6gre0\x00', r3, 0x4, 0x7f, 0x5, 0x2, 0x8, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @loopback, 0x1, 0x1, 0x3, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r2, 0x89f4, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'ip6tnl0\x00', r4, 0x29, 0xfe, 0xf7, 0x7, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, 0x8000, 0x7, 0x7, 0x401}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000500)={'ip6tnl0\x00', &(0x7f0000000480)={'syztnl2\x00', r4, 0x29, 0x81, 0x8, 0x7, 0xa, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8, 0x8000, 0x20, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000005c0)={'ip6tnl0\x00', &(0x7f0000000540)={'syztnl0\x00', r6, 0x29, 0x0, 0x3f, 0x8000, 0x8, @remote, @local, 0x700, 0x48, 0x0, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000680)={'syztnl1\x00', &(0x7f0000000600)={'ip6gre0\x00', r3, 0x4, 0x7, 0x7, 0xffffffff, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x700, 0x7800, 0x9, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r2, 0x89f4, &(0x7f0000000740)={'sit0\x00', &(0x7f00000006c0)={'ip6gre0\x00', r6, 0x2f, 0x0, 0xff, 0x7, 0x11, @loopback, @mcast2, 0x40, 0x700, 0x2fdf9be1, 0x3}}) getsockopt$sock_int(r2, 0x1, 0x23, &(0x7f0000000780), &(0x7f00000007c0)=0x4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000880)={'ip6tnl0\x00', &(0x7f0000000800)={'syztnl0\x00', r7, 0x2f, 0x6, 0xc7, 0x7, 0x71, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x8, 0x7, 0x1, 0x4}}) r8 = socket$inet6(0xa, 0x4, 0x3) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f00000008c0)={'team0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r1, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x40, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xf}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xf}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000a80)={'ip6_vti0\x00', &(0x7f0000000a00)={'syztnl2\x00', r3, 0x29, 0x8, 0x1, 0x3, 0x10, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80, 0x7800, 0x9, 0x8}}) syz_genetlink_get_family_id$team(&(0x7f0000000ac0), r8) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000b80)={'ip6tnl0\x00', &(0x7f0000000b00)={'ip6gre0\x00', r6, 0x2f, 0x8c, 0xff, 0x2, 0x4, @mcast1, @mcast1, 0x10, 0x40, 0xffff, 0x80000001}}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000001740)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001700)={&(0x7f0000000f40)={0x7b4, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8, 0x1, r7}, {0x170, 0x2, 0x0, 0x1, [{0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x8, 0x7, 0x4, 0x1}, {0x0, 0x0, 0x8, 0x24452c92}, {0xe6f4, 0xff, 0x7, 0x1}, {0x5, 0x80, 0x5}, {0x4, 0xf9, 0x4, 0x8000}, {0x7, 0x5, 0x2, 0x9}, {0x3, 0x1, 0x87, 0x1}, {0x0, 0x0, 0x3, 0x975d}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r9}, {0x4}}, {{0x8}, {0x13c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r3}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8001}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5c}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x44823a47}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8, 0x1, r10}, {0x224, 0x2, 0x0, 0x1, [{0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x2, 0x9, 0xb4, 0x90}, {0x4, 0x1, 0x7f, 0x80000000}, {0x67, 0x0, 0x0, 0xfffffff9}, {0x7, 0x3f, 0xfb, 0x71}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x8001, 0x7, 0x7, 0x3}, {0x8001, 0x7, 0x1a, 0xffff}, {0x4, 0x3f, 0x20, 0x6e40ef2c}, {0x166, 0x8d, 0x7f}, {0x1e, 0x4, 0x1f, 0x8001}, {0x0, 0x20, 0x9, 0x400}, {0x1, 0x4, 0x3f, 0xffffffff}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xf4af}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r0}}}]}}]}, 0x7b4}, 0x1, 0x0, 0x0, 0x40}, 0x0) 20:45:16 executing program 2: io_uring_enter(0xffffffffffffffff, 0x2d60, 0x28f3, 0x1, &(0x7f0000000000)={[0x1ff]}, 0x8) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000001300)=[{&(0x7f0000000040)=""/172, 0xac}, {&(0x7f0000000100)=""/212, 0xd4}, {&(0x7f0000000200)=""/116, 0x74}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/82, 0x52}], 0x5) r0 = io_uring_setup(0x4582, &(0x7f0000001380)={0x0, 0xb150, 0x8, 0x6, 0x38f}) r1 = syz_io_uring_setup(0x40, &(0x7f0000001400)={0x0, 0x108e, 0x1, 0x0, 0x1e, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001480), &(0x7f00000014c0)) ioprio_get$uid(0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001580)={'ip6_vti0\x00', &(0x7f0000001500)={'syztnl0\x00', 0x0, 0x29, 0x7f, 0x5, 0x81, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x7, 0xf5e, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000001640)={'syztnl1\x00', &(0x7f00000015c0)={'ip6_vti0\x00', r2, 0x4, 0x1, 0x0, 0x80000001, 0x40, @ipv4={'\x00', '\xff\xff', @local}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7800, 0x10, 0x4, 0x400000}}) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000016c0)='ns/uts\x00') sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001780)={&(0x7f0000001700)={0x6c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@GTPA_O_TEI={0x8}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r2}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_NET_NS_FD={0x8, 0x7, r3}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x41) r4 = syz_io_uring_setup(0x1382, &(0x7f0000001800)={0x0, 0x419b, 0x10, 0x0, 0x2f2, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000001880), &(0x7f00000018c0)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0) syz_io_uring_setup(0x4d2f, &(0x7f0000001900)={0x0, 0xacea, 0x10, 0x3, 0x5, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001980), &(0x7f00000019c0)) syz_genetlink_get_family_id$nbd(&(0x7f0000001a00), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001a80), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r5, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x44, r6, 0x0, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @multicast2}}, @NLBL_MGMT_A_DOMAIN={0x14, 0x1, '^-[#\'@:/[@^*\\$&\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x8010}, 0x20000000) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_DSTOPTS(r7, 0x29, 0x3b, &(0x7f0000001bc0)={0xff}, 0x8) r8 = io_uring_setup(0x7d7f, &(0x7f0000001c00)={0x0, 0x6e7, 0x8, 0x1, 0x11a, 0x0, r0}) io_uring_setup(0x778d, &(0x7f0000001c80)={0x0, 0xf775, 0x10, 0x0, 0x3a8, 0x0, r8}) 20:45:16 executing program 0: r0 = getuid() r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TUNSETOWNER(r1, 0x400454cc, r0) ioprio_get$uid(0x0, r0) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000040)={'wg2\x00'}) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x1) r2 = syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x46d, 0xc101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x9, 0xa0, 0xfd, [{{0x9, 0x4, 0x0, 0xf9, 0x1, 0x3, 0x1, 0x0, 0x5, {0x9, 0x21, 0x7, 0x3f, 0x1, {0x22, 0xc46}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x4, 0x1f, 0x8}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0xe2, 0x3, 0x40}}]}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x10, 0x0, 0x1f, 0x20, 0x8}, 0x72, &(0x7f0000000100)={0x5, 0xf, 0x72, 0x4, [@wireless={0xb, 0x10, 0x1, 0x2, 0x0, 0x3, 0x5, 0x80, 0x80}, @generic={0x3f, 0x10, 0x1, "13eabcbedc7e85361568ba82957512f9fc3dc29c3335eacf761eb23847dd322ade415ab9dabe332209a130b7c151897613085a1787d6b6748b0354d0"}, @ssp_cap={0x18, 0x10, 0xa, 0x3f, 0x3, 0x1, 0xff0f, 0x9, [0x0, 0x3fc0, 0xc000]}, @wireless={0xb, 0x10, 0x1, 0x2, 0x40, 0x3e, 0xc7, 0xffff, 0x8}]}, 0x1, [{0xc7, &(0x7f0000000180)=@string={0xc7, 0x3, "7f126e6ffa050bba81edaf647a108d9fd37fbe3d11c15a3707477a6757d84b545a36669de4aa342241c88f7d526936f675209a74339730655071e3fcb25a208bbc069d6df4c07b4705d393a371da12cad8aaf6778ad74c8d58df24aaa77a7230a9f3628e71abaf0f819fdc49a07c577564df79e1300f987b6d6f0677e40fce2bb108a04a299c04e4bf6756185d8f38f7b15524ba0d91f7e2e25eec64a5523257550e35539b7efd2f71cc57e3428c7c38353ccfddec9577d5854e54703d3bf8b4132cd5932a"}}]}) syz_usb_ep_write(r2, 0x1f, 0x17, &(0x7f00000002c0)="18676c5fbcc850892fbc37961384e6dc244a9c136edf28") ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000300)=[0x9, 0x7]) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r3, 0x29, 0x2d, &(0x7f0000000340)={0x0, {{0xa, 0x4e20, 0x9, @mcast2, 0x83}}}, 0x88) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000400)=""/151) ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, &(0x7f00000004c0)=""/9) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000005c0)={'ip6_vti0\x00', &(0x7f0000000540)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0x8, 0x8000, 0x2e, @private0, @remote, 0x7800, 0x8, 0xb0b, 0x1ff}}) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000800)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000600)={0x1bc, 0x0, 0x2, 0x70bd29, 0x25dfdbfc, {}, [{{0x8}, {0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r4}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x81}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r5 = syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000840)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x46a, 0x23, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x7f, 0x60, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x8, {0x9, 0x21, 0x8, 0x3f, 0x1, {0x22, 0x4d6}}, {{{0x9, 0x5, 0x81, 0x3, 0x1af, 0x3, 0x0, 0x8}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x9, 0xad, 0x5a}}]}}}]}}]}}, &(0x7f0000000a80)={0xa, &(0x7f0000000880)={0xa, 0x6, 0x201, 0x8, 0x3f, 0x55, 0xff, 0x4}, 0x112, &(0x7f00000008c0)={0x5, 0xf, 0x112, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x0, 0x4, 0x5, 0xb4}, @generic={0xee, 0x10, 0x4, "d0031eae4efd237341c8a1bdb1418904fc37f74fdabfad1df4fe696990c75cc8518ee96883820f53592b5ba731abeef63833d04c5340b79bff983649da27141de3a17e7d857083f7f8c13daf1e65de8ff19e6a50698f4e1d7bd3e6c943f1e27efd3bd1764199faf293d79d65c7acb5cc89446d89f9b70b1497b481fbc6d8d97602a51e7dfcf1a3893bf6c45e2f44f0570480ac72d25d25c82f01b3d6ebaab63fb5a5f4fd0482bc1de2fb31178f6f3e72bac9d72289115497618203e4211f1f810b23a49c119d48fe0db66a3b71fa247b94f3c2f657e92dd120fe78a0c943d5d8b0930d89f099b08058e47b"}, @ssp_cap={0x14, 0x10, 0xa, 0xcd, 0x2, 0x0, 0x7800, 0x8, [0xfe8000, 0xff00]}]}, 0x2, [{0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x406}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0xf0ff}}]}) syz_usb_ep_read(r5, 0x3f, 0x4b, &(0x7f0000000ac0)=""/75) getuid() socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000cc0)={'ip6_vti0\x00', &(0x7f0000000c40)={'ip6gre0\x00', 0x0, 0x56, 0x6, 0xff, 0x2, 0x5a, @private2, @initdev={0xfe, 0x88, '\x00', 0x7, 0x0}, 0x20, 0x1, 0xffff, 0x7}}) 20:45:16 executing program 3: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f0000000000)=""/148) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f00000000c0)=""/40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x10000, 0x0) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000140)=""/183) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x901, 0x0) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000280)=0x7) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x44002, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000300)=""/4096) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000001300), 0x101002, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000001340)={'netpci0\x00'}) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001380), 0x70380, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000001400), r0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r5, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x2c, r6, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x10001}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000024) ioctl$TUNGETIFF(r3, 0x800454d2, &(0x7f0000001500)={'ipvlan1\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x17) ioctl$TUNGETFEATURES(r5, 0x800454cf, &(0x7f0000001540)) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x20, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xc650}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x48000) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000001680)) 20:45:16 executing program 1: ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000000)={'vlan0\x00'}) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000040)={0x1, 0x4, [@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="65c82b4389bb"]}) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x102, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000140)) eventfd(0x8) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000180)) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f00000001c0)) write$eventfd(r1, &(0x7f0000000200)=0x4, 0x8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x50800, 0x0) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000280)) socket(0x2, 0x80003, 0x3) openat$vcs(0xffffffffffffff9c, &(0x7f0000000400), 0x20000, 0x0) 20:45:25 executing program 1: ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000000)={'vlan0\x00'}) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000040)={0x1, 0x4, [@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="65c82b4389bb"]}) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x102, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000140)) eventfd(0x8) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000180)) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f00000001c0)) write$eventfd(r1, &(0x7f0000000200)=0x4, 0x8) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x50800, 0x0) socket(0x2, 0x80003, 0x3) openat$vcs(0xffffffffffffff9c, &(0x7f0000000400), 0x20000, 0x0) 20:45:25 executing program 2: io_uring_enter(0xffffffffffffffff, 0x2d60, 0x28f3, 0x1, &(0x7f0000000000)={[0x1ff]}, 0x8) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000001300)=[{&(0x7f0000000040)=""/172, 0xac}, {&(0x7f0000000100)=""/212, 0xd4}, {&(0x7f0000000200)=""/116, 0x74}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/82, 0x52}], 0x5) r0 = io_uring_setup(0x4582, &(0x7f0000001380)={0x0, 0xb150, 0x8, 0x6, 0x38f}) r1 = syz_io_uring_setup(0x40, &(0x7f0000001400)={0x0, 0x108e, 0x1, 0x0, 0x1e, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001480), &(0x7f00000014c0)) ioprio_get$uid(0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001580)={'ip6_vti0\x00', &(0x7f0000001500)={'syztnl0\x00', 0x0, 0x29, 0x7f, 0x5, 0x81, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x7, 0xf5e, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000001640)={'syztnl1\x00', &(0x7f00000015c0)={'ip6_vti0\x00', r2, 0x4, 0x1, 0x0, 0x80000001, 0x40, @ipv4={'\x00', '\xff\xff', @local}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7800, 0x10, 0x4, 0x400000}}) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000016c0)='ns/uts\x00') sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001780)={&(0x7f0000001700)={0x6c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@GTPA_O_TEI={0x8}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r2}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_NET_NS_FD={0x8, 0x7, r3}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x41) r4 = syz_io_uring_setup(0x1382, &(0x7f0000001800)={0x0, 0x419b, 0x10, 0x0, 0x2f2, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000001880), &(0x7f00000018c0)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0) syz_io_uring_setup(0x4d2f, &(0x7f0000001900)={0x0, 0xacea, 0x10, 0x3, 0x5, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001980), &(0x7f00000019c0)) syz_genetlink_get_family_id$nbd(&(0x7f0000001a00), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001a80), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r5, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x44, r6, 0x0, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @multicast2}}, @NLBL_MGMT_A_DOMAIN={0x14, 0x1, '^-[#\'@:/[@^*\\$&\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x8010}, 0x20000000) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_DSTOPTS(r7, 0x29, 0x3b, &(0x7f0000001bc0)={0xff}, 0x8) r8 = io_uring_setup(0x7d7f, &(0x7f0000001c00)={0x0, 0x6e7, 0x8, 0x1, 0x11a, 0x0, r0}) io_uring_setup(0x778d, &(0x7f0000001c80)={0x0, 0xf775, 0x10, 0x0, 0x3a8, 0x0, r8}) 20:45:25 executing program 0: r0 = getuid() r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TUNSETOWNER(r1, 0x400454cc, r0) ioprio_get$uid(0x0, r0) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000040)={'wg2\x00'}) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x1) r2 = syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x46d, 0xc101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x9, 0xa0, 0xfd, [{{0x9, 0x4, 0x0, 0xf9, 0x1, 0x3, 0x1, 0x0, 0x5, {0x9, 0x21, 0x7, 0x3f, 0x1, {0x22, 0xc46}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x4, 0x1f, 0x8}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0xe2, 0x3, 0x40}}]}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x10, 0x0, 0x1f, 0x20, 0x8}, 0x72, &(0x7f0000000100)={0x5, 0xf, 0x72, 0x4, [@wireless={0xb, 0x10, 0x1, 0x2, 0x0, 0x3, 0x5, 0x80, 0x80}, @generic={0x3f, 0x10, 0x1, "13eabcbedc7e85361568ba82957512f9fc3dc29c3335eacf761eb23847dd322ade415ab9dabe332209a130b7c151897613085a1787d6b6748b0354d0"}, @ssp_cap={0x18, 0x10, 0xa, 0x3f, 0x3, 0x1, 0xff0f, 0x9, [0x0, 0x3fc0, 0xc000]}, @wireless={0xb, 0x10, 0x1, 0x2, 0x40, 0x3e, 0xc7, 0xffff, 0x8}]}, 0x1, [{0xc7, &(0x7f0000000180)=@string={0xc7, 0x3, "7f126e6ffa050bba81edaf647a108d9fd37fbe3d11c15a3707477a6757d84b545a36669de4aa342241c88f7d526936f675209a74339730655071e3fcb25a208bbc069d6df4c07b4705d393a371da12cad8aaf6778ad74c8d58df24aaa77a7230a9f3628e71abaf0f819fdc49a07c577564df79e1300f987b6d6f0677e40fce2bb108a04a299c04e4bf6756185d8f38f7b15524ba0d91f7e2e25eec64a5523257550e35539b7efd2f71cc57e3428c7c38353ccfddec9577d5854e54703d3bf8b4132cd5932a"}}]}) syz_usb_ep_write(r2, 0x1f, 0x17, &(0x7f00000002c0)="18676c5fbcc850892fbc37961384e6dc244a9c136edf28") ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000300)=[0x9, 0x7]) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r3, 0x29, 0x2d, &(0x7f0000000340)={0x0, {{0xa, 0x4e20, 0x9, @mcast2, 0x83}}}, 0x88) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000400)=""/151) ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, &(0x7f00000004c0)=""/9) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000005c0)={'ip6_vti0\x00', &(0x7f0000000540)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0x8, 0x8000, 0x2e, @private0, @remote, 0x7800, 0x8, 0xb0b, 0x1ff}}) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000800)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000600)={0x1bc, 0x0, 0x2, 0x70bd29, 0x25dfdbfc, {}, [{{0x8}, {0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r4}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x81}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r5 = syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000840)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x46a, 0x23, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x7f, 0x60, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x8, {0x9, 0x21, 0x8, 0x3f, 0x1, {0x22, 0x4d6}}, {{{0x9, 0x5, 0x81, 0x3, 0x1af, 0x3, 0x0, 0x8}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x9, 0xad, 0x5a}}]}}}]}}]}}, &(0x7f0000000a80)={0xa, &(0x7f0000000880)={0xa, 0x6, 0x201, 0x8, 0x3f, 0x55, 0xff, 0x4}, 0x112, &(0x7f00000008c0)={0x5, 0xf, 0x112, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x0, 0x4, 0x5, 0xb4}, @generic={0xee, 0x10, 0x4, "d0031eae4efd237341c8a1bdb1418904fc37f74fdabfad1df4fe696990c75cc8518ee96883820f53592b5ba731abeef63833d04c5340b79bff983649da27141de3a17e7d857083f7f8c13daf1e65de8ff19e6a50698f4e1d7bd3e6c943f1e27efd3bd1764199faf293d79d65c7acb5cc89446d89f9b70b1497b481fbc6d8d97602a51e7dfcf1a3893bf6c45e2f44f0570480ac72d25d25c82f01b3d6ebaab63fb5a5f4fd0482bc1de2fb31178f6f3e72bac9d72289115497618203e4211f1f810b23a49c119d48fe0db66a3b71fa247b94f3c2f657e92dd120fe78a0c943d5d8b0930d89f099b08058e47b"}, @ssp_cap={0x14, 0x10, 0xa, 0xcd, 0x2, 0x0, 0x7800, 0x8, [0xfe8000, 0xff00]}]}, 0x2, [{0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x406}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0xf0ff}}]}) syz_usb_ep_read(r5, 0x3f, 0x4b, &(0x7f0000000ac0)=""/75) getuid() socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000cc0)={'ip6_vti0\x00', &(0x7f0000000c40)={'ip6gre0\x00', 0x0, 0x56, 0x6, 0xff, 0x2, 0x5a, @private2, @initdev={0xfe, 0x88, '\x00', 0x7, 0x0}, 0x20, 0x1, 0xffff, 0x7}}) 20:45:25 executing program 5: ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x2f, 0x2, 0x9, 0x9b8c, 0x20, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x20, 0x1, 0xfff0000, 0x200}}) socketpair(0x28, 0xa, 0x5, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000100)=0x5, 0x4) socketpair(0x1e, 0x6, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r3) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r3) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, r4, 0x10, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7, 0x56}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x54}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6f}]}, 0x50}, 0x1, 0x0, 0x0, 0x801}, 0x8801) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000380), r2) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x3c, r5, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48c9ea108b1f44ee}, 0x800) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x18, 0x0, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x40040c0) socketpair(0x6, 0x4, 0x8001, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000580), r7) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000600), r9) r10 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r10, 0x89f3, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f0000000640)={'syztnl1\x00', r0, 0x29, 0x3, 0xfe, 0x80000000, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x40, 0x7, 0x3, 0xffffff81}}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r8, &(0x7f0000000f40)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000b40)={0x39c, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [{{0x8, 0x1, r0}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8, 0x1, r0}, {0x194, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xba66}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8, 0x1, r11}, {0x198, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x42}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r11}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x80}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xa4f}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r0}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}]}, 0x39c}, 0x1, 0x0, 0x0, 0x50}, 0x2000a004) 20:45:25 executing program 3: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f0000000000)=""/148) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f00000000c0)=""/40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x10000, 0x0) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000140)=""/183) openat$vcs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x901, 0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000280)=0x7) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x44002, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000300)=""/4096) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000001300), 0x101002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000001340)={'netpci0\x00'}) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001380), 0x70380, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000001400), r0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x2c, r5, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x10001}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000024) ioctl$TUNGETIFF(r2, 0x800454d2, &(0x7f0000001500)={'ipvlan1\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x17) ioctl$TUNGETFEATURES(r4, 0x800454cf, &(0x7f0000001540)) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x20, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xc650}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x48000) 20:45:25 executing program 7: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x29, 0x2, 0x9, 0x1000, 0x7f, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40, 0x1, 0xfffffff9, 0x3}}) socketpair(0x22, 0x3, 0x4e3, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r2, 0x89f6, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'ip6gre0\x00', r0, 0x4, 0xfc, 0x20, 0xffff, 0x30, @remote, @loopback, 0x40, 0x8020, 0x6a1a, 0xffff}}) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f00000001c0)=0x4, 0x4) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, 0x0, 0x28, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xff}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040002}, 0xc050) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000380)={'sit0\x00', &(0x7f0000000300)={'ip6gre0\x00', r3, 0x4, 0x7f, 0x5, 0x2, 0x8, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @loopback, 0x1, 0x1, 0x3, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r2, 0x89f4, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'ip6tnl0\x00', r4, 0x29, 0xfe, 0xf7, 0x7, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, 0x8000, 0x7, 0x7, 0x401}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000500)={'ip6tnl0\x00', &(0x7f0000000480)={'syztnl2\x00', r4, 0x29, 0x81, 0x8, 0x7, 0xa, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8, 0x8000, 0x20, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000005c0)={'ip6tnl0\x00', &(0x7f0000000540)={'syztnl0\x00', r6, 0x29, 0x0, 0x3f, 0x8000, 0x8, @remote, @local, 0x700, 0x48, 0x0, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000680)={'syztnl1\x00', &(0x7f0000000600)={'ip6gre0\x00', r3, 0x4, 0x7, 0x7, 0xffffffff, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x700, 0x7800, 0x9, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r2, 0x89f4, &(0x7f0000000740)={'sit0\x00', &(0x7f00000006c0)={'ip6gre0\x00', r6, 0x2f, 0x0, 0xff, 0x7, 0x11, @loopback, @mcast2, 0x40, 0x700, 0x2fdf9be1, 0x3}}) getsockopt$sock_int(r2, 0x1, 0x23, &(0x7f0000000780), &(0x7f00000007c0)=0x4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000880)={'ip6tnl0\x00', &(0x7f0000000800)={'syztnl0\x00', r7, 0x2f, 0x6, 0xc7, 0x7, 0x71, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x8, 0x7, 0x1, 0x4}}) r8 = socket$inet6(0xa, 0x4, 0x3) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f00000008c0)={'team0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r1, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x40, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xf}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xf}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000a80)={'ip6_vti0\x00', &(0x7f0000000a00)={'syztnl2\x00', r3, 0x29, 0x8, 0x1, 0x3, 0x10, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80, 0x7800, 0x9, 0x8}}) syz_genetlink_get_family_id$team(&(0x7f0000000ac0), r8) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000b80)={'ip6tnl0\x00', &(0x7f0000000b00)={'ip6gre0\x00', r6, 0x2f, 0x8c, 0xff, 0x2, 0x4, @mcast1, @mcast1, 0x10, 0x40, 0xffff, 0x80000001}}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000001740)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001700)={&(0x7f0000000f40)={0x7b4, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8, 0x1, r7}, {0x170, 0x2, 0x0, 0x1, [{0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x8, 0x7, 0x4, 0x1}, {0x0, 0x0, 0x8, 0x24452c92}, {0xe6f4, 0xff, 0x7, 0x1}, {0x5, 0x80, 0x5}, {0x4, 0xf9, 0x4, 0x8000}, {0x7, 0x5, 0x2, 0x9}, {0x3, 0x1, 0x87, 0x1}, {0x0, 0x0, 0x3, 0x975d}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r9}, {0x4}}, {{0x8}, {0x13c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r3}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8001}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5c}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x44823a47}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8, 0x1, r10}, {0x224, 0x2, 0x0, 0x1, [{0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x2, 0x9, 0xb4, 0x90}, {0x4, 0x1, 0x7f, 0x80000000}, {0x67, 0x0, 0x0, 0xfffffff9}, {0x7, 0x3f, 0xfb, 0x71}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x8001, 0x7, 0x7, 0x3}, {0x8001, 0x7, 0x1a, 0xffff}, {0x4, 0x3f, 0x20, 0x6e40ef2c}, {0x166, 0x8d, 0x7f}, {0x1e, 0x4, 0x1f, 0x8001}, {0x0, 0x20, 0x9, 0x400}, {0x1, 0x4, 0x3f, 0xffffffff}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xf4af}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r0}}}]}}]}, 0x7b4}, 0x1, 0x0, 0x0, 0x40}, 0x0) 20:45:25 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_FAMILY={0x6}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0xc000) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x6c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010100}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010102}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x4c, 0x0, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x7f}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x4}, @IEEE802154_ATTR_CCA_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4c00c000) r2 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000540), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000005c0)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000680)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x4, 0x8, 0x5a, @dev={0xfe, 0x80, '\x00', 0x2a}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7800, 0x20, 0x7, 0x4aa89fc9}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000740)={'sit0\x00', &(0x7f00000006c0)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x4, 0x3, 0x40, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, 0x1, 0x1, 0x2, 0x100}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000800)={'ip6tnl0\x00', &(0x7f0000000780)={'sit0\x00', 0x0, 0x4, 0x24, 0x79, 0xfffffffd, 0x7, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x700, 0x0, 0x20}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000940)={'ip6tnl0\x00', &(0x7f00000008c0)={'sit0\x00', 0x0, 0x29, 0x1, 0xf7, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, @remote, 0x700, 0x80, 0x3, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000a00)={'syztnl2\x00', &(0x7f0000000980)={'syztnl1\x00', 0x0, 0x2f, 0x9, 0xf0, 0x4, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7800, 0x0, 0x79, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000ac0)={'ip6tnl0\x00', &(0x7f0000000a40)={'ip6_vti0\x00', 0x0, 0x29, 0x4, 0x1, 0x7ff, 0x22, @loopback, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x7, 0x80, 0xc78, 0x1f}}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001100)={&(0x7f0000000b00)={0x5e8, r3, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8}, {0xc4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xcac}}, {0x8, 0x6, r5}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x184, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r7}, {0xfc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8}, {0x228, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r10}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x21}}, {0x8, 0x6, r11}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x2, 0xff, 0x18, 0x2}]}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x401, 0xaf, 0x4, 0x5}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x89e}}}]}}]}, 0x5e8}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) syz_open_dev$evdev(&(0x7f0000001180), 0x3c2, 0x200) r12 = openat$vcs(0xffffffffffffff9c, &(0x7f00000011c0), 0x18b000, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r12, &(0x7f0000001340)={&(0x7f0000001200), 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x70, 0x0, 0x28, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x21}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x31}, @NL80211_ATTR_PMKID={0x14, 0x55, "de6a7d645d6d49b3b5b65b5753264841"}, @NL80211_ATTR_SSID={0x5, 0x34, @random='C'}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x48}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@broadcast}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x38}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x2e}, @NL80211_ATTR_SSID={0x7, 0x34, @random="219d02"}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x4084) 20:45:25 executing program 4: ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000080)=@req={0x28, &(0x7f0000000040)={'ip6tnl0\x00', @ifru_data=&(0x7f0000000000)="f17494704e68b47eaad8fb9da92ff99b5cce055ddc13dc72692e77db7acc710c"}}) r0 = syz_io_uring_setup(0x682e, &(0x7f00000000c0)={0x0, 0x61b0, 0x4, 0x1, 0x2d2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)) syz_io_uring_setup(0x6fa4, &(0x7f00000001c0)={0x0, 0x45b1, 0x20, 0x2, 0x62}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fef000/0xe000)=nil, &(0x7f0000000240), &(0x7f0000000280)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_SEND={0x1a, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)="b72d90afab83524e5a67d39021a498ec674b4d2ca9113ff899e0d0f9b83e4bf0e5c7aa9df47be19e9a203e183c82e8042b2828fee967fd5f214e5a80dad31344738967859ee7c7408a45a6d559e9a086f7e05e104e2a4f30aac4aa379c63d71cd8e1c3343a37e93d01bc888eb7592e29d80dfb0e02f86afd532c9d0cfaf2a42c924a791fd05dd6f753e129d61651f1de6a9f72994cbb6a582ac3531e36fe5fa6477b2b98f35e1dd5", 0xa8, 0x840, 0x1, {0x0, r3}}, 0xfffff516) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff2000/0x1000)=nil, 0x1000, 0x2000000, 0x10010, r0, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000480)=@buf={0xbf, &(0x7f00000003c0)="2b4d53922143fe2395390a2145533f7bdcdb30c3bf09285c2bf6fe927deea3a89f0dbabebefdfa91c21096b9dddcbfa0d039b15c68be2b65234ebc1b9b90bfbf785f6481eab0db2dc826e1f7c8e0b94ea9641466150b090811b54951baefc0cde8c67d871e2c5d0d431598e7ada503479215055a88cd67c2e709732acfb98dc78e48141083d9bf6983dec0dd4acf6c6382bec2eec2bf195d806f2955a8ce60b05fe65bff960999faad64df00c7588262a6320066f76791f5459f9d9de1749e"}) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [""]}, 0x14}}, 0x40881) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r4 = io_uring_setup(0x6033, &(0x7f00000005c0)={0x0, 0xacab, 0x4, 0x0, 0x1, 0x0, r0}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x2000000, 0x13, r4, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002580)=[{{&(0x7f0000000640)=@isdn, 0x80, &(0x7f0000000740)=[{&(0x7f00000006c0)=""/80, 0x50}], 0x1, &(0x7f0000000780)=""/80, 0x50}}, {{&(0x7f0000000800)=@generic, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000880)=""/215, 0xd7}, {&(0x7f0000000980)=""/145, 0x91}, {&(0x7f0000000a40)=""/187, 0xbb}], 0x3}, 0x2}, {{0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000000b40)=""/121, 0x79}, {&(0x7f0000000bc0)=""/162, 0xa2}, {&(0x7f0000000c80)=""/201, 0xc9}, {&(0x7f0000000d80)=""/19, 0x13}, {&(0x7f0000000dc0)=""/4096, 0x1000}, {&(0x7f0000001dc0)=""/206, 0xce}, {&(0x7f0000001ec0)=""/33, 0x21}, {&(0x7f0000001f00)=""/27, 0x1b}, {&(0x7f0000001f40)=""/239, 0xef}], 0x9, &(0x7f0000002100)=""/234, 0xea}, 0x2}, {{&(0x7f0000002200)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000002540)=[{&(0x7f0000002280)=""/195, 0xc3}, {&(0x7f0000002380)=""/229, 0xe5}, {&(0x7f0000002480)=""/167, 0xa7}], 0x3}, 0x800}], 0x4, 0x2000, &(0x7f0000002680)={0x0, 0x3938700}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x20010, r0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f00000026c0), 0x1) r5 = syz_io_uring_setup(0x4170, &(0x7f0000002700)={0x0, 0xc7db, 0x52c9ea573c6af5bf, 0x1, 0x1af, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000002780), &(0x7f00000027c0)) r6 = syz_io_uring_setup(0x51c7, &(0x7f0000002800)={0x0, 0x5d6e, 0x0, 0x3, 0x38a, 0x0, r5}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000002880), &(0x7f00000028c0)) r7 = syz_io_uring_setup(0x3e47, &(0x7f0000002900)={0x0, 0x2baf, 0x4, 0x1, 0x62, 0x0, r6}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000002980), &(0x7f00000029c0)) syz_io_uring_setup(0x3a60, &(0x7f0000002a00)={0x0, 0x5114, 0x4, 0x3, 0xbc, 0x0, r7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000002a80), &(0x7f0000002ac0)) syz_genetlink_get_family_id$gtp(&(0x7f0000002b40), 0xffffffffffffffff) 20:45:25 executing program 1: ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000000)={'vlan0\x00'}) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000040)={0x1, 0x4, [@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="65c82b4389bb"]}) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x102, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000140)) eventfd(0x8) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000180)) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f00000001c0)) write$eventfd(r1, &(0x7f0000000200)=0x4, 0x8) socket(0x2, 0x80003, 0x3) openat$vcs(0xffffffffffffff9c, &(0x7f0000000400), 0x20000, 0x0) 20:45:25 executing program 4: ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000080)=@req={0x28, &(0x7f0000000040)={'ip6tnl0\x00', @ifru_data=&(0x7f0000000000)="f17494704e68b47eaad8fb9da92ff99b5cce055ddc13dc72692e77db7acc710c"}}) r0 = syz_io_uring_setup(0x682e, &(0x7f00000000c0)={0x0, 0x61b0, 0x4, 0x1, 0x2d2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)) syz_io_uring_setup(0x6fa4, &(0x7f00000001c0)={0x0, 0x45b1, 0x20, 0x2, 0x62}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fef000/0xe000)=nil, &(0x7f0000000240), &(0x7f0000000280)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_SEND={0x1a, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)="b72d90afab83524e5a67d39021a498ec674b4d2ca9113ff899e0d0f9b83e4bf0e5c7aa9df47be19e9a203e183c82e8042b2828fee967fd5f214e5a80dad31344738967859ee7c7408a45a6d559e9a086f7e05e104e2a4f30aac4aa379c63d71cd8e1c3343a37e93d01bc888eb7592e29d80dfb0e02f86afd532c9d0cfaf2a42c924a791fd05dd6f753e129d61651f1de6a9f72994cbb6a582ac3531e36fe5fa6477b2b98f35e1dd5", 0xa8, 0x840, 0x1, {0x0, r3}}, 0xfffff516) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff2000/0x1000)=nil, 0x1000, 0x2000000, 0x10010, r0, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000480)=@buf={0xbf, &(0x7f00000003c0)="2b4d53922143fe2395390a2145533f7bdcdb30c3bf09285c2bf6fe927deea3a89f0dbabebefdfa91c21096b9dddcbfa0d039b15c68be2b65234ebc1b9b90bfbf785f6481eab0db2dc826e1f7c8e0b94ea9641466150b090811b54951baefc0cde8c67d871e2c5d0d431598e7ada503479215055a88cd67c2e709732acfb98dc78e48141083d9bf6983dec0dd4acf6c6382bec2eec2bf195d806f2955a8ce60b05fe65bff960999faad64df00c7588262a6320066f76791f5459f9d9de1749e"}) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [""]}, 0x14}}, 0x40881) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r4 = io_uring_setup(0x6033, &(0x7f00000005c0)={0x0, 0xacab, 0x4, 0x0, 0x1, 0x0, r0}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x2000000, 0x13, r4, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002580)=[{{&(0x7f0000000640)=@isdn, 0x80, &(0x7f0000000740)=[{&(0x7f00000006c0)=""/80, 0x50}], 0x1, &(0x7f0000000780)=""/80, 0x50}}, {{&(0x7f0000000800)=@generic, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000880)=""/215, 0xd7}, {&(0x7f0000000980)=""/145, 0x91}, {&(0x7f0000000a40)=""/187, 0xbb}], 0x3}, 0x2}, {{0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000000b40)=""/121, 0x79}, {&(0x7f0000000bc0)=""/162, 0xa2}, {&(0x7f0000000c80)=""/201, 0xc9}, {&(0x7f0000000d80)=""/19, 0x13}, {&(0x7f0000000dc0)=""/4096, 0x1000}, {&(0x7f0000001dc0)=""/206, 0xce}, {&(0x7f0000001ec0)=""/33, 0x21}, {&(0x7f0000001f00)=""/27, 0x1b}, {&(0x7f0000001f40)=""/239, 0xef}], 0x9, &(0x7f0000002100)=""/234, 0xea}, 0x2}, {{&(0x7f0000002200)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000002540)=[{&(0x7f0000002280)=""/195, 0xc3}, {&(0x7f0000002380)=""/229, 0xe5}, {&(0x7f0000002480)=""/167, 0xa7}], 0x3}, 0x800}], 0x4, 0x2000, &(0x7f0000002680)={0x0, 0x3938700}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x20010, r0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f00000026c0), 0x1) r5 = syz_io_uring_setup(0x4170, &(0x7f0000002700)={0x0, 0xc7db, 0x52c9ea573c6af5bf, 0x1, 0x1af, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000002780), &(0x7f00000027c0)) r6 = syz_io_uring_setup(0x51c7, &(0x7f0000002800)={0x0, 0x5d6e, 0x0, 0x3, 0x38a, 0x0, r5}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000002880), &(0x7f00000028c0)) r7 = syz_io_uring_setup(0x3e47, &(0x7f0000002900)={0x0, 0x2baf, 0x4, 0x1, 0x62, 0x0, r6}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000002980), &(0x7f00000029c0)) syz_io_uring_setup(0x3a60, &(0x7f0000002a00)={0x0, 0x5114, 0x4, 0x3, 0xbc, 0x0, r7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000002a80), &(0x7f0000002ac0)) syz_genetlink_get_family_id$gtp(&(0x7f0000002b40), 0xffffffffffffffff) 20:45:26 executing program 3: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f0000000000)=""/148) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f00000000c0)=""/40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x10000, 0x0) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000140)=""/183) openat$vcs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x901, 0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000280)=0x7) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x44002, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000300)=""/4096) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000001300), 0x101002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000001340)={'netpci0\x00'}) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001380), 0x70380, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000001400), r0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x2c, r5, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x10001}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000024) ioctl$TUNGETIFF(r2, 0x800454d2, &(0x7f0000001500)={'ipvlan1\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x17) ioctl$TUNGETFEATURES(r4, 0x800454cf, &(0x7f0000001540)) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x20, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xc650}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x48000) 20:45:26 executing program 2: io_uring_enter(0xffffffffffffffff, 0x2d60, 0x28f3, 0x1, &(0x7f0000000000)={[0x1ff]}, 0x8) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000001300)=[{&(0x7f0000000040)=""/172, 0xac}, {&(0x7f0000000100)=""/212, 0xd4}, {&(0x7f0000000200)=""/116, 0x74}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/82, 0x52}], 0x5) r0 = io_uring_setup(0x4582, &(0x7f0000001380)={0x0, 0xb150, 0x8, 0x6, 0x38f}) r1 = syz_io_uring_setup(0x40, &(0x7f0000001400)={0x0, 0x108e, 0x1, 0x0, 0x1e, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001480), &(0x7f00000014c0)) ioprio_get$uid(0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001580)={'ip6_vti0\x00', &(0x7f0000001500)={'syztnl0\x00', 0x0, 0x29, 0x7f, 0x5, 0x81, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x7, 0xf5e, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000001640)={'syztnl1\x00', &(0x7f00000015c0)={'ip6_vti0\x00', r2, 0x4, 0x1, 0x0, 0x80000001, 0x40, @ipv4={'\x00', '\xff\xff', @local}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7800, 0x10, 0x4, 0x400000}}) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000016c0)='ns/uts\x00') sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001780)={&(0x7f0000001700)={0x6c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@GTPA_O_TEI={0x8}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r2}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_NET_NS_FD={0x8, 0x7, r3}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x41) r4 = syz_io_uring_setup(0x1382, &(0x7f0000001800)={0x0, 0x419b, 0x10, 0x0, 0x2f2, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000001880), &(0x7f00000018c0)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0) syz_io_uring_setup(0x4d2f, &(0x7f0000001900)={0x0, 0xacea, 0x10, 0x3, 0x5, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001980), &(0x7f00000019c0)) syz_genetlink_get_family_id$nbd(&(0x7f0000001a00), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001a80), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r5, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x44, r6, 0x0, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @multicast2}}, @NLBL_MGMT_A_DOMAIN={0x14, 0x1, '^-[#\'@:/[@^*\\$&\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x8010}, 0x20000000) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_DSTOPTS(r7, 0x29, 0x3b, &(0x7f0000001bc0)={0xff}, 0x8) io_uring_setup(0x778d, &(0x7f0000001c80)={0x0, 0xf775, 0x10, 0x0, 0x3a8}) 20:45:26 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_FAMILY={0x6}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0xc000) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x6c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010100}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010102}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x4c, 0x0, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x7f}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x4}, @IEEE802154_ATTR_CCA_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4c00c000) r2 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000540), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000005c0)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000680)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x4, 0x8, 0x5a, @dev={0xfe, 0x80, '\x00', 0x2a}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7800, 0x20, 0x7, 0x4aa89fc9}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000740)={'sit0\x00', &(0x7f00000006c0)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x4, 0x3, 0x40, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, 0x1, 0x1, 0x2, 0x100}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000800)={'ip6tnl0\x00', &(0x7f0000000780)={'sit0\x00', 0x0, 0x4, 0x24, 0x79, 0xfffffffd, 0x7, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x700, 0x0, 0x20}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000940)={'ip6tnl0\x00', &(0x7f00000008c0)={'sit0\x00', 0x0, 0x29, 0x1, 0xf7, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, @remote, 0x700, 0x80, 0x3, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000a00)={'syztnl2\x00', &(0x7f0000000980)={'syztnl1\x00', 0x0, 0x2f, 0x9, 0xf0, 0x4, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7800, 0x0, 0x79, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000ac0)={'ip6tnl0\x00', &(0x7f0000000a40)={'ip6_vti0\x00', 0x0, 0x29, 0x4, 0x1, 0x7ff, 0x22, @loopback, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x7, 0x80, 0xc78, 0x1f}}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001100)={&(0x7f0000000b00)={0x5e8, r3, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8}, {0xc4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xcac}}, {0x8, 0x6, r5}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x184, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r7}, {0xfc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8}, {0x228, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r10}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x21}}, {0x8, 0x6, r11}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x2, 0xff, 0x18, 0x2}]}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x401, 0xaf, 0x4, 0x5}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x89e}}}]}}]}, 0x5e8}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) syz_open_dev$evdev(&(0x7f0000001180), 0x3c2, 0x200) sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000001200), 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x70, 0x0, 0x28, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x21}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x31}, @NL80211_ATTR_PMKID={0x14, 0x55, "de6a7d645d6d49b3b5b65b5753264841"}, @NL80211_ATTR_SSID={0x5, 0x34, @random='C'}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x48}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@broadcast}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x38}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x2e}, @NL80211_ATTR_SSID={0x7, 0x34, @random="219d02"}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x4084) 20:45:26 executing program 1: ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000000)={'vlan0\x00'}) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000040)={0x1, 0x4, [@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="65c82b4389bb"]}) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x102, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000140)) eventfd(0x8) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000180)) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f00000001c0)) socket(0x2, 0x80003, 0x3) openat$vcs(0xffffffffffffff9c, &(0x7f0000000400), 0x20000, 0x0) 20:45:26 executing program 7: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x29, 0x2, 0x9, 0x1000, 0x7f, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40, 0x1, 0xfffffff9, 0x3}}) socketpair(0x22, 0x3, 0x4e3, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r2, 0x89f6, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'ip6gre0\x00', r0, 0x4, 0xfc, 0x20, 0xffff, 0x30, @remote, @loopback, 0x40, 0x8020, 0x6a1a, 0xffff}}) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f00000001c0)=0x4, 0x4) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, 0x0, 0x28, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xff}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040002}, 0xc050) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000380)={'sit0\x00', &(0x7f0000000300)={'ip6gre0\x00', r3, 0x4, 0x7f, 0x5, 0x2, 0x8, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @loopback, 0x1, 0x1, 0x3, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r2, 0x89f4, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'ip6tnl0\x00', r4, 0x29, 0xfe, 0xf7, 0x7, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, 0x8000, 0x7, 0x7, 0x401}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000500)={'ip6tnl0\x00', &(0x7f0000000480)={'syztnl2\x00', r4, 0x29, 0x81, 0x8, 0x7, 0xa, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8, 0x8000, 0x20, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000005c0)={'ip6tnl0\x00', &(0x7f0000000540)={'syztnl0\x00', r5, 0x29, 0x0, 0x3f, 0x8000, 0x8, @remote, @local, 0x700, 0x48, 0x0, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000680)={'syztnl1\x00', &(0x7f0000000600)={'ip6gre0\x00', r3, 0x4, 0x7, 0x7, 0xffffffff, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x700, 0x7800, 0x9, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r2, 0x89f4, &(0x7f0000000740)={'sit0\x00', &(0x7f00000006c0)={'ip6gre0\x00', r5, 0x2f, 0x0, 0xff, 0x7, 0x11, @loopback, @mcast2, 0x40, 0x700, 0x2fdf9be1, 0x3}}) getsockopt$sock_int(r2, 0x1, 0x23, &(0x7f0000000780), &(0x7f00000007c0)=0x4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000880)={'ip6tnl0\x00', &(0x7f0000000800)={'syztnl0\x00', r6, 0x2f, 0x6, 0xc7, 0x7, 0x71, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x8, 0x7, 0x1, 0x4}}) r7 = socket$inet6(0xa, 0x4, 0x3) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f00000008c0)) sendmsg$NL80211_CMD_DEL_TX_TS(r1, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x40, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xf}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xf}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000a80)={'ip6_vti0\x00', &(0x7f0000000a00)={'syztnl2\x00', r3, 0x29, 0x8, 0x1, 0x3, 0x10, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80, 0x7800, 0x9, 0x8}}) syz_genetlink_get_family_id$team(&(0x7f0000000ac0), r7) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000b80)={'ip6tnl0\x00', &(0x7f0000000b00)={'ip6gre0\x00', r5, 0x2f, 0x8c, 0xff, 0x2, 0x4, @mcast1, @mcast1, 0x10, 0x40, 0xffff, 0x80000001}}) 20:45:26 executing program 4: ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000080)=@req={0x28, &(0x7f0000000040)={'ip6tnl0\x00', @ifru_data=&(0x7f0000000000)="f17494704e68b47eaad8fb9da92ff99b5cce055ddc13dc72692e77db7acc710c"}}) r0 = syz_io_uring_setup(0x682e, &(0x7f00000000c0)={0x0, 0x61b0, 0x4, 0x1, 0x2d2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)) syz_io_uring_setup(0x6fa4, &(0x7f00000001c0)={0x0, 0x45b1, 0x20, 0x2, 0x62}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fef000/0xe000)=nil, &(0x7f0000000240), &(0x7f0000000280)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_SEND={0x1a, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)="b72d90afab83524e5a67d39021a498ec674b4d2ca9113ff899e0d0f9b83e4bf0e5c7aa9df47be19e9a203e183c82e8042b2828fee967fd5f214e5a80dad31344738967859ee7c7408a45a6d559e9a086f7e05e104e2a4f30aac4aa379c63d71cd8e1c3343a37e93d01bc888eb7592e29d80dfb0e02f86afd532c9d0cfaf2a42c924a791fd05dd6f753e129d61651f1de6a9f72994cbb6a582ac3531e36fe5fa6477b2b98f35e1dd5", 0xa8, 0x840, 0x1, {0x0, r3}}, 0xfffff516) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff2000/0x1000)=nil, 0x1000, 0x2000000, 0x10010, r0, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000480)=@buf={0xbf, &(0x7f00000003c0)="2b4d53922143fe2395390a2145533f7bdcdb30c3bf09285c2bf6fe927deea3a89f0dbabebefdfa91c21096b9dddcbfa0d039b15c68be2b65234ebc1b9b90bfbf785f6481eab0db2dc826e1f7c8e0b94ea9641466150b090811b54951baefc0cde8c67d871e2c5d0d431598e7ada503479215055a88cd67c2e709732acfb98dc78e48141083d9bf6983dec0dd4acf6c6382bec2eec2bf195d806f2955a8ce60b05fe65bff960999faad64df00c7588262a6320066f76791f5459f9d9de1749e"}) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [""]}, 0x14}}, 0x40881) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r4 = io_uring_setup(0x6033, &(0x7f00000005c0)={0x0, 0xacab, 0x4, 0x0, 0x1, 0x0, r0}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x2000000, 0x13, r4, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002580)=[{{&(0x7f0000000640)=@isdn, 0x80, &(0x7f0000000740)=[{&(0x7f00000006c0)=""/80, 0x50}], 0x1, &(0x7f0000000780)=""/80, 0x50}}, {{&(0x7f0000000800)=@generic, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000880)=""/215, 0xd7}, {&(0x7f0000000980)=""/145, 0x91}, {&(0x7f0000000a40)=""/187, 0xbb}], 0x3}, 0x2}, {{0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000000b40)=""/121, 0x79}, {&(0x7f0000000bc0)=""/162, 0xa2}, {&(0x7f0000000c80)=""/201, 0xc9}, {&(0x7f0000000d80)=""/19, 0x13}, {&(0x7f0000000dc0)=""/4096, 0x1000}, {&(0x7f0000001dc0)=""/206, 0xce}, {&(0x7f0000001ec0)=""/33, 0x21}, {&(0x7f0000001f00)=""/27, 0x1b}, {&(0x7f0000001f40)=""/239, 0xef}], 0x9, &(0x7f0000002100)=""/234, 0xea}, 0x2}, {{&(0x7f0000002200)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000002540)=[{&(0x7f0000002280)=""/195, 0xc3}, {&(0x7f0000002380)=""/229, 0xe5}, {&(0x7f0000002480)=""/167, 0xa7}], 0x3}, 0x800}], 0x4, 0x2000, &(0x7f0000002680)={0x0, 0x3938700}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x20010, r0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f00000026c0), 0x1) r5 = syz_io_uring_setup(0x4170, &(0x7f0000002700)={0x0, 0xc7db, 0x52c9ea573c6af5bf, 0x1, 0x1af, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000002780), &(0x7f00000027c0)) r6 = syz_io_uring_setup(0x51c7, &(0x7f0000002800)={0x0, 0x5d6e, 0x0, 0x3, 0x38a, 0x0, r5}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000002880), &(0x7f00000028c0)) syz_io_uring_setup(0x3e47, &(0x7f0000002900)={0x0, 0x2baf, 0x4, 0x1, 0x62, 0x0, r6}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000002980), &(0x7f00000029c0)) syz_genetlink_get_family_id$gtp(&(0x7f0000002b40), 0xffffffffffffffff) 20:45:34 executing program 1: ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000000)={'vlan0\x00'}) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000040)={0x1, 0x4, [@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="65c82b4389bb"]}) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x102, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000140)) eventfd(0x8) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000180)) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f00000001c0)) socket(0x2, 0x80003, 0x3) openat$vcs(0xffffffffffffff9c, &(0x7f0000000400), 0x20000, 0x0) 20:45:34 executing program 0: r0 = getuid() r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TUNSETOWNER(r1, 0x400454cc, r0) ioprio_get$uid(0x0, r0) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000040)={'wg2\x00'}) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x1) r2 = syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x46d, 0xc101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x9, 0xa0, 0xfd, [{{0x9, 0x4, 0x0, 0xf9, 0x1, 0x3, 0x1, 0x0, 0x5, {0x9, 0x21, 0x7, 0x3f, 0x1, {0x22, 0xc46}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x4, 0x1f, 0x8}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0xe2, 0x3, 0x40}}]}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x10, 0x0, 0x1f, 0x20, 0x8}, 0x72, &(0x7f0000000100)={0x5, 0xf, 0x72, 0x4, [@wireless={0xb, 0x10, 0x1, 0x2, 0x0, 0x3, 0x5, 0x80, 0x80}, @generic={0x3f, 0x10, 0x1, "13eabcbedc7e85361568ba82957512f9fc3dc29c3335eacf761eb23847dd322ade415ab9dabe332209a130b7c151897613085a1787d6b6748b0354d0"}, @ssp_cap={0x18, 0x10, 0xa, 0x3f, 0x3, 0x1, 0xff0f, 0x9, [0x0, 0x3fc0, 0xc000]}, @wireless={0xb, 0x10, 0x1, 0x2, 0x40, 0x3e, 0xc7, 0xffff, 0x8}]}, 0x1, [{0xc7, &(0x7f0000000180)=@string={0xc7, 0x3, "7f126e6ffa050bba81edaf647a108d9fd37fbe3d11c15a3707477a6757d84b545a36669de4aa342241c88f7d526936f675209a74339730655071e3fcb25a208bbc069d6df4c07b4705d393a371da12cad8aaf6778ad74c8d58df24aaa77a7230a9f3628e71abaf0f819fdc49a07c577564df79e1300f987b6d6f0677e40fce2bb108a04a299c04e4bf6756185d8f38f7b15524ba0d91f7e2e25eec64a5523257550e35539b7efd2f71cc57e3428c7c38353ccfddec9577d5854e54703d3bf8b4132cd5932a"}}]}) syz_usb_ep_write(r2, 0x1f, 0x17, &(0x7f00000002c0)="18676c5fbcc850892fbc37961384e6dc244a9c136edf28") ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000300)=[0x9, 0x7]) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r3, 0x29, 0x2d, &(0x7f0000000340)={0x0, {{0xa, 0x4e20, 0x9, @mcast2, 0x83}}}, 0x88) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000400)=""/151) ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, &(0x7f00000004c0)=""/9) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000005c0)={'ip6_vti0\x00', &(0x7f0000000540)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0x8, 0x8000, 0x2e, @private0, @remote, 0x7800, 0x8, 0xb0b, 0x1ff}}) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000800)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000600)={0x1bc, 0x0, 0x2, 0x70bd29, 0x25dfdbfc, {}, [{{0x8}, {0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r4}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x81}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r5 = syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000840)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x46a, 0x23, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x7f, 0x60, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x8, {0x9, 0x21, 0x8, 0x3f, 0x1, {0x22, 0x4d6}}, {{{0x9, 0x5, 0x81, 0x3, 0x1af, 0x3, 0x0, 0x8}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x9, 0xad, 0x5a}}]}}}]}}]}}, &(0x7f0000000a80)={0xa, &(0x7f0000000880)={0xa, 0x6, 0x201, 0x8, 0x3f, 0x55, 0xff, 0x4}, 0x112, &(0x7f00000008c0)={0x5, 0xf, 0x112, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x0, 0x4, 0x5, 0xb4}, @generic={0xee, 0x10, 0x4, "d0031eae4efd237341c8a1bdb1418904fc37f74fdabfad1df4fe696990c75cc8518ee96883820f53592b5ba731abeef63833d04c5340b79bff983649da27141de3a17e7d857083f7f8c13daf1e65de8ff19e6a50698f4e1d7bd3e6c943f1e27efd3bd1764199faf293d79d65c7acb5cc89446d89f9b70b1497b481fbc6d8d97602a51e7dfcf1a3893bf6c45e2f44f0570480ac72d25d25c82f01b3d6ebaab63fb5a5f4fd0482bc1de2fb31178f6f3e72bac9d72289115497618203e4211f1f810b23a49c119d48fe0db66a3b71fa247b94f3c2f657e92dd120fe78a0c943d5d8b0930d89f099b08058e47b"}, @ssp_cap={0x14, 0x10, 0xa, 0xcd, 0x2, 0x0, 0x7800, 0x8, [0xfe8000, 0xff00]}]}, 0x2, [{0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x406}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0xf0ff}}]}) syz_usb_ep_read(r5, 0x3f, 0x4b, &(0x7f0000000ac0)=""/75) getuid() socket$inet6_udplite(0xa, 0x2, 0x88) 20:45:34 executing program 5: ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x2f, 0x2, 0x9, 0x9b8c, 0x20, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x20, 0x1, 0xfff0000, 0x200}}) socketpair(0x28, 0xa, 0x5, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000100)=0x5, 0x4) socketpair(0x1e, 0x6, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r3) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r3) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, r4, 0x10, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7, 0x56}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x54}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6f}]}, 0x50}, 0x1, 0x0, 0x0, 0x801}, 0x8801) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000380), r2) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x3c, r5, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48c9ea108b1f44ee}, 0x800) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x18, 0x0, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x40040c0) socketpair(0x6, 0x4, 0x8001, &(0x7f00000005c0)={0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000580), r7) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000600), r8) r9 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r9, 0x89f3, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f0000000640)={'syztnl1\x00', r0, 0x29, 0x3, 0xfe, 0x80000000, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x40, 0x7, 0x3, 0xffffff81}}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 20:45:34 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_FAMILY={0x6}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0xc000) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x6c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010100}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010102}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x4c, 0x0, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x7f}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x4}, @IEEE802154_ATTR_CCA_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4c00c000) r2 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000540), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000005c0)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000680)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x4, 0x8, 0x5a, @dev={0xfe, 0x80, '\x00', 0x2a}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7800, 0x20, 0x7, 0x4aa89fc9}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000740)={'sit0\x00', &(0x7f00000006c0)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x4, 0x3, 0x40, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, 0x1, 0x1, 0x2, 0x100}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000800)={'ip6tnl0\x00', &(0x7f0000000780)={'sit0\x00', 0x0, 0x4, 0x24, 0x79, 0xfffffffd, 0x7, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x700, 0x0, 0x20}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000940)={'ip6tnl0\x00', &(0x7f00000008c0)={'sit0\x00', 0x0, 0x29, 0x1, 0xf7, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, @remote, 0x700, 0x80, 0x3, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000a00)={'syztnl2\x00', &(0x7f0000000980)={'syztnl1\x00', 0x0, 0x2f, 0x9, 0xf0, 0x4, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7800, 0x0, 0x79, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000ac0)={'ip6tnl0\x00', &(0x7f0000000a40)={'ip6_vti0\x00', 0x0, 0x29, 0x4, 0x1, 0x7ff, 0x22, @loopback, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x7, 0x80, 0xc78, 0x1f}}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001100)={&(0x7f0000000b00)={0x5e8, r3, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8}, {0xc4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xcac}}, {0x8, 0x6, r5}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x184, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r7}, {0xfc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8}, {0x228, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r10}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x21}}, {0x8, 0x6, r11}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x2, 0xff, 0x18, 0x2}]}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x401, 0xaf, 0x4, 0x5}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x89e}}}]}}]}, 0x5e8}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) syz_open_dev$evdev(&(0x7f0000001180), 0x3c2, 0x200) sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000001200), 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x70, 0x0, 0x28, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x21}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x31}, @NL80211_ATTR_PMKID={0x14, 0x55, "de6a7d645d6d49b3b5b65b5753264841"}, @NL80211_ATTR_SSID={0x5, 0x34, @random='C'}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x48}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@broadcast}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x38}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x2e}, @NL80211_ATTR_SSID={0x7, 0x34, @random="219d02"}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x4084) 20:45:34 executing program 7: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x29, 0x2, 0x9, 0x1000, 0x7f, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40, 0x1, 0xfffffff9, 0x3}}) socketpair(0x22, 0x3, 0x4e3, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r2, 0x89f6, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'ip6gre0\x00', r0, 0x4, 0xfc, 0x20, 0xffff, 0x30, @remote, @loopback, 0x40, 0x8020, 0x6a1a, 0xffff}}) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f00000001c0)=0x4, 0x4) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, 0x0, 0x28, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xff}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040002}, 0xc050) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000380)={'sit0\x00', &(0x7f0000000300)={'ip6gre0\x00', r3, 0x4, 0x7f, 0x5, 0x2, 0x8, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @loopback, 0x1, 0x1, 0x3, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r2, 0x89f4, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'ip6tnl0\x00', r4, 0x29, 0xfe, 0xf7, 0x7, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, 0x8000, 0x7, 0x7, 0x401}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000500)={'ip6tnl0\x00', &(0x7f0000000480)={'syztnl2\x00', r4, 0x29, 0x81, 0x8, 0x7, 0xa, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8, 0x8000, 0x20, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000005c0)={'ip6tnl0\x00', &(0x7f0000000540)={'syztnl0\x00', r5, 0x29, 0x0, 0x3f, 0x8000, 0x8, @remote, @local, 0x700, 0x48, 0x0, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000680)={'syztnl1\x00', &(0x7f0000000600)={'ip6gre0\x00', r3, 0x4, 0x7, 0x7, 0xffffffff, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x700, 0x7800, 0x9, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r2, 0x89f4, &(0x7f0000000740)={'sit0\x00', &(0x7f00000006c0)={'ip6gre0\x00', r5, 0x2f, 0x0, 0xff, 0x7, 0x11, @loopback, @mcast2, 0x40, 0x700, 0x2fdf9be1, 0x3}}) getsockopt$sock_int(r2, 0x1, 0x23, &(0x7f0000000780), &(0x7f00000007c0)=0x4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000880)={'ip6tnl0\x00', &(0x7f0000000800)={'syztnl0\x00', r6, 0x2f, 0x6, 0xc7, 0x7, 0x71, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x8, 0x7, 0x1, 0x4}}) r7 = socket$inet6(0xa, 0x4, 0x3) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f00000008c0)) sendmsg$NL80211_CMD_DEL_TX_TS(r1, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x40, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xf}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xf}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000a80)={'ip6_vti0\x00', &(0x7f0000000a00)={'syztnl2\x00', r3, 0x29, 0x8, 0x1, 0x3, 0x10, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80, 0x7800, 0x9, 0x8}}) syz_genetlink_get_family_id$team(&(0x7f0000000ac0), r7) 20:45:34 executing program 4: ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000080)=@req={0x28, &(0x7f0000000040)={'ip6tnl0\x00', @ifru_data=&(0x7f0000000000)="f17494704e68b47eaad8fb9da92ff99b5cce055ddc13dc72692e77db7acc710c"}}) r0 = syz_io_uring_setup(0x682e, &(0x7f00000000c0)={0x0, 0x61b0, 0x4, 0x1, 0x2d2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)) syz_io_uring_setup(0x6fa4, &(0x7f00000001c0)={0x0, 0x45b1, 0x20, 0x2, 0x62}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fef000/0xe000)=nil, &(0x7f0000000240), &(0x7f0000000280)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_SEND={0x1a, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)="b72d90afab83524e5a67d39021a498ec674b4d2ca9113ff899e0d0f9b83e4bf0e5c7aa9df47be19e9a203e183c82e8042b2828fee967fd5f214e5a80dad31344738967859ee7c7408a45a6d559e9a086f7e05e104e2a4f30aac4aa379c63d71cd8e1c3343a37e93d01bc888eb7592e29d80dfb0e02f86afd532c9d0cfaf2a42c924a791fd05dd6f753e129d61651f1de6a9f72994cbb6a582ac3531e36fe5fa6477b2b98f35e1dd5", 0xa8, 0x840, 0x1, {0x0, r3}}, 0xfffff516) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff2000/0x1000)=nil, 0x1000, 0x2000000, 0x10010, r0, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000480)=@buf={0xbf, &(0x7f00000003c0)="2b4d53922143fe2395390a2145533f7bdcdb30c3bf09285c2bf6fe927deea3a89f0dbabebefdfa91c21096b9dddcbfa0d039b15c68be2b65234ebc1b9b90bfbf785f6481eab0db2dc826e1f7c8e0b94ea9641466150b090811b54951baefc0cde8c67d871e2c5d0d431598e7ada503479215055a88cd67c2e709732acfb98dc78e48141083d9bf6983dec0dd4acf6c6382bec2eec2bf195d806f2955a8ce60b05fe65bff960999faad64df00c7588262a6320066f76791f5459f9d9de1749e"}) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [""]}, 0x14}}, 0x40881) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r4 = io_uring_setup(0x6033, &(0x7f00000005c0)={0x0, 0xacab, 0x4, 0x0, 0x1, 0x0, r0}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x2000000, 0x13, r4, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002580)=[{{&(0x7f0000000640)=@isdn, 0x80, &(0x7f0000000740)=[{&(0x7f00000006c0)=""/80, 0x50}], 0x1, &(0x7f0000000780)=""/80, 0x50}}, {{&(0x7f0000000800)=@generic, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000880)=""/215, 0xd7}, {&(0x7f0000000980)=""/145, 0x91}, {&(0x7f0000000a40)=""/187, 0xbb}], 0x3}, 0x2}, {{0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000000b40)=""/121, 0x79}, {&(0x7f0000000bc0)=""/162, 0xa2}, {&(0x7f0000000c80)=""/201, 0xc9}, {&(0x7f0000000d80)=""/19, 0x13}, {&(0x7f0000000dc0)=""/4096, 0x1000}, {&(0x7f0000001dc0)=""/206, 0xce}, {&(0x7f0000001ec0)=""/33, 0x21}, {&(0x7f0000001f00)=""/27, 0x1b}, {&(0x7f0000001f40)=""/239, 0xef}], 0x9, &(0x7f0000002100)=""/234, 0xea}, 0x2}, {{&(0x7f0000002200)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000002540)=[{&(0x7f0000002280)=""/195, 0xc3}, {&(0x7f0000002380)=""/229, 0xe5}, {&(0x7f0000002480)=""/167, 0xa7}], 0x3}, 0x800}], 0x4, 0x2000, &(0x7f0000002680)={0x0, 0x3938700}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x20010, r0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f00000026c0), 0x1) r5 = syz_io_uring_setup(0x4170, &(0x7f0000002700)={0x0, 0xc7db, 0x52c9ea573c6af5bf, 0x1, 0x1af, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000002780), &(0x7f00000027c0)) r6 = syz_io_uring_setup(0x51c7, &(0x7f0000002800)={0x0, 0x5d6e, 0x0, 0x3, 0x38a, 0x0, r5}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000002880), &(0x7f00000028c0)) syz_io_uring_setup(0x3e47, &(0x7f0000002900)={0x0, 0x2baf, 0x4, 0x1, 0x62, 0x0, r6}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000002980), &(0x7f00000029c0)) syz_genetlink_get_family_id$gtp(&(0x7f0000002b40), 0xffffffffffffffff) 20:45:34 executing program 2: io_uring_enter(0xffffffffffffffff, 0x2d60, 0x28f3, 0x1, &(0x7f0000000000)={[0x1ff]}, 0x8) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000001300)=[{&(0x7f0000000040)=""/172, 0xac}, {&(0x7f0000000100)=""/212, 0xd4}, {&(0x7f0000000200)=""/116, 0x74}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/82, 0x52}], 0x5) r0 = io_uring_setup(0x4582, &(0x7f0000001380)={0x0, 0xb150, 0x8, 0x6, 0x38f}) r1 = syz_io_uring_setup(0x40, &(0x7f0000001400)={0x0, 0x108e, 0x1, 0x0, 0x1e, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001480), &(0x7f00000014c0)) ioprio_get$uid(0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001580)={'ip6_vti0\x00', &(0x7f0000001500)={'syztnl0\x00', 0x0, 0x29, 0x7f, 0x5, 0x81, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x7, 0xf5e, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000001640)={'syztnl1\x00', &(0x7f00000015c0)={'ip6_vti0\x00', r2, 0x4, 0x1, 0x0, 0x80000001, 0x40, @ipv4={'\x00', '\xff\xff', @local}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7800, 0x10, 0x4, 0x400000}}) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000016c0)='ns/uts\x00') sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001780)={&(0x7f0000001700)={0x6c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@GTPA_O_TEI={0x8}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r2}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_NET_NS_FD={0x8, 0x7, r3}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x41) r4 = syz_io_uring_setup(0x1382, &(0x7f0000001800)={0x0, 0x419b, 0x10, 0x0, 0x2f2, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000001880), &(0x7f00000018c0)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0) syz_io_uring_setup(0x4d2f, &(0x7f0000001900)={0x0, 0xacea, 0x10, 0x3, 0x5, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001980), &(0x7f00000019c0)) syz_genetlink_get_family_id$nbd(&(0x7f0000001a00), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001a80), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r5, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x44, r6, 0x0, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @multicast2}}, @NLBL_MGMT_A_DOMAIN={0x14, 0x1, '^-[#\'@:/[@^*\\$&\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x8010}, 0x20000000) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_DSTOPTS(r7, 0x29, 0x3b, &(0x7f0000001bc0)={0xff}, 0x8) io_uring_setup(0x778d, &(0x7f0000001c80)={0x0, 0xf775, 0x10, 0x0, 0x3a8}) 20:45:34 executing program 3: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f0000000000)=""/148) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f00000000c0)=""/40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x10000, 0x0) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000140)=""/183) openat$vcs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x901, 0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000280)=0x7) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x44002, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000300)=""/4096) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000001300), 0x101002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000001340)={'netpci0\x00'}) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001380), 0x70380, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000001400), r0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x2c, r5, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x10001}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000024) ioctl$TUNGETIFF(r2, 0x800454d2, &(0x7f0000001500)={'ipvlan1\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x17) ioctl$TUNGETFEATURES(r4, 0x800454cf, &(0x7f0000001540)) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x20, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xc650}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x48000) 20:45:35 executing program 1: ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000000)={'vlan0\x00'}) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000040)={0x1, 0x4, [@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="65c82b4389bb"]}) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x102, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000140)) eventfd(0x8) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000180)) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f00000001c0)) socket(0x2, 0x80003, 0x3) openat$vcs(0xffffffffffffff9c, &(0x7f0000000400), 0x20000, 0x0) 20:45:35 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_FAMILY={0x6}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0xc000) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x6c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010100}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010102}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x4c, 0x0, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x7f}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x4}, @IEEE802154_ATTR_CCA_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4c00c000) r2 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000540), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000005c0)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000680)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x4, 0x8, 0x5a, @dev={0xfe, 0x80, '\x00', 0x2a}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7800, 0x20, 0x7, 0x4aa89fc9}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000740)={'sit0\x00', &(0x7f00000006c0)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x4, 0x3, 0x40, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, 0x1, 0x1, 0x2, 0x100}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000800)={'ip6tnl0\x00', &(0x7f0000000780)={'sit0\x00', 0x0, 0x4, 0x24, 0x79, 0xfffffffd, 0x7, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x700, 0x0, 0x20}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000940)={'ip6tnl0\x00', &(0x7f00000008c0)={'sit0\x00', 0x0, 0x29, 0x1, 0xf7, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, @remote, 0x700, 0x80, 0x3, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000a00)={'syztnl2\x00', &(0x7f0000000980)={'syztnl1\x00', 0x0, 0x2f, 0x9, 0xf0, 0x4, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7800, 0x0, 0x79, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000ac0)={'ip6tnl0\x00', &(0x7f0000000a40)={'ip6_vti0\x00', 0x0, 0x29, 0x4, 0x1, 0x7ff, 0x22, @loopback, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x7, 0x80, 0xc78, 0x1f}}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001100)={&(0x7f0000000b00)={0x5e8, r3, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8}, {0xc4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xcac}}, {0x8, 0x6, r5}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x184, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r7}, {0xfc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8}, {0x228, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r10}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x21}}, {0x8, 0x6, r11}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x2, 0xff, 0x18, 0x2}]}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x401, 0xaf, 0x4, 0x5}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x89e}}}]}}]}, 0x5e8}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) syz_open_dev$evdev(&(0x7f0000001180), 0x3c2, 0x200) sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000001200), 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x70, 0x0, 0x28, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x21}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x31}, @NL80211_ATTR_PMKID={0x14, 0x55, "de6a7d645d6d49b3b5b65b5753264841"}, @NL80211_ATTR_SSID={0x5, 0x34, @random='C'}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x48}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@broadcast}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x38}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x2e}, @NL80211_ATTR_SSID={0x7, 0x34, @random="219d02"}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x4084) 20:45:35 executing program 3: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f0000000000)=""/148) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f00000000c0)=""/40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x10000, 0x0) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000140)=""/183) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x901, 0x0) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000280)=0x7) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x44002, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000300)=""/4096) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000001300), 0x101002, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000001340)={'netpci0\x00'}) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001380), 0x70380, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000001400), r0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r5, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x2c, r6, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x10001}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000024) ioctl$TUNGETIFF(r3, 0x800454d2, &(0x7f0000001500)={'ipvlan1\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x17) ioctl$TUNGETFEATURES(r5, 0x800454cf, &(0x7f0000001540)) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000001680)) 20:45:35 executing program 4: ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000080)=@req={0x28, &(0x7f0000000040)={'ip6tnl0\x00', @ifru_data=&(0x7f0000000000)="f17494704e68b47eaad8fb9da92ff99b5cce055ddc13dc72692e77db7acc710c"}}) r0 = syz_io_uring_setup(0x682e, &(0x7f00000000c0)={0x0, 0x61b0, 0x4, 0x1, 0x2d2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)) syz_io_uring_setup(0x6fa4, &(0x7f00000001c0)={0x0, 0x45b1, 0x20, 0x2, 0x62}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fef000/0xe000)=nil, &(0x7f0000000240), &(0x7f0000000280)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_SEND={0x1a, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)="b72d90afab83524e5a67d39021a498ec674b4d2ca9113ff899e0d0f9b83e4bf0e5c7aa9df47be19e9a203e183c82e8042b2828fee967fd5f214e5a80dad31344738967859ee7c7408a45a6d559e9a086f7e05e104e2a4f30aac4aa379c63d71cd8e1c3343a37e93d01bc888eb7592e29d80dfb0e02f86afd532c9d0cfaf2a42c924a791fd05dd6f753e129d61651f1de6a9f72994cbb6a582ac3531e36fe5fa6477b2b98f35e1dd5", 0xa8, 0x840, 0x1, {0x0, r3}}, 0xfffff516) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff2000/0x1000)=nil, 0x1000, 0x2000000, 0x10010, r0, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000480)=@buf={0xbf, &(0x7f00000003c0)="2b4d53922143fe2395390a2145533f7bdcdb30c3bf09285c2bf6fe927deea3a89f0dbabebefdfa91c21096b9dddcbfa0d039b15c68be2b65234ebc1b9b90bfbf785f6481eab0db2dc826e1f7c8e0b94ea9641466150b090811b54951baefc0cde8c67d871e2c5d0d431598e7ada503479215055a88cd67c2e709732acfb98dc78e48141083d9bf6983dec0dd4acf6c6382bec2eec2bf195d806f2955a8ce60b05fe65bff960999faad64df00c7588262a6320066f76791f5459f9d9de1749e"}) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [""]}, 0x14}}, 0x40881) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r4 = io_uring_setup(0x6033, &(0x7f00000005c0)={0x0, 0xacab, 0x4, 0x0, 0x1, 0x0, r0}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x2000000, 0x13, r4, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002580)=[{{&(0x7f0000000640)=@isdn, 0x80, &(0x7f0000000740)=[{&(0x7f00000006c0)=""/80, 0x50}], 0x1, &(0x7f0000000780)=""/80, 0x50}}, {{&(0x7f0000000800)=@generic, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000880)=""/215, 0xd7}, {&(0x7f0000000980)=""/145, 0x91}, {&(0x7f0000000a40)=""/187, 0xbb}], 0x3}, 0x2}, {{0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000000b40)=""/121, 0x79}, {&(0x7f0000000bc0)=""/162, 0xa2}, {&(0x7f0000000c80)=""/201, 0xc9}, {&(0x7f0000000d80)=""/19, 0x13}, {&(0x7f0000000dc0)=""/4096, 0x1000}, {&(0x7f0000001dc0)=""/206, 0xce}, {&(0x7f0000001ec0)=""/33, 0x21}, {&(0x7f0000001f00)=""/27, 0x1b}, {&(0x7f0000001f40)=""/239, 0xef}], 0x9, &(0x7f0000002100)=""/234, 0xea}, 0x2}, {{&(0x7f0000002200)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000002540)=[{&(0x7f0000002280)=""/195, 0xc3}, {&(0x7f0000002380)=""/229, 0xe5}, {&(0x7f0000002480)=""/167, 0xa7}], 0x3}, 0x800}], 0x4, 0x2000, &(0x7f0000002680)={0x0, 0x3938700}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x20010, r0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f00000026c0), 0x1) r5 = syz_io_uring_setup(0x4170, &(0x7f0000002700)={0x0, 0xc7db, 0x52c9ea573c6af5bf, 0x1, 0x1af, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000002780), &(0x7f00000027c0)) r6 = syz_io_uring_setup(0x51c7, &(0x7f0000002800)={0x0, 0x5d6e, 0x0, 0x3, 0x38a, 0x0, r5}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000002880), &(0x7f00000028c0)) syz_io_uring_setup(0x3e47, &(0x7f0000002900)={0x0, 0x2baf, 0x4, 0x1, 0x62, 0x0, r6}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000002980), &(0x7f00000029c0)) syz_genetlink_get_family_id$gtp(&(0x7f0000002b40), 0xffffffffffffffff) 20:45:35 executing program 1: ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000000)={'vlan0\x00'}) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000040)={0x1, 0x4, [@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="65c82b4389bb"]}) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x102, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000140)) eventfd(0x8) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000180)) write$eventfd(r1, &(0x7f0000000200)=0x4, 0x8) socket(0x2, 0x80003, 0x3) openat$vcs(0xffffffffffffff9c, &(0x7f0000000400), 0x20000, 0x0) 20:45:35 executing program 2: io_uring_enter(0xffffffffffffffff, 0x2d60, 0x28f3, 0x1, &(0x7f0000000000)={[0x1ff]}, 0x8) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000001300)=[{&(0x7f0000000040)=""/172, 0xac}, {&(0x7f0000000100)=""/212, 0xd4}, {&(0x7f0000000200)=""/116, 0x74}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/82, 0x52}], 0x5) r0 = io_uring_setup(0x4582, &(0x7f0000001380)={0x0, 0xb150, 0x8, 0x6, 0x38f}) r1 = syz_io_uring_setup(0x40, &(0x7f0000001400)={0x0, 0x108e, 0x1, 0x0, 0x1e, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001480), &(0x7f00000014c0)) ioprio_get$uid(0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001580)={'ip6_vti0\x00', &(0x7f0000001500)={'syztnl0\x00', 0x0, 0x29, 0x7f, 0x5, 0x81, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x7, 0xf5e, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000001640)={'syztnl1\x00', &(0x7f00000015c0)={'ip6_vti0\x00', r2, 0x4, 0x1, 0x0, 0x80000001, 0x40, @ipv4={'\x00', '\xff\xff', @local}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7800, 0x10, 0x4, 0x400000}}) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000016c0)='ns/uts\x00') sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001780)={&(0x7f0000001700)={0x6c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@GTPA_O_TEI={0x8}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r2}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_NET_NS_FD={0x8, 0x7, r3}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x41) r4 = syz_io_uring_setup(0x1382, &(0x7f0000001800)={0x0, 0x419b, 0x10, 0x0, 0x2f2, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000001880), &(0x7f00000018c0)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0) syz_io_uring_setup(0x4d2f, &(0x7f0000001900)={0x0, 0xacea, 0x10, 0x3, 0x5, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001980), &(0x7f00000019c0)) syz_genetlink_get_family_id$nbd(&(0x7f0000001a00), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001a80), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r5, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x44, r6, 0x0, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @multicast2}}, @NLBL_MGMT_A_DOMAIN={0x14, 0x1, '^-[#\'@:/[@^*\\$&\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x8010}, 0x20000000) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_DSTOPTS(r7, 0x29, 0x3b, &(0x7f0000001bc0)={0xff}, 0x8) io_uring_setup(0x778d, &(0x7f0000001c80)={0x0, 0xf775, 0x10, 0x0, 0x3a8}) 20:45:35 executing program 1: ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000000)={'vlan0\x00'}) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000040)={0x1, 0x4, [@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="65c82b4389bb"]}) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x102, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000140)) eventfd(0x8) write$eventfd(r1, &(0x7f0000000200)=0x4, 0x8) socket(0x2, 0x80003, 0x3) openat$vcs(0xffffffffffffff9c, &(0x7f0000000400), 0x20000, 0x0) 20:45:35 executing program 7: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x29, 0x2, 0x9, 0x1000, 0x7f, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40, 0x1, 0xfffffff9, 0x3}}) socketpair(0x22, 0x3, 0x4e3, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r2, 0x89f6, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'ip6gre0\x00', r0, 0x4, 0xfc, 0x20, 0xffff, 0x30, @remote, @loopback, 0x40, 0x8020, 0x6a1a, 0xffff}}) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f00000001c0)=0x4, 0x4) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, 0x0, 0x28, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xff}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040002}, 0xc050) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000380)={'sit0\x00', &(0x7f0000000300)={'ip6gre0\x00', r3, 0x4, 0x7f, 0x5, 0x2, 0x8, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @loopback, 0x1, 0x1, 0x3, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r2, 0x89f4, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'ip6tnl0\x00', r4, 0x29, 0xfe, 0xf7, 0x7, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, 0x8000, 0x7, 0x7, 0x401}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000500)={'ip6tnl0\x00', &(0x7f0000000480)={'syztnl2\x00', r4, 0x29, 0x81, 0x8, 0x7, 0xa, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8, 0x8000, 0x20, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000005c0)={'ip6tnl0\x00', &(0x7f0000000540)={'syztnl0\x00', r5, 0x29, 0x0, 0x3f, 0x8000, 0x8, @remote, @local, 0x700, 0x48, 0x0, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000680)={'syztnl1\x00', &(0x7f0000000600)={'ip6gre0\x00', r3, 0x4, 0x7, 0x7, 0xffffffff, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x700, 0x7800, 0x9, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r2, 0x89f4, &(0x7f0000000740)={'sit0\x00', &(0x7f00000006c0)={'ip6gre0\x00', r5, 0x2f, 0x0, 0xff, 0x7, 0x11, @loopback, @mcast2, 0x40, 0x700, 0x2fdf9be1, 0x3}}) getsockopt$sock_int(r2, 0x1, 0x23, &(0x7f0000000780), &(0x7f00000007c0)=0x4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000880)={'ip6tnl0\x00', &(0x7f0000000800)={'syztnl0\x00', r6, 0x2f, 0x6, 0xc7, 0x7, 0x71, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x8, 0x7, 0x1, 0x4}}) r7 = socket$inet6(0xa, 0x4, 0x3) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f00000008c0)) sendmsg$NL80211_CMD_DEL_TX_TS(r1, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x40, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xf}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xf}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x80) syz_genetlink_get_family_id$team(&(0x7f0000000ac0), r7) 20:45:42 executing program 4: ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000080)=@req={0x28, &(0x7f0000000040)={'ip6tnl0\x00', @ifru_data=&(0x7f0000000000)="f17494704e68b47eaad8fb9da92ff99b5cce055ddc13dc72692e77db7acc710c"}}) r0 = syz_io_uring_setup(0x682e, &(0x7f00000000c0)={0x0, 0x61b0, 0x4, 0x1, 0x2d2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)) syz_io_uring_setup(0x6fa4, &(0x7f00000001c0)={0x0, 0x45b1, 0x20, 0x2, 0x62}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fef000/0xe000)=nil, &(0x7f0000000240), &(0x7f0000000280)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_SEND={0x1a, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)="b72d90afab83524e5a67d39021a498ec674b4d2ca9113ff899e0d0f9b83e4bf0e5c7aa9df47be19e9a203e183c82e8042b2828fee967fd5f214e5a80dad31344738967859ee7c7408a45a6d559e9a086f7e05e104e2a4f30aac4aa379c63d71cd8e1c3343a37e93d01bc888eb7592e29d80dfb0e02f86afd532c9d0cfaf2a42c924a791fd05dd6f753e129d61651f1de6a9f72994cbb6a582ac3531e36fe5fa6477b2b98f35e1dd5", 0xa8, 0x840, 0x1, {0x0, r3}}, 0xfffff516) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff2000/0x1000)=nil, 0x1000, 0x2000000, 0x10010, r0, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000480)=@buf={0xbf, &(0x7f00000003c0)="2b4d53922143fe2395390a2145533f7bdcdb30c3bf09285c2bf6fe927deea3a89f0dbabebefdfa91c21096b9dddcbfa0d039b15c68be2b65234ebc1b9b90bfbf785f6481eab0db2dc826e1f7c8e0b94ea9641466150b090811b54951baefc0cde8c67d871e2c5d0d431598e7ada503479215055a88cd67c2e709732acfb98dc78e48141083d9bf6983dec0dd4acf6c6382bec2eec2bf195d806f2955a8ce60b05fe65bff960999faad64df00c7588262a6320066f76791f5459f9d9de1749e"}) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [""]}, 0x14}}, 0x40881) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r4 = io_uring_setup(0x6033, &(0x7f00000005c0)={0x0, 0xacab, 0x4, 0x0, 0x1, 0x0, r0}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x2000000, 0x13, r4, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002580)=[{{&(0x7f0000000640)=@isdn, 0x80, &(0x7f0000000740)=[{&(0x7f00000006c0)=""/80, 0x50}], 0x1, &(0x7f0000000780)=""/80, 0x50}}, {{&(0x7f0000000800)=@generic, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000880)=""/215, 0xd7}, {&(0x7f0000000980)=""/145, 0x91}, {&(0x7f0000000a40)=""/187, 0xbb}], 0x3}, 0x2}, {{0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000000b40)=""/121, 0x79}, {&(0x7f0000000bc0)=""/162, 0xa2}, {&(0x7f0000000c80)=""/201, 0xc9}, {&(0x7f0000000d80)=""/19, 0x13}, {&(0x7f0000000dc0)=""/4096, 0x1000}, {&(0x7f0000001dc0)=""/206, 0xce}, {&(0x7f0000001ec0)=""/33, 0x21}, {&(0x7f0000001f00)=""/27, 0x1b}, {&(0x7f0000001f40)=""/239, 0xef}], 0x9, &(0x7f0000002100)=""/234, 0xea}, 0x2}, {{&(0x7f0000002200)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000002540)=[{&(0x7f0000002280)=""/195, 0xc3}, {&(0x7f0000002380)=""/229, 0xe5}, {&(0x7f0000002480)=""/167, 0xa7}], 0x3}, 0x800}], 0x4, 0x2000, &(0x7f0000002680)={0x0, 0x3938700}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x20010, r0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f00000026c0), 0x1) r5 = syz_io_uring_setup(0x4170, &(0x7f0000002700)={0x0, 0xc7db, 0x52c9ea573c6af5bf, 0x1, 0x1af, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000002780), &(0x7f00000027c0)) syz_io_uring_setup(0x51c7, &(0x7f0000002800)={0x0, 0x5d6e, 0x0, 0x3, 0x38a, 0x0, r5}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000002880), &(0x7f00000028c0)) syz_io_uring_setup(0x3a60, &(0x7f0000002a00)={0x0, 0x5114, 0x4, 0x3, 0xbc}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000002a80), &(0x7f0000002ac0)) syz_genetlink_get_family_id$gtp(&(0x7f0000002b40), 0xffffffffffffffff) 20:45:42 executing program 2: io_uring_enter(0xffffffffffffffff, 0x2d60, 0x28f3, 0x1, &(0x7f0000000000)={[0x1ff]}, 0x8) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000001300)=[{&(0x7f0000000040)=""/172, 0xac}, {&(0x7f0000000100)=""/212, 0xd4}, {&(0x7f0000000200)=""/116, 0x74}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/82, 0x52}], 0x5) r0 = io_uring_setup(0x4582, &(0x7f0000001380)={0x0, 0xb150, 0x8, 0x6, 0x38f}) r1 = syz_io_uring_setup(0x40, &(0x7f0000001400)={0x0, 0x108e, 0x1, 0x0, 0x1e, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001480), &(0x7f00000014c0)) ioprio_get$uid(0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001580)={'ip6_vti0\x00', &(0x7f0000001500)={'syztnl0\x00', 0x0, 0x29, 0x7f, 0x5, 0x81, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x7, 0xf5e, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000001640)={'syztnl1\x00', &(0x7f00000015c0)={'ip6_vti0\x00', r2, 0x4, 0x1, 0x0, 0x80000001, 0x40, @ipv4={'\x00', '\xff\xff', @local}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7800, 0x10, 0x4, 0x400000}}) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000016c0)='ns/uts\x00') sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001780)={&(0x7f0000001700)={0x6c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@GTPA_O_TEI={0x8}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r2}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_NET_NS_FD={0x8, 0x7, r3}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x41) r4 = syz_io_uring_setup(0x1382, &(0x7f0000001800)={0x0, 0x419b, 0x10, 0x0, 0x2f2, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000001880), &(0x7f00000018c0)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0) syz_io_uring_setup(0x4d2f, &(0x7f0000001900)={0x0, 0xacea, 0x10, 0x3, 0x5, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001980), &(0x7f00000019c0)) syz_genetlink_get_family_id$nbd(&(0x7f0000001a00), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001a80), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r5, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x44, r6, 0x0, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @multicast2}}, @NLBL_MGMT_A_DOMAIN={0x14, 0x1, '^-[#\'@:/[@^*\\$&\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x8010}, 0x20000000) socket$inet6_udplite(0xa, 0x2, 0x88) r7 = io_uring_setup(0x7d7f, &(0x7f0000001c00)={0x0, 0x6e7, 0x8, 0x1, 0x11a, 0x0, r0}) io_uring_setup(0x778d, &(0x7f0000001c80)={0x0, 0xf775, 0x10, 0x0, 0x3a8, 0x0, r7}) 20:45:42 executing program 0: r0 = getuid() r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TUNSETOWNER(r1, 0x400454cc, r0) ioprio_get$uid(0x0, r0) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000040)={'wg2\x00'}) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x1) r2 = syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x46d, 0xc101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x9, 0xa0, 0xfd, [{{0x9, 0x4, 0x0, 0xf9, 0x1, 0x3, 0x1, 0x0, 0x5, {0x9, 0x21, 0x7, 0x3f, 0x1, {0x22, 0xc46}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x4, 0x1f, 0x8}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0xe2, 0x3, 0x40}}]}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x10, 0x0, 0x1f, 0x20, 0x8}, 0x72, &(0x7f0000000100)={0x5, 0xf, 0x72, 0x4, [@wireless={0xb, 0x10, 0x1, 0x2, 0x0, 0x3, 0x5, 0x80, 0x80}, @generic={0x3f, 0x10, 0x1, "13eabcbedc7e85361568ba82957512f9fc3dc29c3335eacf761eb23847dd322ade415ab9dabe332209a130b7c151897613085a1787d6b6748b0354d0"}, @ssp_cap={0x18, 0x10, 0xa, 0x3f, 0x3, 0x1, 0xff0f, 0x9, [0x0, 0x3fc0, 0xc000]}, @wireless={0xb, 0x10, 0x1, 0x2, 0x40, 0x3e, 0xc7, 0xffff, 0x8}]}, 0x1, [{0xc7, &(0x7f0000000180)=@string={0xc7, 0x3, "7f126e6ffa050bba81edaf647a108d9fd37fbe3d11c15a3707477a6757d84b545a36669de4aa342241c88f7d526936f675209a74339730655071e3fcb25a208bbc069d6df4c07b4705d393a371da12cad8aaf6778ad74c8d58df24aaa77a7230a9f3628e71abaf0f819fdc49a07c577564df79e1300f987b6d6f0677e40fce2bb108a04a299c04e4bf6756185d8f38f7b15524ba0d91f7e2e25eec64a5523257550e35539b7efd2f71cc57e3428c7c38353ccfddec9577d5854e54703d3bf8b4132cd5932a"}}]}) syz_usb_ep_write(r2, 0x1f, 0x17, &(0x7f00000002c0)="18676c5fbcc850892fbc37961384e6dc244a9c136edf28") ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000300)=[0x9, 0x7]) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r3, 0x29, 0x2d, &(0x7f0000000340)={0x0, {{0xa, 0x4e20, 0x9, @mcast2, 0x83}}}, 0x88) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000400)=""/151) ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, &(0x7f00000004c0)=""/9) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000005c0)={'ip6_vti0\x00', &(0x7f0000000540)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0x8, 0x8000, 0x2e, @private0, @remote, 0x7800, 0x8, 0xb0b, 0x1ff}}) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000800)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000600)={0x1bc, 0x0, 0x2, 0x70bd29, 0x25dfdbfc, {}, [{{0x8}, {0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r4}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x81}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r5 = syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000840)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x46a, 0x23, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x7f, 0x60, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x8, {0x9, 0x21, 0x8, 0x3f, 0x1, {0x22, 0x4d6}}, {{{0x9, 0x5, 0x81, 0x3, 0x1af, 0x3, 0x0, 0x8}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x9, 0xad, 0x5a}}]}}}]}}]}}, &(0x7f0000000a80)={0xa, &(0x7f0000000880)={0xa, 0x6, 0x201, 0x8, 0x3f, 0x55, 0xff, 0x4}, 0x112, &(0x7f00000008c0)={0x5, 0xf, 0x112, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x0, 0x4, 0x5, 0xb4}, @generic={0xee, 0x10, 0x4, "d0031eae4efd237341c8a1bdb1418904fc37f74fdabfad1df4fe696990c75cc8518ee96883820f53592b5ba731abeef63833d04c5340b79bff983649da27141de3a17e7d857083f7f8c13daf1e65de8ff19e6a50698f4e1d7bd3e6c943f1e27efd3bd1764199faf293d79d65c7acb5cc89446d89f9b70b1497b481fbc6d8d97602a51e7dfcf1a3893bf6c45e2f44f0570480ac72d25d25c82f01b3d6ebaab63fb5a5f4fd0482bc1de2fb31178f6f3e72bac9d72289115497618203e4211f1f810b23a49c119d48fe0db66a3b71fa247b94f3c2f657e92dd120fe78a0c943d5d8b0930d89f099b08058e47b"}, @ssp_cap={0x14, 0x10, 0xa, 0xcd, 0x2, 0x0, 0x7800, 0x8, [0xfe8000, 0xff00]}]}, 0x2, [{0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x406}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0xf0ff}}]}) syz_usb_ep_read(r5, 0x3f, 0x4b, &(0x7f0000000ac0)=""/75) socket$inet6_udplite(0xa, 0x2, 0x88) 20:45:42 executing program 5: ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x2f, 0x2, 0x9, 0x9b8c, 0x20, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x20, 0x1, 0xfff0000, 0x200}}) socketpair(0x28, 0xa, 0x5, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000100)=0x5, 0x4) socketpair(0x1e, 0x6, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r3) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r3) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, r4, 0x10, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7, 0x56}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x54}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6f}]}, 0x50}, 0x1, 0x0, 0x0, 0x801}, 0x8801) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000380), r2) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x3c, r5, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48c9ea108b1f44ee}, 0x800) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x18, 0x0, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x40040c0) socketpair(0x6, 0x4, 0x8001, &(0x7f00000005c0)={0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000580), r7) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000600), r8) r9 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r9, 0x89f3, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f0000000640)={'syztnl1\x00', r0, 0x29, 0x3, 0xfe, 0x80000000, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x40, 0x7, 0x3, 0xffffff81}}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 20:45:42 executing program 1: ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000000)={'vlan0\x00'}) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000040)={0x1, 0x4, [@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="65c82b4389bb"]}) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x102, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000140)) write$eventfd(r1, &(0x7f0000000200)=0x4, 0x8) socket(0x2, 0x80003, 0x3) openat$vcs(0xffffffffffffff9c, &(0x7f0000000400), 0x20000, 0x0) 20:45:42 executing program 7: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x29, 0x2, 0x9, 0x1000, 0x7f, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40, 0x1, 0xfffffff9, 0x3}}) socketpair(0x22, 0x3, 0x4e3, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r2, 0x89f6, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'ip6gre0\x00', r0, 0x4, 0xfc, 0x20, 0xffff, 0x30, @remote, @loopback, 0x40, 0x8020, 0x6a1a, 0xffff}}) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f00000001c0)=0x4, 0x4) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, 0x0, 0x28, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xff}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040002}, 0xc050) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000380)={'sit0\x00', &(0x7f0000000300)={'ip6gre0\x00', r3, 0x4, 0x7f, 0x5, 0x2, 0x8, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @loopback, 0x1, 0x1, 0x3, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r2, 0x89f4, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'ip6tnl0\x00', r4, 0x29, 0xfe, 0xf7, 0x7, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, 0x8000, 0x7, 0x7, 0x401}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000500)={'ip6tnl0\x00', &(0x7f0000000480)={'syztnl2\x00', r4, 0x29, 0x81, 0x8, 0x7, 0xa, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8, 0x8000, 0x20, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000005c0)={'ip6tnl0\x00', &(0x7f0000000540)={'syztnl0\x00', r5, 0x29, 0x0, 0x3f, 0x8000, 0x8, @remote, @local, 0x700, 0x48, 0x0, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000680)={'syztnl1\x00', &(0x7f0000000600)={'ip6gre0\x00', r3, 0x4, 0x7, 0x7, 0xffffffff, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x700, 0x7800, 0x9, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r2, 0x89f4, &(0x7f0000000740)={'sit0\x00', &(0x7f00000006c0)={'ip6gre0\x00', r5, 0x2f, 0x0, 0xff, 0x7, 0x11, @loopback, @mcast2, 0x40, 0x700, 0x2fdf9be1, 0x3}}) getsockopt$sock_int(r2, 0x1, 0x23, &(0x7f0000000780), &(0x7f00000007c0)=0x4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000880)={'ip6tnl0\x00', &(0x7f0000000800)={'syztnl0\x00', r6, 0x2f, 0x6, 0xc7, 0x7, 0x71, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x8, 0x7, 0x1, 0x4}}) r7 = socket$inet6(0xa, 0x4, 0x3) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f00000008c0)) sendmsg$NL80211_CMD_DEL_TX_TS(r1, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x40, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xf}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xf}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x80) syz_genetlink_get_family_id$team(&(0x7f0000000ac0), r7) 20:45:42 executing program 3: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f0000000000)=""/148) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f00000000c0)=""/40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x10000, 0x0) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000140)=""/183) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x901, 0x0) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000280)=0x7) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x44002, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000300)=""/4096) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000001300), 0x101002, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000001340)={'netpci0\x00'}) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001380), 0x70380, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000001400), r0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r5, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x2c, r6, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x10001}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000024) ioctl$TUNGETIFF(r3, 0x800454d2, &(0x7f0000001500)={'ipvlan1\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x17) ioctl$TUNGETFEATURES(r5, 0x800454cf, &(0x7f0000001540)) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000001680)) 20:45:42 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_FAMILY={0x6}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0xc000) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x6c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010100}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010102}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x4c, 0x0, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x7f}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x4}, @IEEE802154_ATTR_CCA_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4c00c000) r2 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000540), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000005c0)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000680)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x4, 0x8, 0x5a, @dev={0xfe, 0x80, '\x00', 0x2a}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7800, 0x20, 0x7, 0x4aa89fc9}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000740)={'sit0\x00', &(0x7f00000006c0)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x4, 0x3, 0x40, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, 0x1, 0x1, 0x2, 0x100}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000800)={'ip6tnl0\x00', &(0x7f0000000780)={'sit0\x00', 0x0, 0x4, 0x24, 0x79, 0xfffffffd, 0x7, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x700, 0x0, 0x20}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000940)={'ip6tnl0\x00', &(0x7f00000008c0)={'sit0\x00', 0x0, 0x29, 0x1, 0xf7, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, @remote, 0x700, 0x80, 0x3, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000a00)={'syztnl2\x00', &(0x7f0000000980)={'syztnl1\x00', 0x0, 0x2f, 0x9, 0xf0, 0x4, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7800, 0x0, 0x79, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000ac0)={'ip6tnl0\x00', &(0x7f0000000a40)={'ip6_vti0\x00', 0x0, 0x29, 0x4, 0x1, 0x7ff, 0x22, @loopback, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x7, 0x80, 0xc78, 0x1f}}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001100)={&(0x7f0000000b00)={0x5e8, r3, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8}, {0xc4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xcac}}, {0x8, 0x6, r5}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x184, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r7}, {0xfc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8}, {0x228, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r10}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x21}}, {0x8, 0x6, r11}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x2, 0xff, 0x18, 0x2}]}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x401, 0xaf, 0x4, 0x5}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x89e}}}]}}]}, 0x5e8}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r12 = openat$vcs(0xffffffffffffff9c, &(0x7f00000011c0), 0x18b000, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r12, &(0x7f0000001340)={&(0x7f0000001200), 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x70, 0x0, 0x28, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x21}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x31}, @NL80211_ATTR_PMKID={0x14, 0x55, "de6a7d645d6d49b3b5b65b5753264841"}, @NL80211_ATTR_SSID={0x5, 0x34, @random='C'}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x48}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@broadcast}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x38}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x2e}, @NL80211_ATTR_SSID={0x7, 0x34, @random="219d02"}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x4084) 20:45:42 executing program 3: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f0000000000)=""/148) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f00000000c0)=""/40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x10000, 0x0) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000140)=""/183) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x901, 0x0) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000280)=0x7) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x44002, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000300)=""/4096) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000001300), 0x101002, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000001340)={'netpci0\x00'}) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001380), 0x70380, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000001400), r0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r5, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x2c, r6, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x10001}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000024) ioctl$TUNGETIFF(r3, 0x800454d2, &(0x7f0000001500)={'ipvlan1\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x17) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000001680)) 20:45:42 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_FAMILY={0x6}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0xc000) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x6c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010100}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010102}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x4c, 0x0, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x7f}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x4}, @IEEE802154_ATTR_CCA_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4c00c000) r2 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000540), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000005c0)={'batadv_slave_0\x00'}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000680)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x4, 0x8, 0x5a, @dev={0xfe, 0x80, '\x00', 0x2a}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7800, 0x20, 0x7, 0x4aa89fc9}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000740)={'sit0\x00', &(0x7f00000006c0)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x4, 0x3, 0x40, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, 0x1, 0x1, 0x2, 0x100}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000800)={'ip6tnl0\x00', &(0x7f0000000780)={'sit0\x00', 0x0, 0x4, 0x24, 0x79, 0xfffffffd, 0x7, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x700, 0x0, 0x20}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000940)={'ip6tnl0\x00', &(0x7f00000008c0)={'sit0\x00', 0x0, 0x29, 0x1, 0xf7, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, @remote, 0x700, 0x80, 0x3, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000a00)={'syztnl2\x00', &(0x7f0000000980)={'syztnl1\x00', 0x0, 0x2f, 0x9, 0xf0, 0x4, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7800, 0x0, 0x79, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000ac0)={'ip6tnl0\x00', &(0x7f0000000a40)={'ip6_vti0\x00', 0x0, 0x29, 0x4, 0x1, 0x7ff, 0x22, @loopback, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x7, 0x80, 0xc78, 0x1f}}) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000011c0), 0x18b000, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r3, &(0x7f0000001340)={&(0x7f0000001200), 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x70, 0x0, 0x28, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x21}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x31}, @NL80211_ATTR_PMKID={0x14, 0x55, "de6a7d645d6d49b3b5b65b5753264841"}, @NL80211_ATTR_SSID={0x5, 0x34, @random='C'}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x48}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@broadcast}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x38}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x2e}, @NL80211_ATTR_SSID={0x7, 0x34, @random="219d02"}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x4084) 20:45:42 executing program 1: ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000000)={'vlan0\x00'}) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000040)={0x1, 0x4, [@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="65c82b4389bb"]}) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x102, 0x0) write$eventfd(r1, &(0x7f0000000200)=0x4, 0x8) socket(0x2, 0x80003, 0x3) openat$vcs(0xffffffffffffff9c, &(0x7f0000000400), 0x20000, 0x0) 20:45:42 executing program 4: ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000080)=@req={0x28, &(0x7f0000000040)={'ip6tnl0\x00', @ifru_data=&(0x7f0000000000)="f17494704e68b47eaad8fb9da92ff99b5cce055ddc13dc72692e77db7acc710c"}}) r0 = syz_io_uring_setup(0x682e, &(0x7f00000000c0)={0x0, 0x61b0, 0x4, 0x1, 0x2d2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)) syz_io_uring_setup(0x6fa4, &(0x7f00000001c0)={0x0, 0x45b1, 0x20, 0x2, 0x62}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fef000/0xe000)=nil, &(0x7f0000000240), &(0x7f0000000280)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_SEND={0x1a, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)="b72d90afab83524e5a67d39021a498ec674b4d2ca9113ff899e0d0f9b83e4bf0e5c7aa9df47be19e9a203e183c82e8042b2828fee967fd5f214e5a80dad31344738967859ee7c7408a45a6d559e9a086f7e05e104e2a4f30aac4aa379c63d71cd8e1c3343a37e93d01bc888eb7592e29d80dfb0e02f86afd532c9d0cfaf2a42c924a791fd05dd6f753e129d61651f1de6a9f72994cbb6a582ac3531e36fe5fa6477b2b98f35e1dd5", 0xa8, 0x840, 0x1, {0x0, r3}}, 0xfffff516) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff2000/0x1000)=nil, 0x1000, 0x2000000, 0x10010, r0, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000480)=@buf={0xbf, &(0x7f00000003c0)="2b4d53922143fe2395390a2145533f7bdcdb30c3bf09285c2bf6fe927deea3a89f0dbabebefdfa91c21096b9dddcbfa0d039b15c68be2b65234ebc1b9b90bfbf785f6481eab0db2dc826e1f7c8e0b94ea9641466150b090811b54951baefc0cde8c67d871e2c5d0d431598e7ada503479215055a88cd67c2e709732acfb98dc78e48141083d9bf6983dec0dd4acf6c6382bec2eec2bf195d806f2955a8ce60b05fe65bff960999faad64df00c7588262a6320066f76791f5459f9d9de1749e"}) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [""]}, 0x14}}, 0x40881) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r4 = io_uring_setup(0x6033, &(0x7f00000005c0)={0x0, 0xacab, 0x4, 0x0, 0x1, 0x0, r0}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x2000000, 0x13, r4, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002580)=[{{&(0x7f0000000640)=@isdn, 0x80, &(0x7f0000000740)=[{&(0x7f00000006c0)=""/80, 0x50}], 0x1, &(0x7f0000000780)=""/80, 0x50}}, {{&(0x7f0000000800)=@generic, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000880)=""/215, 0xd7}, {&(0x7f0000000980)=""/145, 0x91}, {&(0x7f0000000a40)=""/187, 0xbb}], 0x3}, 0x2}, {{0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000000b40)=""/121, 0x79}, {&(0x7f0000000bc0)=""/162, 0xa2}, {&(0x7f0000000c80)=""/201, 0xc9}, {&(0x7f0000000d80)=""/19, 0x13}, {&(0x7f0000000dc0)=""/4096, 0x1000}, {&(0x7f0000001dc0)=""/206, 0xce}, {&(0x7f0000001ec0)=""/33, 0x21}, {&(0x7f0000001f00)=""/27, 0x1b}, {&(0x7f0000001f40)=""/239, 0xef}], 0x9, &(0x7f0000002100)=""/234, 0xea}, 0x2}, {{&(0x7f0000002200)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000002540)=[{&(0x7f0000002280)=""/195, 0xc3}, {&(0x7f0000002380)=""/229, 0xe5}, {&(0x7f0000002480)=""/167, 0xa7}], 0x3}, 0x800}], 0x4, 0x2000, &(0x7f0000002680)={0x0, 0x3938700}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x20010, r0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f00000026c0), 0x1) r5 = syz_io_uring_setup(0x4170, &(0x7f0000002700)={0x0, 0xc7db, 0x52c9ea573c6af5bf, 0x1, 0x1af, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000002780), &(0x7f00000027c0)) syz_io_uring_setup(0x51c7, &(0x7f0000002800)={0x0, 0x5d6e, 0x0, 0x3, 0x38a, 0x0, r5}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000002880), &(0x7f00000028c0)) syz_io_uring_setup(0x3a60, &(0x7f0000002a00)={0x0, 0x5114, 0x4, 0x3, 0xbc}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000002a80), &(0x7f0000002ac0)) syz_genetlink_get_family_id$gtp(&(0x7f0000002b40), 0xffffffffffffffff) 20:45:43 executing program 2: io_uring_enter(0xffffffffffffffff, 0x2d60, 0x28f3, 0x1, &(0x7f0000000000)={[0x1ff]}, 0x8) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000001300)=[{&(0x7f0000000040)=""/172, 0xac}, {&(0x7f0000000100)=""/212, 0xd4}, {&(0x7f0000000200)=""/116, 0x74}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/82, 0x52}], 0x5) r0 = io_uring_setup(0x4582, &(0x7f0000001380)={0x0, 0xb150, 0x8, 0x6, 0x38f}) r1 = syz_io_uring_setup(0x40, &(0x7f0000001400)={0x0, 0x108e, 0x1, 0x0, 0x1e, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001480), &(0x7f00000014c0)) ioprio_get$uid(0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001580)={'ip6_vti0\x00', &(0x7f0000001500)={'syztnl0\x00', 0x0, 0x29, 0x7f, 0x5, 0x81, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x7, 0xf5e, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000001640)={'syztnl1\x00', &(0x7f00000015c0)={'ip6_vti0\x00', r2, 0x4, 0x1, 0x0, 0x80000001, 0x40, @ipv4={'\x00', '\xff\xff', @local}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7800, 0x10, 0x4, 0x400000}}) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000016c0)='ns/uts\x00') sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001780)={&(0x7f0000001700)={0x6c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@GTPA_O_TEI={0x8}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r2}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_NET_NS_FD={0x8, 0x7, r3}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x41) r4 = syz_io_uring_setup(0x1382, &(0x7f0000001800)={0x0, 0x419b, 0x10, 0x0, 0x2f2, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000001880), &(0x7f00000018c0)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0) syz_io_uring_setup(0x4d2f, &(0x7f0000001900)={0x0, 0xacea, 0x10, 0x3, 0x5, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001980), &(0x7f00000019c0)) syz_genetlink_get_family_id$nbd(&(0x7f0000001a00), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001a80), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r5, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x44, r6, 0x0, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @multicast2}}, @NLBL_MGMT_A_DOMAIN={0x14, 0x1, '^-[#\'@:/[@^*\\$&\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x8010}, 0x20000000) socket$inet6_udplite(0xa, 0x2, 0x88) r7 = io_uring_setup(0x7d7f, &(0x7f0000001c00)={0x0, 0x6e7, 0x8, 0x1, 0x11a, 0x0, r0}) io_uring_setup(0x778d, &(0x7f0000001c80)={0x0, 0xf775, 0x10, 0x0, 0x3a8, 0x0, r7}) 20:45:43 executing program 1: ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000000)={'vlan0\x00'}) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000040)={0x1, 0x4, [@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="65c82b4389bb"]}) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) write$eventfd(0xffffffffffffffff, &(0x7f0000000200)=0x4, 0x8) socket(0x2, 0x80003, 0x3) openat$vcs(0xffffffffffffff9c, &(0x7f0000000400), 0x20000, 0x0) 20:45:43 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_FAMILY={0x6}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0xc000) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x6c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010100}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010102}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x4c, 0x0, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x7f}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x4}, @IEEE802154_ATTR_CCA_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4c00c000) r2 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000540), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000005c0)={'batadv_slave_0\x00'}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000680)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x4, 0x8, 0x5a, @dev={0xfe, 0x80, '\x00', 0x2a}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7800, 0x20, 0x7, 0x4aa89fc9}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000740)={'sit0\x00', &(0x7f00000006c0)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x4, 0x3, 0x40, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, 0x1, 0x1, 0x2, 0x100}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000800)={'ip6tnl0\x00', &(0x7f0000000780)={'sit0\x00', 0x0, 0x4, 0x24, 0x79, 0xfffffffd, 0x7, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x700, 0x0, 0x20}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000940)={'ip6tnl0\x00', &(0x7f00000008c0)={'sit0\x00', 0x0, 0x29, 0x1, 0xf7, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, @remote, 0x700, 0x80, 0x3, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000a00)={'syztnl2\x00', &(0x7f0000000980)={'syztnl1\x00', 0x0, 0x2f, 0x9, 0xf0, 0x4, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7800, 0x0, 0x79, 0x4}}) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000011c0), 0x18b000, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r3, &(0x7f0000001340)={&(0x7f0000001200), 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x70, 0x0, 0x28, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x21}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x31}, @NL80211_ATTR_PMKID={0x14, 0x55, "de6a7d645d6d49b3b5b65b5753264841"}, @NL80211_ATTR_SSID={0x5, 0x34, @random='C'}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x48}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@broadcast}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x38}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x2e}, @NL80211_ATTR_SSID={0x7, 0x34, @random="219d02"}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x4084) 20:45:43 executing program 3: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f0000000000)=""/148) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f00000000c0)=""/40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x10000, 0x0) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000140)=""/183) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x901, 0x0) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000280)=0x7) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x44002, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000300)=""/4096) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000001300), 0x101002, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000001340)={'netpci0\x00'}) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001380), 0x70380, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000001400), r0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r5, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x2c, r6, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x10001}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000024) ioctl$TUNGETIFF(r3, 0x800454d2, &(0x7f0000001500)={'ipvlan1\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x17) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000001680)) 20:45:51 executing program 3: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f0000000000)=""/148) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f00000000c0)=""/40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x10000, 0x0) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000140)=""/183) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x901, 0x0) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000280)=0x7) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x44002, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000300)=""/4096) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000001300), 0x101002, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000001340)={'netpci0\x00'}) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001380), 0x70380, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000001400), r0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r5, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x2c, r6, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x10001}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000024) ioctl$TUNGETIFF(r3, 0x800454d2, &(0x7f0000001500)={'ipvlan1\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x17) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000001680)) 20:45:51 executing program 0: r0 = getuid() r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TUNSETOWNER(r1, 0x400454cc, r0) ioprio_get$uid(0x0, r0) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000040)={'wg2\x00'}) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x1) r2 = syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x46d, 0xc101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x9, 0xa0, 0xfd, [{{0x9, 0x4, 0x0, 0xf9, 0x1, 0x3, 0x1, 0x0, 0x5, {0x9, 0x21, 0x7, 0x3f, 0x1, {0x22, 0xc46}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x4, 0x1f, 0x8}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0xe2, 0x3, 0x40}}]}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x10, 0x0, 0x1f, 0x20, 0x8}, 0x72, &(0x7f0000000100)={0x5, 0xf, 0x72, 0x4, [@wireless={0xb, 0x10, 0x1, 0x2, 0x0, 0x3, 0x5, 0x80, 0x80}, @generic={0x3f, 0x10, 0x1, "13eabcbedc7e85361568ba82957512f9fc3dc29c3335eacf761eb23847dd322ade415ab9dabe332209a130b7c151897613085a1787d6b6748b0354d0"}, @ssp_cap={0x18, 0x10, 0xa, 0x3f, 0x3, 0x1, 0xff0f, 0x9, [0x0, 0x3fc0, 0xc000]}, @wireless={0xb, 0x10, 0x1, 0x2, 0x40, 0x3e, 0xc7, 0xffff, 0x8}]}, 0x1, [{0xc7, &(0x7f0000000180)=@string={0xc7, 0x3, "7f126e6ffa050bba81edaf647a108d9fd37fbe3d11c15a3707477a6757d84b545a36669de4aa342241c88f7d526936f675209a74339730655071e3fcb25a208bbc069d6df4c07b4705d393a371da12cad8aaf6778ad74c8d58df24aaa77a7230a9f3628e71abaf0f819fdc49a07c577564df79e1300f987b6d6f0677e40fce2bb108a04a299c04e4bf6756185d8f38f7b15524ba0d91f7e2e25eec64a5523257550e35539b7efd2f71cc57e3428c7c38353ccfddec9577d5854e54703d3bf8b4132cd5932a"}}]}) syz_usb_ep_write(r2, 0x1f, 0x17, &(0x7f00000002c0)="18676c5fbcc850892fbc37961384e6dc244a9c136edf28") ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000300)=[0x9, 0x7]) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r3, 0x29, 0x2d, &(0x7f0000000340)={0x0, {{0xa, 0x4e20, 0x9, @mcast2, 0x83}}}, 0x88) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000400)=""/151) ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, &(0x7f00000004c0)=""/9) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000005c0)={'ip6_vti0\x00', &(0x7f0000000540)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0x8, 0x8000, 0x2e, @private0, @remote, 0x7800, 0x8, 0xb0b, 0x1ff}}) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000800)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000600)={0x1bc, 0x0, 0x2, 0x70bd29, 0x25dfdbfc, {}, [{{0x8}, {0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r4}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x81}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000840)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x46a, 0x23, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x7f, 0x60, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x8, {0x9, 0x21, 0x8, 0x3f, 0x1, {0x22, 0x4d6}}, {{{0x9, 0x5, 0x81, 0x3, 0x1af, 0x3, 0x0, 0x8}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x9, 0xad, 0x5a}}]}}}]}}]}}, &(0x7f0000000a80)={0xa, &(0x7f0000000880)={0xa, 0x6, 0x201, 0x8, 0x3f, 0x55, 0xff, 0x4}, 0x112, &(0x7f00000008c0)={0x5, 0xf, 0x112, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x0, 0x4, 0x5, 0xb4}, @generic={0xee, 0x10, 0x4, "d0031eae4efd237341c8a1bdb1418904fc37f74fdabfad1df4fe696990c75cc8518ee96883820f53592b5ba731abeef63833d04c5340b79bff983649da27141de3a17e7d857083f7f8c13daf1e65de8ff19e6a50698f4e1d7bd3e6c943f1e27efd3bd1764199faf293d79d65c7acb5cc89446d89f9b70b1497b481fbc6d8d97602a51e7dfcf1a3893bf6c45e2f44f0570480ac72d25d25c82f01b3d6ebaab63fb5a5f4fd0482bc1de2fb31178f6f3e72bac9d72289115497618203e4211f1f810b23a49c119d48fe0db66a3b71fa247b94f3c2f657e92dd120fe78a0c943d5d8b0930d89f099b08058e47b"}, @ssp_cap={0x14, 0x10, 0xa, 0xcd, 0x2, 0x0, 0x7800, 0x8, [0xfe8000, 0xff00]}]}, 0x2, [{0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x406}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0xf0ff}}]}) socket$inet6_udplite(0xa, 0x2, 0x88) 20:45:51 executing program 5: ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x2f, 0x2, 0x9, 0x9b8c, 0x20, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x20, 0x1, 0xfff0000, 0x200}}) socketpair(0x28, 0xa, 0x5, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000100)=0x5, 0x4) socketpair(0x1e, 0x6, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r2) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, r3, 0x10, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7, 0x56}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x54}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6f}]}, 0x50}, 0x1, 0x0, 0x0, 0x801}, 0x8801) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000380), r1) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x3c, r4, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48c9ea108b1f44ee}, 0x800) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x18, 0x0, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x40040c0) socketpair(0x6, 0x4, 0x8001, &(0x7f00000005c0)={0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000580), r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000600), r7) socket$inet6(0xa, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 20:45:51 executing program 1: ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000000)={'vlan0\x00'}) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000040)={0x1, 0x4, [@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="65c82b4389bb"]}) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) write$eventfd(0xffffffffffffffff, &(0x7f0000000200)=0x4, 0x8) socket(0x2, 0x80003, 0x3) openat$vcs(0xffffffffffffff9c, &(0x7f0000000400), 0x20000, 0x0) 20:45:51 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_FAMILY={0x6}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0xc000) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x6c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010100}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010102}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x4c, 0x0, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x7f}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x4}, @IEEE802154_ATTR_CCA_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4c00c000) r2 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000540), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000005c0)={'batadv_slave_0\x00'}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000680)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x4, 0x8, 0x5a, @dev={0xfe, 0x80, '\x00', 0x2a}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7800, 0x20, 0x7, 0x4aa89fc9}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000740)={'sit0\x00', &(0x7f00000006c0)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x4, 0x3, 0x40, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, 0x1, 0x1, 0x2, 0x100}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000800)={'ip6tnl0\x00', &(0x7f0000000780)={'sit0\x00', 0x0, 0x4, 0x24, 0x79, 0xfffffffd, 0x7, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x700, 0x0, 0x20}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000940)={'ip6tnl0\x00', &(0x7f00000008c0)={'sit0\x00', 0x0, 0x29, 0x1, 0xf7, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, @remote, 0x700, 0x80, 0x3, 0x8}}) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000011c0), 0x18b000, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r3, &(0x7f0000001340)={&(0x7f0000001200), 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x70, 0x0, 0x28, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x21}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x31}, @NL80211_ATTR_PMKID={0x14, 0x55, "de6a7d645d6d49b3b5b65b5753264841"}, @NL80211_ATTR_SSID={0x5, 0x34, @random='C'}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x48}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@broadcast}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x38}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x2e}, @NL80211_ATTR_SSID={0x7, 0x34, @random="219d02"}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x4084) 20:45:51 executing program 2: io_uring_enter(0xffffffffffffffff, 0x2d60, 0x28f3, 0x1, &(0x7f0000000000)={[0x1ff]}, 0x8) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000001300)=[{&(0x7f0000000040)=""/172, 0xac}, {&(0x7f0000000100)=""/212, 0xd4}, {&(0x7f0000000200)=""/116, 0x74}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/82, 0x52}], 0x5) r0 = io_uring_setup(0x4582, &(0x7f0000001380)={0x0, 0xb150, 0x8, 0x6, 0x38f}) r1 = syz_io_uring_setup(0x40, &(0x7f0000001400)={0x0, 0x108e, 0x1, 0x0, 0x1e, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001480), &(0x7f00000014c0)) ioprio_get$uid(0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001580)={'ip6_vti0\x00', &(0x7f0000001500)={'syztnl0\x00', 0x0, 0x29, 0x7f, 0x5, 0x81, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x7, 0xf5e, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000001640)={'syztnl1\x00', &(0x7f00000015c0)={'ip6_vti0\x00', r2, 0x4, 0x1, 0x0, 0x80000001, 0x40, @ipv4={'\x00', '\xff\xff', @local}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7800, 0x10, 0x4, 0x400000}}) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000016c0)='ns/uts\x00') sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001780)={&(0x7f0000001700)={0x6c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@GTPA_O_TEI={0x8}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r2}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_NET_NS_FD={0x8, 0x7, r3}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x41) r4 = syz_io_uring_setup(0x1382, &(0x7f0000001800)={0x0, 0x419b, 0x10, 0x0, 0x2f2, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000001880), &(0x7f00000018c0)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0) syz_io_uring_setup(0x4d2f, &(0x7f0000001900)={0x0, 0xacea, 0x10, 0x3, 0x5, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001980), &(0x7f00000019c0)) syz_genetlink_get_family_id$nbd(&(0x7f0000001a00), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001a80), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r5, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x44, r6, 0x0, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @multicast2}}, @NLBL_MGMT_A_DOMAIN={0x14, 0x1, '^-[#\'@:/[@^*\\$&\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x8010}, 0x20000000) socket$inet6_udplite(0xa, 0x2, 0x88) r7 = io_uring_setup(0x7d7f, &(0x7f0000001c00)={0x0, 0x6e7, 0x8, 0x1, 0x11a, 0x0, r0}) io_uring_setup(0x778d, &(0x7f0000001c80)={0x0, 0xf775, 0x10, 0x0, 0x3a8, 0x0, r7}) 20:45:51 executing program 7: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x29, 0x2, 0x9, 0x1000, 0x7f, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40, 0x1, 0xfffffff9, 0x3}}) socketpair(0x22, 0x3, 0x4e3, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r2, 0x89f6, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'ip6gre0\x00', r0, 0x4, 0xfc, 0x20, 0xffff, 0x30, @remote, @loopback, 0x40, 0x8020, 0x6a1a, 0xffff}}) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f00000001c0)=0x4, 0x4) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, 0x0, 0x28, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xff}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040002}, 0xc050) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000380)={'sit0\x00', &(0x7f0000000300)={'ip6gre0\x00', r3, 0x4, 0x7f, 0x5, 0x2, 0x8, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @loopback, 0x1, 0x1, 0x3, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r2, 0x89f4, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'ip6tnl0\x00', r4, 0x29, 0xfe, 0xf7, 0x7, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, 0x8000, 0x7, 0x7, 0x401}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000500)={'ip6tnl0\x00', &(0x7f0000000480)={'syztnl2\x00', r4, 0x29, 0x81, 0x8, 0x7, 0xa, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8, 0x8000, 0x20, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000005c0)={'ip6tnl0\x00', &(0x7f0000000540)={'syztnl0\x00', r5, 0x29, 0x0, 0x3f, 0x8000, 0x8, @remote, @local, 0x700, 0x48, 0x0, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000680)={'syztnl1\x00', &(0x7f0000000600)={'ip6gre0\x00', r3, 0x4, 0x7, 0x7, 0xffffffff, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x700, 0x7800, 0x9, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r2, 0x89f4, &(0x7f0000000740)={'sit0\x00', &(0x7f00000006c0)={'ip6gre0\x00', r5, 0x2f, 0x0, 0xff, 0x7, 0x11, @loopback, @mcast2, 0x40, 0x700, 0x2fdf9be1, 0x3}}) getsockopt$sock_int(r2, 0x1, 0x23, &(0x7f0000000780), &(0x7f00000007c0)=0x4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000880)={'ip6tnl0\x00', &(0x7f0000000800)={'syztnl0\x00', r6, 0x2f, 0x6, 0xc7, 0x7, 0x71, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x8, 0x7, 0x1, 0x4}}) r7 = socket$inet6(0xa, 0x4, 0x3) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f00000008c0)) sendmsg$NL80211_CMD_DEL_TX_TS(r1, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x40, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xf}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xf}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x80) syz_genetlink_get_family_id$team(&(0x7f0000000ac0), r7) 20:45:51 executing program 4: ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000080)=@req={0x28, &(0x7f0000000040)={'ip6tnl0\x00', @ifru_data=&(0x7f0000000000)="f17494704e68b47eaad8fb9da92ff99b5cce055ddc13dc72692e77db7acc710c"}}) r0 = syz_io_uring_setup(0x682e, &(0x7f00000000c0)={0x0, 0x61b0, 0x4, 0x1, 0x2d2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)) syz_io_uring_setup(0x6fa4, &(0x7f00000001c0)={0x0, 0x45b1, 0x20, 0x2, 0x62}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fef000/0xe000)=nil, &(0x7f0000000240), &(0x7f0000000280)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_SEND={0x1a, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)="b72d90afab83524e5a67d39021a498ec674b4d2ca9113ff899e0d0f9b83e4bf0e5c7aa9df47be19e9a203e183c82e8042b2828fee967fd5f214e5a80dad31344738967859ee7c7408a45a6d559e9a086f7e05e104e2a4f30aac4aa379c63d71cd8e1c3343a37e93d01bc888eb7592e29d80dfb0e02f86afd532c9d0cfaf2a42c924a791fd05dd6f753e129d61651f1de6a9f72994cbb6a582ac3531e36fe5fa6477b2b98f35e1dd5", 0xa8, 0x840, 0x1, {0x0, r3}}, 0xfffff516) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff2000/0x1000)=nil, 0x1000, 0x2000000, 0x10010, r0, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000480)=@buf={0xbf, &(0x7f00000003c0)="2b4d53922143fe2395390a2145533f7bdcdb30c3bf09285c2bf6fe927deea3a89f0dbabebefdfa91c21096b9dddcbfa0d039b15c68be2b65234ebc1b9b90bfbf785f6481eab0db2dc826e1f7c8e0b94ea9641466150b090811b54951baefc0cde8c67d871e2c5d0d431598e7ada503479215055a88cd67c2e709732acfb98dc78e48141083d9bf6983dec0dd4acf6c6382bec2eec2bf195d806f2955a8ce60b05fe65bff960999faad64df00c7588262a6320066f76791f5459f9d9de1749e"}) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [""]}, 0x14}}, 0x40881) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r4 = io_uring_setup(0x6033, &(0x7f00000005c0)={0x0, 0xacab, 0x4, 0x0, 0x1, 0x0, r0}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x2000000, 0x13, r4, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002580)=[{{&(0x7f0000000640)=@isdn, 0x80, &(0x7f0000000740)=[{&(0x7f00000006c0)=""/80, 0x50}], 0x1, &(0x7f0000000780)=""/80, 0x50}}, {{&(0x7f0000000800)=@generic, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000880)=""/215, 0xd7}, {&(0x7f0000000980)=""/145, 0x91}, {&(0x7f0000000a40)=""/187, 0xbb}], 0x3}, 0x2}, {{0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000000b40)=""/121, 0x79}, {&(0x7f0000000bc0)=""/162, 0xa2}, {&(0x7f0000000c80)=""/201, 0xc9}, {&(0x7f0000000d80)=""/19, 0x13}, {&(0x7f0000000dc0)=""/4096, 0x1000}, {&(0x7f0000001dc0)=""/206, 0xce}, {&(0x7f0000001ec0)=""/33, 0x21}, {&(0x7f0000001f00)=""/27, 0x1b}, {&(0x7f0000001f40)=""/239, 0xef}], 0x9, &(0x7f0000002100)=""/234, 0xea}, 0x2}, {{&(0x7f0000002200)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000002540)=[{&(0x7f0000002280)=""/195, 0xc3}, {&(0x7f0000002380)=""/229, 0xe5}, {&(0x7f0000002480)=""/167, 0xa7}], 0x3}, 0x800}], 0x4, 0x2000, &(0x7f0000002680)={0x0, 0x3938700}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x20010, r0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f00000026c0), 0x1) r5 = syz_io_uring_setup(0x4170, &(0x7f0000002700)={0x0, 0xc7db, 0x52c9ea573c6af5bf, 0x1, 0x1af, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000002780), &(0x7f00000027c0)) syz_io_uring_setup(0x51c7, &(0x7f0000002800)={0x0, 0x5d6e, 0x0, 0x3, 0x38a, 0x0, r5}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000002880), &(0x7f00000028c0)) syz_io_uring_setup(0x3a60, &(0x7f0000002a00)={0x0, 0x5114, 0x4, 0x3, 0xbc}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000002a80), &(0x7f0000002ac0)) syz_genetlink_get_family_id$gtp(&(0x7f0000002b40), 0xffffffffffffffff) 20:45:51 executing program 4: ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000080)=@req={0x28, &(0x7f0000000040)={'ip6tnl0\x00', @ifru_data=&(0x7f0000000000)="f17494704e68b47eaad8fb9da92ff99b5cce055ddc13dc72692e77db7acc710c"}}) r0 = syz_io_uring_setup(0x682e, &(0x7f00000000c0)={0x0, 0x61b0, 0x4, 0x1, 0x2d2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)) syz_io_uring_setup(0x6fa4, &(0x7f00000001c0)={0x0, 0x45b1, 0x20, 0x2, 0x62}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fef000/0xe000)=nil, &(0x7f0000000240), &(0x7f0000000280)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_SEND={0x1a, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)="b72d90afab83524e5a67d39021a498ec674b4d2ca9113ff899e0d0f9b83e4bf0e5c7aa9df47be19e9a203e183c82e8042b2828fee967fd5f214e5a80dad31344738967859ee7c7408a45a6d559e9a086f7e05e104e2a4f30aac4aa379c63d71cd8e1c3343a37e93d01bc888eb7592e29d80dfb0e02f86afd532c9d0cfaf2a42c924a791fd05dd6f753e129d61651f1de6a9f72994cbb6a582ac3531e36fe5fa6477b2b98f35e1dd5", 0xa8, 0x840, 0x1, {0x0, r3}}, 0xfffff516) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff2000/0x1000)=nil, 0x1000, 0x2000000, 0x10010, r0, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000480)=@buf={0xbf, &(0x7f00000003c0)="2b4d53922143fe2395390a2145533f7bdcdb30c3bf09285c2bf6fe927deea3a89f0dbabebefdfa91c21096b9dddcbfa0d039b15c68be2b65234ebc1b9b90bfbf785f6481eab0db2dc826e1f7c8e0b94ea9641466150b090811b54951baefc0cde8c67d871e2c5d0d431598e7ada503479215055a88cd67c2e709732acfb98dc78e48141083d9bf6983dec0dd4acf6c6382bec2eec2bf195d806f2955a8ce60b05fe65bff960999faad64df00c7588262a6320066f76791f5459f9d9de1749e"}) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [""]}, 0x14}}, 0x40881) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r4 = io_uring_setup(0x6033, &(0x7f00000005c0)={0x0, 0xacab, 0x4, 0x0, 0x1, 0x0, r0}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x2000000, 0x13, r4, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002580)=[{{&(0x7f0000000640)=@isdn, 0x80, &(0x7f0000000740)=[{&(0x7f00000006c0)=""/80, 0x50}], 0x1, &(0x7f0000000780)=""/80, 0x50}}, {{&(0x7f0000000800)=@generic, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000880)=""/215, 0xd7}, {&(0x7f0000000980)=""/145, 0x91}, {&(0x7f0000000a40)=""/187, 0xbb}], 0x3}, 0x2}, {{0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000000b40)=""/121, 0x79}, {&(0x7f0000000bc0)=""/162, 0xa2}, {&(0x7f0000000c80)=""/201, 0xc9}, {&(0x7f0000000d80)=""/19, 0x13}, {&(0x7f0000000dc0)=""/4096, 0x1000}, {&(0x7f0000001dc0)=""/206, 0xce}, {&(0x7f0000001ec0)=""/33, 0x21}, {&(0x7f0000001f00)=""/27, 0x1b}, {&(0x7f0000001f40)=""/239, 0xef}], 0x9, &(0x7f0000002100)=""/234, 0xea}, 0x2}, {{&(0x7f0000002200)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000002540)=[{&(0x7f0000002280)=""/195, 0xc3}, {&(0x7f0000002380)=""/229, 0xe5}, {&(0x7f0000002480)=""/167, 0xa7}], 0x3}, 0x800}], 0x4, 0x2000, &(0x7f0000002680)={0x0, 0x3938700}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x20010, r0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f00000026c0), 0x1) syz_io_uring_setup(0x4170, &(0x7f0000002700)={0x0, 0xc7db, 0x52c9ea573c6af5bf, 0x1, 0x1af, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000002780), &(0x7f00000027c0)) r5 = syz_io_uring_setup(0x3e47, &(0x7f0000002900)={0x0, 0x2baf, 0x4, 0x1, 0x62}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000002980), &(0x7f00000029c0)) syz_io_uring_setup(0x3a60, &(0x7f0000002a00)={0x0, 0x5114, 0x4, 0x3, 0xbc, 0x0, r5}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000002a80), &(0x7f0000002ac0)) syz_genetlink_get_family_id$gtp(&(0x7f0000002b40), 0xffffffffffffffff) 20:45:51 executing program 1: ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000000)={'vlan0\x00'}) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000040)={0x1, 0x4, [@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="65c82b4389bb"]}) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) write$eventfd(0xffffffffffffffff, &(0x7f0000000200)=0x4, 0x8) socket(0x2, 0x80003, 0x3) openat$vcs(0xffffffffffffff9c, &(0x7f0000000400), 0x20000, 0x0) 20:45:51 executing program 7: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x29, 0x2, 0x9, 0x1000, 0x7f, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40, 0x1, 0xfffffff9, 0x3}}) socketpair(0x22, 0x3, 0x4e3, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r2, 0x89f6, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'ip6gre0\x00', r0, 0x4, 0xfc, 0x20, 0xffff, 0x30, @remote, @loopback, 0x40, 0x8020, 0x6a1a, 0xffff}}) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f00000001c0)=0x4, 0x4) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, 0x0, 0x28, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xff}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040002}, 0xc050) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000380)={'sit0\x00', &(0x7f0000000300)={'ip6gre0\x00', r3, 0x4, 0x7f, 0x5, 0x2, 0x8, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @loopback, 0x1, 0x1, 0x3, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r2, 0x89f4, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'ip6tnl0\x00', r4, 0x29, 0xfe, 0xf7, 0x7, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, 0x8000, 0x7, 0x7, 0x401}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000500)={'ip6tnl0\x00', &(0x7f0000000480)={'syztnl2\x00', r4, 0x29, 0x81, 0x8, 0x7, 0xa, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8, 0x8000, 0x20, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000005c0)={'ip6tnl0\x00', &(0x7f0000000540)={'syztnl0\x00', r5, 0x29, 0x0, 0x3f, 0x8000, 0x8, @remote, @local, 0x700, 0x48, 0x0, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000680)={'syztnl1\x00', &(0x7f0000000600)={'ip6gre0\x00', r3, 0x4, 0x7, 0x7, 0xffffffff, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x700, 0x7800, 0x9, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r2, 0x89f4, &(0x7f0000000740)={'sit0\x00', &(0x7f00000006c0)={'ip6gre0\x00', r5, 0x2f, 0x0, 0xff, 0x7, 0x11, @loopback, @mcast2, 0x40, 0x700, 0x2fdf9be1, 0x3}}) getsockopt$sock_int(r2, 0x1, 0x23, &(0x7f0000000780), &(0x7f00000007c0)=0x4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000880)={'ip6tnl0\x00', &(0x7f0000000800)={'syztnl0\x00', r6, 0x2f, 0x6, 0xc7, 0x7, 0x71, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x8, 0x7, 0x1, 0x4}}) r7 = socket$inet6(0xa, 0x4, 0x3) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f00000008c0)) syz_genetlink_get_family_id$team(&(0x7f0000000ac0), r7) 20:45:51 executing program 1: ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000000)={'vlan0\x00'}) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000040)={0x1, 0x4, [@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="65c82b4389bb"]}) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000080)) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x102, 0x0) write$eventfd(r0, &(0x7f0000000200)=0x4, 0x8) socket(0x2, 0x80003, 0x3) openat$vcs(0xffffffffffffff9c, &(0x7f0000000400), 0x20000, 0x0) 20:45:51 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_FAMILY={0x6}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0xc000) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x6c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010100}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010102}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x4c, 0x0, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x7f}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x4}, @IEEE802154_ATTR_CCA_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4c00c000) r2 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000540), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000005c0)={'batadv_slave_0\x00'}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000680)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x4, 0x8, 0x5a, @dev={0xfe, 0x80, '\x00', 0x2a}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7800, 0x20, 0x7, 0x4aa89fc9}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000740)={'sit0\x00', &(0x7f00000006c0)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x4, 0x3, 0x40, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, 0x1, 0x1, 0x2, 0x100}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000800)={'ip6tnl0\x00', &(0x7f0000000780)={'sit0\x00', 0x0, 0x4, 0x24, 0x79, 0xfffffffd, 0x7, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x700, 0x0, 0x20}}) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000011c0), 0x18b000, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r3, &(0x7f0000001340)={&(0x7f0000001200), 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x70, 0x0, 0x28, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x21}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x31}, @NL80211_ATTR_PMKID={0x14, 0x55, "de6a7d645d6d49b3b5b65b5753264841"}, @NL80211_ATTR_SSID={0x5, 0x34, @random='C'}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x48}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@broadcast}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x38}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x2e}, @NL80211_ATTR_SSID={0x7, 0x34, @random="219d02"}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x4084) 20:45:51 executing program 4: ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000080)=@req={0x28, &(0x7f0000000040)={'ip6tnl0\x00', @ifru_data=&(0x7f0000000000)="f17494704e68b47eaad8fb9da92ff99b5cce055ddc13dc72692e77db7acc710c"}}) r0 = syz_io_uring_setup(0x682e, &(0x7f00000000c0)={0x0, 0x61b0, 0x4, 0x1, 0x2d2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)) syz_io_uring_setup(0x6fa4, &(0x7f00000001c0)={0x0, 0x45b1, 0x20, 0x2, 0x62}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fef000/0xe000)=nil, &(0x7f0000000240), &(0x7f0000000280)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_SEND={0x1a, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)="b72d90afab83524e5a67d39021a498ec674b4d2ca9113ff899e0d0f9b83e4bf0e5c7aa9df47be19e9a203e183c82e8042b2828fee967fd5f214e5a80dad31344738967859ee7c7408a45a6d559e9a086f7e05e104e2a4f30aac4aa379c63d71cd8e1c3343a37e93d01bc888eb7592e29d80dfb0e02f86afd532c9d0cfaf2a42c924a791fd05dd6f753e129d61651f1de6a9f72994cbb6a582ac3531e36fe5fa6477b2b98f35e1dd5", 0xa8, 0x840, 0x1, {0x0, r3}}, 0xfffff516) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff2000/0x1000)=nil, 0x1000, 0x2000000, 0x10010, r0, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000480)=@buf={0xbf, &(0x7f00000003c0)="2b4d53922143fe2395390a2145533f7bdcdb30c3bf09285c2bf6fe927deea3a89f0dbabebefdfa91c21096b9dddcbfa0d039b15c68be2b65234ebc1b9b90bfbf785f6481eab0db2dc826e1f7c8e0b94ea9641466150b090811b54951baefc0cde8c67d871e2c5d0d431598e7ada503479215055a88cd67c2e709732acfb98dc78e48141083d9bf6983dec0dd4acf6c6382bec2eec2bf195d806f2955a8ce60b05fe65bff960999faad64df00c7588262a6320066f76791f5459f9d9de1749e"}) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [""]}, 0x14}}, 0x40881) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r4 = io_uring_setup(0x6033, &(0x7f00000005c0)={0x0, 0xacab, 0x4, 0x0, 0x1, 0x0, r0}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x2000000, 0x13, r4, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002580)=[{{&(0x7f0000000640)=@isdn, 0x80, &(0x7f0000000740)=[{&(0x7f00000006c0)=""/80, 0x50}], 0x1, &(0x7f0000000780)=""/80, 0x50}}, {{&(0x7f0000000800)=@generic, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000880)=""/215, 0xd7}, {&(0x7f0000000980)=""/145, 0x91}, {&(0x7f0000000a40)=""/187, 0xbb}], 0x3}, 0x2}, {{0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000000b40)=""/121, 0x79}, {&(0x7f0000000bc0)=""/162, 0xa2}, {&(0x7f0000000c80)=""/201, 0xc9}, {&(0x7f0000000d80)=""/19, 0x13}, {&(0x7f0000000dc0)=""/4096, 0x1000}, {&(0x7f0000001dc0)=""/206, 0xce}, {&(0x7f0000001ec0)=""/33, 0x21}, {&(0x7f0000001f00)=""/27, 0x1b}, {&(0x7f0000001f40)=""/239, 0xef}], 0x9, &(0x7f0000002100)=""/234, 0xea}, 0x2}, {{&(0x7f0000002200)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000002540)=[{&(0x7f0000002280)=""/195, 0xc3}, {&(0x7f0000002380)=""/229, 0xe5}, {&(0x7f0000002480)=""/167, 0xa7}], 0x3}, 0x800}], 0x4, 0x2000, &(0x7f0000002680)={0x0, 0x3938700}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x20010, r0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f00000026c0), 0x1) syz_io_uring_setup(0x4170, &(0x7f0000002700)={0x0, 0xc7db, 0x52c9ea573c6af5bf, 0x1, 0x1af, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000002780), &(0x7f00000027c0)) r5 = syz_io_uring_setup(0x3e47, &(0x7f0000002900)={0x0, 0x2baf, 0x4, 0x1, 0x62}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000002980), &(0x7f00000029c0)) syz_io_uring_setup(0x3a60, &(0x7f0000002a00)={0x0, 0x5114, 0x4, 0x3, 0xbc, 0x0, r5}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000002a80), &(0x7f0000002ac0)) syz_genetlink_get_family_id$gtp(&(0x7f0000002b40), 0xffffffffffffffff) 20:45:51 executing program 3: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f0000000000)=""/148) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f00000000c0)=""/40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x10000, 0x0) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000140)=""/183) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x901, 0x0) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000280)=0x7) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x44002, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000300)=""/4096) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000001300), 0x101002, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000001340)={'netpci0\x00'}) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001380), 0x70380, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000001400), r0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r5, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x2c, r6, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x10001}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000024) ioctl$TUNGETIFF(r3, 0x800454d2, &(0x7f0000001500)={'ipvlan1\x00'}) ioctl$TUNGETFEATURES(r5, 0x800454cf, &(0x7f0000001540)) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000001680)) 20:45:51 executing program 2: io_uring_enter(0xffffffffffffffff, 0x2d60, 0x28f3, 0x1, &(0x7f0000000000)={[0x1ff]}, 0x8) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000001300)=[{&(0x7f0000000040)=""/172, 0xac}, {&(0x7f0000000100)=""/212, 0xd4}, {&(0x7f0000000200)=""/116, 0x74}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/82, 0x52}], 0x5) r0 = io_uring_setup(0x4582, &(0x7f0000001380)={0x0, 0xb150, 0x8, 0x6, 0x38f}) r1 = syz_io_uring_setup(0x40, &(0x7f0000001400)={0x0, 0x108e, 0x1, 0x0, 0x1e, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001480), &(0x7f00000014c0)) ioprio_get$uid(0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001580)={'ip6_vti0\x00', &(0x7f0000001500)={'syztnl0\x00', 0x0, 0x29, 0x7f, 0x5, 0x81, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x7, 0xf5e, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000001640)={'syztnl1\x00', &(0x7f00000015c0)={'ip6_vti0\x00', r2, 0x4, 0x1, 0x0, 0x80000001, 0x40, @ipv4={'\x00', '\xff\xff', @local}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7800, 0x10, 0x4, 0x400000}}) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000016c0)='ns/uts\x00') sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001780)={&(0x7f0000001700)={0x6c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@GTPA_O_TEI={0x8}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r2}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_NET_NS_FD={0x8, 0x7, r3}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x41) r4 = syz_io_uring_setup(0x1382, &(0x7f0000001800)={0x0, 0x419b, 0x10, 0x0, 0x2f2, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000001880), &(0x7f00000018c0)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0) syz_io_uring_setup(0x4d2f, &(0x7f0000001900)={0x0, 0xacea, 0x10, 0x3, 0x5, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001980), &(0x7f00000019c0)) syz_genetlink_get_family_id$nbd(&(0x7f0000001a00), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001a80), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r5, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x44, r6, 0x0, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @multicast2}}, @NLBL_MGMT_A_DOMAIN={0x14, 0x1, '^-[#\'@:/[@^*\\$&\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x8010}, 0x20000000) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000001bc0)={0xff}, 0x8) r7 = io_uring_setup(0x7d7f, &(0x7f0000001c00)={0x0, 0x6e7, 0x8, 0x1, 0x11a, 0x0, r0}) io_uring_setup(0x778d, &(0x7f0000001c80)={0x0, 0xf775, 0x10, 0x0, 0x3a8, 0x0, r7}) 20:45:51 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_FAMILY={0x6}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0xc000) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x6c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010100}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010102}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x4c, 0x0, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x7f}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x4}, @IEEE802154_ATTR_CCA_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4c00c000) r2 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000540), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000005c0)={'batadv_slave_0\x00'}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000680)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x4, 0x8, 0x5a, @dev={0xfe, 0x80, '\x00', 0x2a}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7800, 0x20, 0x7, 0x4aa89fc9}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000740)={'sit0\x00', &(0x7f00000006c0)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x4, 0x3, 0x40, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, 0x1, 0x1, 0x2, 0x100}}) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000011c0), 0x18b000, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r3, &(0x7f0000001340)={&(0x7f0000001200), 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x70, 0x0, 0x28, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x21}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x31}, @NL80211_ATTR_PMKID={0x14, 0x55, "de6a7d645d6d49b3b5b65b5753264841"}, @NL80211_ATTR_SSID={0x5, 0x34, @random='C'}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x48}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@broadcast}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x38}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x2e}, @NL80211_ATTR_SSID={0x7, 0x34, @random="219d02"}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x4084) 20:45:59 executing program 5: ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x2f, 0x2, 0x9, 0x9b8c, 0x20, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x20, 0x1, 0xfff0000, 0x200}}) socketpair(0x28, 0xa, 0x5, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000100)=0x5, 0x4) socketpair(0x1e, 0x6, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r2) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, r3, 0x10, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7, 0x56}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x54}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6f}]}, 0x50}, 0x1, 0x0, 0x0, 0x801}, 0x8801) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000380), r1) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x3c, r4, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48c9ea108b1f44ee}, 0x800) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x18, 0x0, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x40040c0) socketpair(0x6, 0x4, 0x8001, &(0x7f00000005c0)={0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000580), r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000600), r7) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 20:45:59 executing program 4: ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000080)=@req={0x28, &(0x7f0000000040)={'ip6tnl0\x00', @ifru_data=&(0x7f0000000000)="f17494704e68b47eaad8fb9da92ff99b5cce055ddc13dc72692e77db7acc710c"}}) r0 = syz_io_uring_setup(0x682e, &(0x7f00000000c0)={0x0, 0x61b0, 0x4, 0x1, 0x2d2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)) syz_io_uring_setup(0x6fa4, &(0x7f00000001c0)={0x0, 0x45b1, 0x20, 0x2, 0x62}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fef000/0xe000)=nil, &(0x7f0000000240), &(0x7f0000000280)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_SEND={0x1a, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)="b72d90afab83524e5a67d39021a498ec674b4d2ca9113ff899e0d0f9b83e4bf0e5c7aa9df47be19e9a203e183c82e8042b2828fee967fd5f214e5a80dad31344738967859ee7c7408a45a6d559e9a086f7e05e104e2a4f30aac4aa379c63d71cd8e1c3343a37e93d01bc888eb7592e29d80dfb0e02f86afd532c9d0cfaf2a42c924a791fd05dd6f753e129d61651f1de6a9f72994cbb6a582ac3531e36fe5fa6477b2b98f35e1dd5", 0xa8, 0x840, 0x1, {0x0, r3}}, 0xfffff516) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff2000/0x1000)=nil, 0x1000, 0x2000000, 0x10010, r0, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000480)=@buf={0xbf, &(0x7f00000003c0)="2b4d53922143fe2395390a2145533f7bdcdb30c3bf09285c2bf6fe927deea3a89f0dbabebefdfa91c21096b9dddcbfa0d039b15c68be2b65234ebc1b9b90bfbf785f6481eab0db2dc826e1f7c8e0b94ea9641466150b090811b54951baefc0cde8c67d871e2c5d0d431598e7ada503479215055a88cd67c2e709732acfb98dc78e48141083d9bf6983dec0dd4acf6c6382bec2eec2bf195d806f2955a8ce60b05fe65bff960999faad64df00c7588262a6320066f76791f5459f9d9de1749e"}) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [""]}, 0x14}}, 0x40881) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r4 = io_uring_setup(0x6033, &(0x7f00000005c0)={0x0, 0xacab, 0x4, 0x0, 0x1, 0x0, r0}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x2000000, 0x13, r4, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002580)=[{{&(0x7f0000000640)=@isdn, 0x80, &(0x7f0000000740)=[{&(0x7f00000006c0)=""/80, 0x50}], 0x1, &(0x7f0000000780)=""/80, 0x50}}, {{&(0x7f0000000800)=@generic, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000880)=""/215, 0xd7}, {&(0x7f0000000980)=""/145, 0x91}, {&(0x7f0000000a40)=""/187, 0xbb}], 0x3}, 0x2}, {{0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000000b40)=""/121, 0x79}, {&(0x7f0000000bc0)=""/162, 0xa2}, {&(0x7f0000000c80)=""/201, 0xc9}, {&(0x7f0000000d80)=""/19, 0x13}, {&(0x7f0000000dc0)=""/4096, 0x1000}, {&(0x7f0000001dc0)=""/206, 0xce}, {&(0x7f0000001ec0)=""/33, 0x21}, {&(0x7f0000001f00)=""/27, 0x1b}, {&(0x7f0000001f40)=""/239, 0xef}], 0x9, &(0x7f0000002100)=""/234, 0xea}, 0x2}, {{&(0x7f0000002200)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000002540)=[{&(0x7f0000002280)=""/195, 0xc3}, {&(0x7f0000002380)=""/229, 0xe5}, {&(0x7f0000002480)=""/167, 0xa7}], 0x3}, 0x800}], 0x4, 0x2000, &(0x7f0000002680)={0x0, 0x3938700}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x20010, r0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f00000026c0), 0x1) syz_io_uring_setup(0x4170, &(0x7f0000002700)={0x0, 0xc7db, 0x52c9ea573c6af5bf, 0x1, 0x1af, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000002780), &(0x7f00000027c0)) r5 = syz_io_uring_setup(0x3e47, &(0x7f0000002900)={0x0, 0x2baf, 0x4, 0x1, 0x62}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000002980), &(0x7f00000029c0)) syz_io_uring_setup(0x3a60, &(0x7f0000002a00)={0x0, 0x5114, 0x4, 0x3, 0xbc, 0x0, r5}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000002a80), &(0x7f0000002ac0)) syz_genetlink_get_family_id$gtp(&(0x7f0000002b40), 0xffffffffffffffff) 20:45:59 executing program 1: ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000000)={'vlan0\x00'}) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000040)={0x1, 0x4, [@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="65c82b4389bb"]}) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000080)) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x102, 0x0) write$eventfd(r0, &(0x7f0000000200)=0x4, 0x8) socket(0x2, 0x80003, 0x3) openat$vcs(0xffffffffffffff9c, &(0x7f0000000400), 0x20000, 0x0) 20:45:59 executing program 2: io_uring_enter(0xffffffffffffffff, 0x2d60, 0x28f3, 0x1, &(0x7f0000000000)={[0x1ff]}, 0x8) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000001300)=[{&(0x7f0000000040)=""/172, 0xac}, {&(0x7f0000000100)=""/212, 0xd4}, {&(0x7f0000000200)=""/116, 0x74}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/82, 0x52}], 0x5) r0 = io_uring_setup(0x4582, &(0x7f0000001380)={0x0, 0xb150, 0x8, 0x6, 0x38f}) r1 = syz_io_uring_setup(0x40, &(0x7f0000001400)={0x0, 0x108e, 0x1, 0x0, 0x1e, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001480), &(0x7f00000014c0)) ioprio_get$uid(0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001580)={'ip6_vti0\x00', &(0x7f0000001500)={'syztnl0\x00', 0x0, 0x29, 0x7f, 0x5, 0x81, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x7, 0xf5e, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000001640)={'syztnl1\x00', &(0x7f00000015c0)={'ip6_vti0\x00', r2, 0x4, 0x1, 0x0, 0x80000001, 0x40, @ipv4={'\x00', '\xff\xff', @local}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7800, 0x10, 0x4, 0x400000}}) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000016c0)='ns/uts\x00') sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001780)={&(0x7f0000001700)={0x6c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@GTPA_O_TEI={0x8}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r2}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_NET_NS_FD={0x8, 0x7, r3}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x41) r4 = syz_io_uring_setup(0x1382, &(0x7f0000001800)={0x0, 0x419b, 0x10, 0x0, 0x2f2, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000001880), &(0x7f00000018c0)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0) syz_io_uring_setup(0x4d2f, &(0x7f0000001900)={0x0, 0xacea, 0x10, 0x3, 0x5, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001980), &(0x7f00000019c0)) syz_genetlink_get_family_id$nbd(&(0x7f0000001a00), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001a80), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r5, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x44, r6, 0x0, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @multicast2}}, @NLBL_MGMT_A_DOMAIN={0x14, 0x1, '^-[#\'@:/[@^*\\$&\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x8010}, 0x20000000) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000001bc0)={0xff}, 0x8) r7 = io_uring_setup(0x7d7f, &(0x7f0000001c00)={0x0, 0x6e7, 0x8, 0x1, 0x11a, 0x0, r0}) io_uring_setup(0x778d, &(0x7f0000001c80)={0x0, 0xf775, 0x10, 0x0, 0x3a8, 0x0, r7}) 20:45:59 executing program 3: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f0000000000)=""/148) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f00000000c0)=""/40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x10000, 0x0) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000140)=""/183) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x901, 0x0) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000280)=0x7) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x44002, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000300)=""/4096) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000001300), 0x101002, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000001340)={'netpci0\x00'}) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001380), 0x70380, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000001400), r0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r5, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x2c, r6, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x10001}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000024) ioctl$TUNGETIFF(r3, 0x800454d2, &(0x7f0000001500)={'ipvlan1\x00'}) ioctl$TUNGETFEATURES(r5, 0x800454cf, &(0x7f0000001540)) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000001680)) 20:45:59 executing program 0: r0 = getuid() r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TUNSETOWNER(r1, 0x400454cc, r0) ioprio_get$uid(0x0, r0) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000040)={'wg2\x00'}) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x1) r2 = syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x46d, 0xc101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x9, 0xa0, 0xfd, [{{0x9, 0x4, 0x0, 0xf9, 0x1, 0x3, 0x1, 0x0, 0x5, {0x9, 0x21, 0x7, 0x3f, 0x1, {0x22, 0xc46}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x4, 0x1f, 0x8}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0xe2, 0x3, 0x40}}]}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x10, 0x0, 0x1f, 0x20, 0x8}, 0x72, &(0x7f0000000100)={0x5, 0xf, 0x72, 0x4, [@wireless={0xb, 0x10, 0x1, 0x2, 0x0, 0x3, 0x5, 0x80, 0x80}, @generic={0x3f, 0x10, 0x1, "13eabcbedc7e85361568ba82957512f9fc3dc29c3335eacf761eb23847dd322ade415ab9dabe332209a130b7c151897613085a1787d6b6748b0354d0"}, @ssp_cap={0x18, 0x10, 0xa, 0x3f, 0x3, 0x1, 0xff0f, 0x9, [0x0, 0x3fc0, 0xc000]}, @wireless={0xb, 0x10, 0x1, 0x2, 0x40, 0x3e, 0xc7, 0xffff, 0x8}]}, 0x1, [{0xc7, &(0x7f0000000180)=@string={0xc7, 0x3, "7f126e6ffa050bba81edaf647a108d9fd37fbe3d11c15a3707477a6757d84b545a36669de4aa342241c88f7d526936f675209a74339730655071e3fcb25a208bbc069d6df4c07b4705d393a371da12cad8aaf6778ad74c8d58df24aaa77a7230a9f3628e71abaf0f819fdc49a07c577564df79e1300f987b6d6f0677e40fce2bb108a04a299c04e4bf6756185d8f38f7b15524ba0d91f7e2e25eec64a5523257550e35539b7efd2f71cc57e3428c7c38353ccfddec9577d5854e54703d3bf8b4132cd5932a"}}]}) syz_usb_ep_write(r2, 0x1f, 0x17, &(0x7f00000002c0)="18676c5fbcc850892fbc37961384e6dc244a9c136edf28") ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000300)=[0x9, 0x7]) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r3, 0x29, 0x2d, &(0x7f0000000340)={0x0, {{0xa, 0x4e20, 0x9, @mcast2, 0x83}}}, 0x88) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000400)=""/151) ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, &(0x7f00000004c0)=""/9) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000005c0)={'ip6_vti0\x00', &(0x7f0000000540)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0x8, 0x8000, 0x2e, @private0, @remote, 0x7800, 0x8, 0xb0b, 0x1ff}}) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000800)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000600)={0x1bc, 0x0, 0x2, 0x70bd29, 0x25dfdbfc, {}, [{{0x8}, {0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r4}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x81}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) 20:45:59 executing program 7: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x29, 0x2, 0x9, 0x1000, 0x7f, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40, 0x1, 0xfffffff9, 0x3}}) socketpair(0x22, 0x3, 0x4e3, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r2, 0x89f6, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'ip6gre0\x00', r0, 0x4, 0xfc, 0x20, 0xffff, 0x30, @remote, @loopback, 0x40, 0x8020, 0x6a1a, 0xffff}}) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f00000001c0)=0x4, 0x4) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, 0x0, 0x28, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xff}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040002}, 0xc050) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000380)={'sit0\x00', &(0x7f0000000300)={'ip6gre0\x00', r3, 0x4, 0x7f, 0x5, 0x2, 0x8, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @loopback, 0x1, 0x1, 0x3, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r2, 0x89f4, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'ip6tnl0\x00', r4, 0x29, 0xfe, 0xf7, 0x7, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, 0x8000, 0x7, 0x7, 0x401}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000500)={'ip6tnl0\x00', &(0x7f0000000480)={'syztnl2\x00', r4, 0x29, 0x81, 0x8, 0x7, 0xa, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8, 0x8000, 0x20, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000005c0)={'ip6tnl0\x00', &(0x7f0000000540)={'syztnl0\x00', r5, 0x29, 0x0, 0x3f, 0x8000, 0x8, @remote, @local, 0x700, 0x48, 0x0, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000680)={'syztnl1\x00', &(0x7f0000000600)={'ip6gre0\x00', r3, 0x4, 0x7, 0x7, 0xffffffff, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x700, 0x7800, 0x9, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r2, 0x89f4, &(0x7f0000000740)={'sit0\x00', &(0x7f00000006c0)={'ip6gre0\x00', r5, 0x2f, 0x0, 0xff, 0x7, 0x11, @loopback, @mcast2, 0x40, 0x700, 0x2fdf9be1, 0x3}}) getsockopt$sock_int(r2, 0x1, 0x23, &(0x7f0000000780), &(0x7f00000007c0)=0x4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000880)={'ip6tnl0\x00', &(0x7f0000000800)={'syztnl0\x00', r6, 0x2f, 0x6, 0xc7, 0x7, 0x71, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x8, 0x7, 0x1, 0x4}}) r7 = socket$inet6(0xa, 0x4, 0x3) syz_genetlink_get_family_id$team(&(0x7f0000000ac0), r7) 20:45:59 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_FAMILY={0x6}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0xc000) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x6c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010100}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010102}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x4c, 0x0, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x7f}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x4}, @IEEE802154_ATTR_CCA_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4c00c000) r2 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000540), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000005c0)={'batadv_slave_0\x00'}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000680)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x4, 0x8, 0x5a, @dev={0xfe, 0x80, '\x00', 0x2a}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7800, 0x20, 0x7, 0x4aa89fc9}}) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000011c0), 0x18b000, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r3, &(0x7f0000001340)={&(0x7f0000001200), 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x70, 0x0, 0x28, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x21}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x31}, @NL80211_ATTR_PMKID={0x14, 0x55, "de6a7d645d6d49b3b5b65b5753264841"}, @NL80211_ATTR_SSID={0x5, 0x34, @random='C'}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x48}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@broadcast}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x38}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x2e}, @NL80211_ATTR_SSID={0x7, 0x34, @random="219d02"}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x4084) 20:45:59 executing program 1: ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000000)={'vlan0\x00'}) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000040)={0x1, 0x4, [@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="65c82b4389bb"]}) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000080)) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x102, 0x0) write$eventfd(r0, &(0x7f0000000200)=0x4, 0x8) socket(0x2, 0x80003, 0x3) openat$vcs(0xffffffffffffff9c, &(0x7f0000000400), 0x20000, 0x0) 20:46:00 executing program 4: ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000080)=@req={0x28, &(0x7f0000000040)={'ip6tnl0\x00', @ifru_data=&(0x7f0000000000)="f17494704e68b47eaad8fb9da92ff99b5cce055ddc13dc72692e77db7acc710c"}}) r0 = syz_io_uring_setup(0x682e, &(0x7f00000000c0)={0x0, 0x61b0, 0x4, 0x1, 0x2d2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)) syz_io_uring_setup(0x6fa4, &(0x7f00000001c0)={0x0, 0x45b1, 0x20, 0x2, 0x62}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fef000/0xe000)=nil, &(0x7f0000000240), &(0x7f0000000280)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_SEND={0x1a, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)="b72d90afab83524e5a67d39021a498ec674b4d2ca9113ff899e0d0f9b83e4bf0e5c7aa9df47be19e9a203e183c82e8042b2828fee967fd5f214e5a80dad31344738967859ee7c7408a45a6d559e9a086f7e05e104e2a4f30aac4aa379c63d71cd8e1c3343a37e93d01bc888eb7592e29d80dfb0e02f86afd532c9d0cfaf2a42c924a791fd05dd6f753e129d61651f1de6a9f72994cbb6a582ac3531e36fe5fa6477b2b98f35e1dd5", 0xa8, 0x840, 0x1, {0x0, r3}}, 0xfffff516) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff2000/0x1000)=nil, 0x1000, 0x2000000, 0x10010, r0, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000480)=@buf={0xbf, &(0x7f00000003c0)="2b4d53922143fe2395390a2145533f7bdcdb30c3bf09285c2bf6fe927deea3a89f0dbabebefdfa91c21096b9dddcbfa0d039b15c68be2b65234ebc1b9b90bfbf785f6481eab0db2dc826e1f7c8e0b94ea9641466150b090811b54951baefc0cde8c67d871e2c5d0d431598e7ada503479215055a88cd67c2e709732acfb98dc78e48141083d9bf6983dec0dd4acf6c6382bec2eec2bf195d806f2955a8ce60b05fe65bff960999faad64df00c7588262a6320066f76791f5459f9d9de1749e"}) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [""]}, 0x14}}, 0x40881) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r4 = io_uring_setup(0x6033, &(0x7f00000005c0)={0x0, 0xacab, 0x4, 0x0, 0x1, 0x0, r0}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x2000000, 0x13, r4, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002580)=[{{&(0x7f0000000640)=@isdn, 0x80, &(0x7f0000000740)=[{&(0x7f00000006c0)=""/80, 0x50}], 0x1, &(0x7f0000000780)=""/80, 0x50}}, {{&(0x7f0000000800)=@generic, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000880)=""/215, 0xd7}, {&(0x7f0000000980)=""/145, 0x91}, {&(0x7f0000000a40)=""/187, 0xbb}], 0x3}, 0x2}, {{0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000000b40)=""/121, 0x79}, {&(0x7f0000000bc0)=""/162, 0xa2}, {&(0x7f0000000c80)=""/201, 0xc9}, {&(0x7f0000000d80)=""/19, 0x13}, {&(0x7f0000000dc0)=""/4096, 0x1000}, {&(0x7f0000001dc0)=""/206, 0xce}, {&(0x7f0000001ec0)=""/33, 0x21}, {&(0x7f0000001f00)=""/27, 0x1b}, {&(0x7f0000001f40)=""/239, 0xef}], 0x9, &(0x7f0000002100)=""/234, 0xea}, 0x2}, {{&(0x7f0000002200)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000002540)=[{&(0x7f0000002280)=""/195, 0xc3}, {&(0x7f0000002380)=""/229, 0xe5}, {&(0x7f0000002480)=""/167, 0xa7}], 0x3}, 0x800}], 0x4, 0x2000, &(0x7f0000002680)={0x0, 0x3938700}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x20010, r0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f00000026c0), 0x1) r5 = syz_io_uring_setup(0x51c7, &(0x7f0000002800)={0x0, 0x5d6e, 0x0, 0x3, 0x38a}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000002880), &(0x7f00000028c0)) r6 = syz_io_uring_setup(0x3e47, &(0x7f0000002900)={0x0, 0x2baf, 0x4, 0x1, 0x62, 0x0, r5}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000002980), &(0x7f00000029c0)) syz_io_uring_setup(0x3a60, &(0x7f0000002a00)={0x0, 0x5114, 0x4, 0x3, 0xbc, 0x0, r6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000002a80), &(0x7f0000002ac0)) syz_genetlink_get_family_id$gtp(&(0x7f0000002b40), 0xffffffffffffffff) 20:46:00 executing program 2: io_uring_enter(0xffffffffffffffff, 0x2d60, 0x28f3, 0x1, &(0x7f0000000000)={[0x1ff]}, 0x8) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000001300)=[{&(0x7f0000000040)=""/172, 0xac}, {&(0x7f0000000100)=""/212, 0xd4}, {&(0x7f0000000200)=""/116, 0x74}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/82, 0x52}], 0x5) r0 = io_uring_setup(0x4582, &(0x7f0000001380)={0x0, 0xb150, 0x8, 0x6, 0x38f}) r1 = syz_io_uring_setup(0x40, &(0x7f0000001400)={0x0, 0x108e, 0x1, 0x0, 0x1e, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001480), &(0x7f00000014c0)) ioprio_get$uid(0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001580)={'ip6_vti0\x00', &(0x7f0000001500)={'syztnl0\x00', 0x0, 0x29, 0x7f, 0x5, 0x81, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x7, 0xf5e, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000001640)={'syztnl1\x00', &(0x7f00000015c0)={'ip6_vti0\x00', r2, 0x4, 0x1, 0x0, 0x80000001, 0x40, @ipv4={'\x00', '\xff\xff', @local}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7800, 0x10, 0x4, 0x400000}}) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000016c0)='ns/uts\x00') sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001780)={&(0x7f0000001700)={0x6c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@GTPA_O_TEI={0x8}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r2}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_NET_NS_FD={0x8, 0x7, r3}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x41) r4 = syz_io_uring_setup(0x1382, &(0x7f0000001800)={0x0, 0x419b, 0x10, 0x0, 0x2f2, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000001880), &(0x7f00000018c0)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0) syz_io_uring_setup(0x4d2f, &(0x7f0000001900)={0x0, 0xacea, 0x10, 0x3, 0x5, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001980), &(0x7f00000019c0)) syz_genetlink_get_family_id$nbd(&(0x7f0000001a00), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001a80), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r5, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x44, r6, 0x0, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @multicast2}}, @NLBL_MGMT_A_DOMAIN={0x14, 0x1, '^-[#\'@:/[@^*\\$&\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x8010}, 0x20000000) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000001bc0)={0xff}, 0x8) r7 = io_uring_setup(0x7d7f, &(0x7f0000001c00)={0x0, 0x6e7, 0x8, 0x1, 0x11a, 0x0, r0}) io_uring_setup(0x778d, &(0x7f0000001c80)={0x0, 0xf775, 0x10, 0x0, 0x3a8, 0x0, r7}) 20:46:00 executing program 3: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f0000000000)=""/148) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f00000000c0)=""/40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x10000, 0x0) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000140)=""/183) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x901, 0x0) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000280)=0x7) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x44002, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000300)=""/4096) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000001300), 0x101002, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000001340)={'netpci0\x00'}) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001380), 0x70380, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000001400), r0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r5, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x2c, r6, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x10001}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000024) ioctl$TUNGETIFF(r3, 0x800454d2, &(0x7f0000001500)={'ipvlan1\x00'}) ioctl$TUNGETFEATURES(r5, 0x800454cf, &(0x7f0000001540)) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000001680)) 20:46:00 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_FAMILY={0x6}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0xc000) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x6c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010100}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010102}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x4c, 0x0, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x7f}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x4}, @IEEE802154_ATTR_CCA_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4c00c000) r2 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000540), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000005c0)={'batadv_slave_0\x00'}) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000011c0), 0x18b000, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r3, &(0x7f0000001340)={&(0x7f0000001200), 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x70, 0x0, 0x28, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x21}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x31}, @NL80211_ATTR_PMKID={0x14, 0x55, "de6a7d645d6d49b3b5b65b5753264841"}, @NL80211_ATTR_SSID={0x5, 0x34, @random='C'}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x48}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@broadcast}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x38}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x2e}, @NL80211_ATTR_SSID={0x7, 0x34, @random="219d02"}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x4084) 20:46:00 executing program 1: ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000000)={'vlan0\x00'}) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000040)={0x1, 0x4, [@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="65c82b4389bb"]}) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000080)) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x102, 0x0) write$eventfd(r0, &(0x7f0000000200)=0x4, 0x8) socket(0x2, 0x80003, 0x3) openat$vcs(0xffffffffffffff9c, &(0x7f0000000400), 0x20000, 0x0) 20:46:00 executing program 5: ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x2f, 0x2, 0x9, 0x9b8c, 0x20, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x20, 0x1, 0xfff0000, 0x200}}) socketpair(0x28, 0xa, 0x5, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000100)=0x5, 0x4) socketpair(0x1e, 0x6, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r2) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, r3, 0x10, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7, 0x56}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x54}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6f}]}, 0x50}, 0x1, 0x0, 0x0, 0x801}, 0x8801) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000380), r1) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x3c, r4, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48c9ea108b1f44ee}, 0x800) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x18, 0x0, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x40040c0) socketpair(0x6, 0x4, 0x8001, &(0x7f00000005c0)={0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000580), r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000600), r7) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 20:46:00 executing program 7: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x29, 0x2, 0x9, 0x1000, 0x7f, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40, 0x1, 0xfffffff9, 0x3}}) socketpair(0x22, 0x3, 0x4e3, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r2, 0x89f6, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'ip6gre0\x00', r0, 0x4, 0xfc, 0x20, 0xffff, 0x30, @remote, @loopback, 0x40, 0x8020, 0x6a1a, 0xffff}}) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f00000001c0)=0x4, 0x4) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, 0x0, 0x28, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xff}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040002}, 0xc050) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000380)={'sit0\x00', &(0x7f0000000300)={'ip6gre0\x00', r3, 0x4, 0x7f, 0x5, 0x2, 0x8, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @loopback, 0x1, 0x1, 0x3, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r2, 0x89f4, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'ip6tnl0\x00', r4, 0x29, 0xfe, 0xf7, 0x7, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, 0x8000, 0x7, 0x7, 0x401}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000500)={'ip6tnl0\x00', &(0x7f0000000480)={'syztnl2\x00', r4, 0x29, 0x81, 0x8, 0x7, 0xa, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8, 0x8000, 0x20, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000005c0)={'ip6tnl0\x00', &(0x7f0000000540)={'syztnl0\x00', r5, 0x29, 0x0, 0x3f, 0x8000, 0x8, @remote, @local, 0x700, 0x48, 0x0, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000680)={'syztnl1\x00', &(0x7f0000000600)={'ip6gre0\x00', r3, 0x4, 0x7, 0x7, 0xffffffff, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x700, 0x7800, 0x9, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r2, 0x89f4, &(0x7f0000000740)={'sit0\x00', &(0x7f00000006c0)={'ip6gre0\x00', r5, 0x2f, 0x0, 0xff, 0x7, 0x11, @loopback, @mcast2, 0x40, 0x700, 0x2fdf9be1, 0x3}}) getsockopt$sock_int(r2, 0x1, 0x23, &(0x7f0000000780), &(0x7f00000007c0)=0x4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000880)={'ip6tnl0\x00', &(0x7f0000000800)={'syztnl0\x00', r6, 0x2f, 0x6, 0xc7, 0x7, 0x71, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x8, 0x7, 0x1, 0x4}}) syz_genetlink_get_family_id$team(&(0x7f0000000ac0), 0xffffffffffffffff) 20:46:00 executing program 1: ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000000)={'vlan0\x00'}) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000040)={0x1, 0x4, [@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="65c82b4389bb"]}) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000080)) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x102, 0x0) write$eventfd(r0, &(0x7f0000000200)=0x4, 0x8) socket(0x2, 0x80003, 0x3) openat$vcs(0xffffffffffffff9c, &(0x7f0000000400), 0x20000, 0x0) 20:46:09 executing program 4: ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000080)=@req={0x28, &(0x7f0000000040)={'ip6tnl0\x00', @ifru_data=&(0x7f0000000000)="f17494704e68b47eaad8fb9da92ff99b5cce055ddc13dc72692e77db7acc710c"}}) r0 = syz_io_uring_setup(0x682e, &(0x7f00000000c0)={0x0, 0x61b0, 0x4, 0x1, 0x2d2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)) syz_io_uring_setup(0x6fa4, &(0x7f00000001c0)={0x0, 0x45b1, 0x20, 0x2, 0x62}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fef000/0xe000)=nil, &(0x7f0000000240), &(0x7f0000000280)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_SEND={0x1a, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)="b72d90afab83524e5a67d39021a498ec674b4d2ca9113ff899e0d0f9b83e4bf0e5c7aa9df47be19e9a203e183c82e8042b2828fee967fd5f214e5a80dad31344738967859ee7c7408a45a6d559e9a086f7e05e104e2a4f30aac4aa379c63d71cd8e1c3343a37e93d01bc888eb7592e29d80dfb0e02f86afd532c9d0cfaf2a42c924a791fd05dd6f753e129d61651f1de6a9f72994cbb6a582ac3531e36fe5fa6477b2b98f35e1dd5", 0xa8, 0x840, 0x1, {0x0, r3}}, 0xfffff516) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff2000/0x1000)=nil, 0x1000, 0x2000000, 0x10010, r0, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000480)=@buf={0xbf, &(0x7f00000003c0)="2b4d53922143fe2395390a2145533f7bdcdb30c3bf09285c2bf6fe927deea3a89f0dbabebefdfa91c21096b9dddcbfa0d039b15c68be2b65234ebc1b9b90bfbf785f6481eab0db2dc826e1f7c8e0b94ea9641466150b090811b54951baefc0cde8c67d871e2c5d0d431598e7ada503479215055a88cd67c2e709732acfb98dc78e48141083d9bf6983dec0dd4acf6c6382bec2eec2bf195d806f2955a8ce60b05fe65bff960999faad64df00c7588262a6320066f76791f5459f9d9de1749e"}) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [""]}, 0x14}}, 0x40881) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r4 = io_uring_setup(0x6033, &(0x7f00000005c0)={0x0, 0xacab, 0x4, 0x0, 0x1, 0x0, r0}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x2000000, 0x13, r4, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002580)=[{{&(0x7f0000000640)=@isdn, 0x80, &(0x7f0000000740)=[{&(0x7f00000006c0)=""/80, 0x50}], 0x1, &(0x7f0000000780)=""/80, 0x50}}, {{&(0x7f0000000800)=@generic, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000880)=""/215, 0xd7}, {&(0x7f0000000980)=""/145, 0x91}, {&(0x7f0000000a40)=""/187, 0xbb}], 0x3}, 0x2}, {{0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000000b40)=""/121, 0x79}, {&(0x7f0000000bc0)=""/162, 0xa2}, {&(0x7f0000000c80)=""/201, 0xc9}, {&(0x7f0000000d80)=""/19, 0x13}, {&(0x7f0000000dc0)=""/4096, 0x1000}, {&(0x7f0000001dc0)=""/206, 0xce}, {&(0x7f0000001ec0)=""/33, 0x21}, {&(0x7f0000001f00)=""/27, 0x1b}, {&(0x7f0000001f40)=""/239, 0xef}], 0x9, &(0x7f0000002100)=""/234, 0xea}, 0x2}, {{&(0x7f0000002200)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000002540)=[{&(0x7f0000002280)=""/195, 0xc3}, {&(0x7f0000002380)=""/229, 0xe5}, {&(0x7f0000002480)=""/167, 0xa7}], 0x3}, 0x800}], 0x4, 0x2000, &(0x7f0000002680)={0x0, 0x3938700}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x20010, r0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f00000026c0), 0x1) r5 = syz_io_uring_setup(0x51c7, &(0x7f0000002800)={0x0, 0x5d6e, 0x0, 0x3, 0x38a}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000002880), &(0x7f00000028c0)) r6 = syz_io_uring_setup(0x3e47, &(0x7f0000002900)={0x0, 0x2baf, 0x4, 0x1, 0x62, 0x0, r5}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000002980), &(0x7f00000029c0)) syz_io_uring_setup(0x3a60, &(0x7f0000002a00)={0x0, 0x5114, 0x4, 0x3, 0xbc, 0x0, r6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000002a80), &(0x7f0000002ac0)) syz_genetlink_get_family_id$gtp(&(0x7f0000002b40), 0xffffffffffffffff) 20:46:09 executing program 0: r0 = getuid() r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TUNSETOWNER(r1, 0x400454cc, r0) ioprio_get$uid(0x0, r0) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000040)={'wg2\x00'}) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x1) r2 = syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x46d, 0xc101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x9, 0xa0, 0xfd, [{{0x9, 0x4, 0x0, 0xf9, 0x1, 0x3, 0x1, 0x0, 0x5, {0x9, 0x21, 0x7, 0x3f, 0x1, {0x22, 0xc46}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x4, 0x1f, 0x8}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0xe2, 0x3, 0x40}}]}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x10, 0x0, 0x1f, 0x20, 0x8}, 0x72, &(0x7f0000000100)={0x5, 0xf, 0x72, 0x4, [@wireless={0xb, 0x10, 0x1, 0x2, 0x0, 0x3, 0x5, 0x80, 0x80}, @generic={0x3f, 0x10, 0x1, "13eabcbedc7e85361568ba82957512f9fc3dc29c3335eacf761eb23847dd322ade415ab9dabe332209a130b7c151897613085a1787d6b6748b0354d0"}, @ssp_cap={0x18, 0x10, 0xa, 0x3f, 0x3, 0x1, 0xff0f, 0x9, [0x0, 0x3fc0, 0xc000]}, @wireless={0xb, 0x10, 0x1, 0x2, 0x40, 0x3e, 0xc7, 0xffff, 0x8}]}, 0x1, [{0xc7, &(0x7f0000000180)=@string={0xc7, 0x3, "7f126e6ffa050bba81edaf647a108d9fd37fbe3d11c15a3707477a6757d84b545a36669de4aa342241c88f7d526936f675209a74339730655071e3fcb25a208bbc069d6df4c07b4705d393a371da12cad8aaf6778ad74c8d58df24aaa77a7230a9f3628e71abaf0f819fdc49a07c577564df79e1300f987b6d6f0677e40fce2bb108a04a299c04e4bf6756185d8f38f7b15524ba0d91f7e2e25eec64a5523257550e35539b7efd2f71cc57e3428c7c38353ccfddec9577d5854e54703d3bf8b4132cd5932a"}}]}) syz_usb_ep_write(r2, 0x1f, 0x17, &(0x7f00000002c0)="18676c5fbcc850892fbc37961384e6dc244a9c136edf28") ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000300)=[0x9, 0x7]) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r3, 0x29, 0x2d, &(0x7f0000000340)={0x0, {{0xa, 0x4e20, 0x9, @mcast2, 0x83}}}, 0x88) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000400)=""/151) ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, &(0x7f00000004c0)=""/9) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000005c0)={'ip6_vti0\x00', &(0x7f0000000540)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0x8, 0x8000, 0x2e, @private0, @remote, 0x7800, 0x8, 0xb0b, 0x1ff}}) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000800)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000600)={0x1bc, 0x0, 0x2, 0x70bd29, 0x25dfdbfc, {}, [{{0x8}, {0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r4}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x81}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) 20:46:09 executing program 5: ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x2f, 0x2, 0x9, 0x9b8c, 0x20, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x20, 0x1, 0xfff0000, 0x200}}) socketpair(0x28, 0xa, 0x5, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000100)=0x5, 0x4) socketpair(0x1e, 0x6, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r2) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, r3, 0x10, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7, 0x56}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x54}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6f}]}, 0x50}, 0x1, 0x0, 0x0, 0x801}, 0x8801) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000380), r1) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x3c, r4, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48c9ea108b1f44ee}, 0x800) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x18, 0x0, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x40040c0) socketpair(0x6, 0x4, 0x8001, &(0x7f00000005c0)={0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000580), r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000600), r7) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 20:46:09 executing program 2: io_uring_enter(0xffffffffffffffff, 0x2d60, 0x28f3, 0x1, &(0x7f0000000000)={[0x1ff]}, 0x8) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000001300)=[{&(0x7f0000000040)=""/172, 0xac}, {&(0x7f0000000100)=""/212, 0xd4}, {&(0x7f0000000200)=""/116, 0x74}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/82, 0x52}], 0x5) r0 = io_uring_setup(0x4582, &(0x7f0000001380)={0x0, 0xb150, 0x8, 0x6, 0x38f}) r1 = syz_io_uring_setup(0x40, &(0x7f0000001400)={0x0, 0x108e, 0x1, 0x0, 0x1e, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001480), &(0x7f00000014c0)) ioprio_get$uid(0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001580)={'ip6_vti0\x00', &(0x7f0000001500)={'syztnl0\x00', 0x0, 0x29, 0x7f, 0x5, 0x81, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x7, 0xf5e, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000001640)={'syztnl1\x00', &(0x7f00000015c0)={'ip6_vti0\x00', r2, 0x4, 0x1, 0x0, 0x80000001, 0x40, @ipv4={'\x00', '\xff\xff', @local}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7800, 0x10, 0x4, 0x400000}}) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000016c0)='ns/uts\x00') sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001780)={&(0x7f0000001700)={0x6c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@GTPA_O_TEI={0x8}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r2}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_NET_NS_FD={0x8, 0x7, r3}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x41) r4 = syz_io_uring_setup(0x1382, &(0x7f0000001800)={0x0, 0x419b, 0x10, 0x0, 0x2f2, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000001880), &(0x7f00000018c0)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0) syz_io_uring_setup(0x4d2f, &(0x7f0000001900)={0x0, 0xacea, 0x10, 0x3, 0x5, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001980), &(0x7f00000019c0)) syz_genetlink_get_family_id$nbd(&(0x7f0000001a00), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001a80), 0xffffffffffffffff) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_DSTOPTS(r5, 0x29, 0x3b, &(0x7f0000001bc0)={0xff}, 0x8) r6 = io_uring_setup(0x7d7f, &(0x7f0000001c00)={0x0, 0x6e7, 0x8, 0x1, 0x11a, 0x0, r0}) io_uring_setup(0x778d, &(0x7f0000001c80)={0x0, 0xf775, 0x10, 0x0, 0x3a8, 0x0, r6}) 20:46:09 executing program 1: ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000000)={'vlan0\x00'}) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000040)={0x1, 0x4, [@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="65c82b4389bb"]}) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000080)) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x102, 0x0) write$eventfd(r0, &(0x7f0000000200)=0x4, 0x8) socket(0x2, 0x80003, 0x3) openat$vcs(0xffffffffffffff9c, &(0x7f0000000400), 0x20000, 0x0) 20:46:09 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_FAMILY={0x6}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0xc000) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x6c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010100}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010102}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x4c, 0x0, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x7f}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x4}, @IEEE802154_ATTR_CCA_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4c00c000) r2 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000540), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00'}) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000011c0), 0x18b000, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r3, &(0x7f0000001340)={&(0x7f0000001200), 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x70, 0x0, 0x28, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x21}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x31}, @NL80211_ATTR_PMKID={0x14, 0x55, "de6a7d645d6d49b3b5b65b5753264841"}, @NL80211_ATTR_SSID={0x5, 0x34, @random='C'}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x48}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@broadcast}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x38}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x2e}, @NL80211_ATTR_SSID={0x7, 0x34, @random="219d02"}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x4084) 20:46:09 executing program 7: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x29, 0x2, 0x9, 0x1000, 0x7f, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40, 0x1, 0xfffffff9, 0x3}}) socketpair(0x22, 0x3, 0x4e3, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r2, 0x89f6, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'ip6gre0\x00', r0, 0x4, 0xfc, 0x20, 0xffff, 0x30, @remote, @loopback, 0x40, 0x8020, 0x6a1a, 0xffff}}) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f00000001c0)=0x4, 0x4) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, 0x0, 0x28, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xff}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040002}, 0xc050) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000380)={'sit0\x00', &(0x7f0000000300)={'ip6gre0\x00', r3, 0x4, 0x7f, 0x5, 0x2, 0x8, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @loopback, 0x1, 0x1, 0x3, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r2, 0x89f4, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'ip6tnl0\x00', r4, 0x29, 0xfe, 0xf7, 0x7, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, 0x8000, 0x7, 0x7, 0x401}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000500)={'ip6tnl0\x00', &(0x7f0000000480)={'syztnl2\x00', r4, 0x29, 0x81, 0x8, 0x7, 0xa, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8, 0x8000, 0x20, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000005c0)={'ip6tnl0\x00', &(0x7f0000000540)={'syztnl0\x00', r5, 0x29, 0x0, 0x3f, 0x8000, 0x8, @remote, @local, 0x700, 0x48, 0x0, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000680)={'syztnl1\x00', &(0x7f0000000600)={'ip6gre0\x00', r3, 0x4, 0x7, 0x7, 0xffffffff, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x700, 0x7800, 0x9, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r2, 0x89f4, &(0x7f0000000740)={'sit0\x00', &(0x7f00000006c0)={'ip6gre0\x00', r5, 0x2f, 0x0, 0xff, 0x7, 0x11, @loopback, @mcast2, 0x40, 0x700, 0x2fdf9be1, 0x3}}) getsockopt$sock_int(r2, 0x1, 0x23, &(0x7f0000000780), &(0x7f00000007c0)=0x4) syz_genetlink_get_family_id$team(&(0x7f0000000ac0), 0xffffffffffffffff) 20:46:09 executing program 3: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f0000000000)=""/148) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f00000000c0)=""/40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x10000, 0x0) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000140)=""/183) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x901, 0x0) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000280)=0x7) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x44002, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000300)=""/4096) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000001300), 0x101002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000001340)={'netpci0\x00'}) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001380), 0x70380, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000001400), r0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x2c, r5, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x10001}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000024) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x17) ioctl$TUNGETFEATURES(r4, 0x800454cf, &(0x7f0000001540)) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000001680)) 20:46:09 executing program 1: ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000000)={'vlan0\x00'}) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000040)={0x1, 0x4, [@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="65c82b4389bb"]}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x102, 0x0) write$eventfd(r1, &(0x7f0000000200)=0x4, 0x8) socket(0x2, 0x80003, 0x3) openat$vcs(0xffffffffffffff9c, &(0x7f0000000400), 0x20000, 0x0) 20:46:09 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_FAMILY={0x6}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0xc000) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x6c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010100}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010102}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x4c, 0x0, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x7f}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x4}, @IEEE802154_ATTR_CCA_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4c00c000) r2 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000540), 0xffffffffffffffff) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000011c0), 0x18b000, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r3, &(0x7f0000001340)={&(0x7f0000001200), 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x70, 0x0, 0x28, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x21}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x31}, @NL80211_ATTR_PMKID={0x14, 0x55, "de6a7d645d6d49b3b5b65b5753264841"}, @NL80211_ATTR_SSID={0x5, 0x34, @random='C'}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x48}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@broadcast}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x38}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x2e}, @NL80211_ATTR_SSID={0x7, 0x34, @random="219d02"}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x4084) 20:46:09 executing program 7: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x29, 0x2, 0x9, 0x1000, 0x7f, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40, 0x1, 0xfffffff9, 0x3}}) socketpair(0x22, 0x3, 0x4e3, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r2, 0x89f6, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'ip6gre0\x00', r0, 0x4, 0xfc, 0x20, 0xffff, 0x30, @remote, @loopback, 0x40, 0x8020, 0x6a1a, 0xffff}}) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f00000001c0)=0x4, 0x4) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, 0x0, 0x28, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xff}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040002}, 0xc050) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000380)={'sit0\x00', &(0x7f0000000300)={'ip6gre0\x00', r3, 0x4, 0x7f, 0x5, 0x2, 0x8, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @loopback, 0x1, 0x1, 0x3, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r2, 0x89f4, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'ip6tnl0\x00', r4, 0x29, 0xfe, 0xf7, 0x7, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, 0x8000, 0x7, 0x7, 0x401}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000500)={'ip6tnl0\x00', &(0x7f0000000480)={'syztnl2\x00', r4, 0x29, 0x81, 0x8, 0x7, 0xa, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8, 0x8000, 0x20, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000005c0)={'ip6tnl0\x00', &(0x7f0000000540)={'syztnl0\x00', r5, 0x29, 0x0, 0x3f, 0x8000, 0x8, @remote, @local, 0x700, 0x48, 0x0, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000680)={'syztnl1\x00', &(0x7f0000000600)={'ip6gre0\x00', r3, 0x4, 0x7, 0x7, 0xffffffff, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x700, 0x7800, 0x9, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r2, 0x89f4, &(0x7f0000000740)={'sit0\x00', &(0x7f00000006c0)={'ip6gre0\x00', r5, 0x2f, 0x0, 0xff, 0x7, 0x11, @loopback, @mcast2, 0x40, 0x700, 0x2fdf9be1, 0x3}}) syz_genetlink_get_family_id$team(&(0x7f0000000ac0), 0xffffffffffffffff) 20:46:09 executing program 3: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f0000000000)=""/148) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f00000000c0)=""/40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x10000, 0x0) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000140)=""/183) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x901, 0x0) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000280)=0x7) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x44002, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000300)=""/4096) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000001300), 0x101002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000001340)={'netpci0\x00'}) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001380), 0x70380, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000001400), r0) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x17) ioctl$TUNGETFEATURES(r4, 0x800454cf, &(0x7f0000001540)) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000001680)) 20:46:09 executing program 1: ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000000)={'vlan0\x00'}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x102, 0x0) write$eventfd(r1, &(0x7f0000000200)=0x4, 0x8) socket(0x2, 0x80003, 0x3) openat$vcs(0xffffffffffffff9c, &(0x7f0000000400), 0x20000, 0x0) 20:46:09 executing program 2: io_uring_enter(0xffffffffffffffff, 0x2d60, 0x28f3, 0x1, &(0x7f0000000000)={[0x1ff]}, 0x8) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000001300)=[{&(0x7f0000000040)=""/172, 0xac}, {&(0x7f0000000100)=""/212, 0xd4}, {&(0x7f0000000200)=""/116, 0x74}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/82, 0x52}], 0x5) r0 = io_uring_setup(0x4582, &(0x7f0000001380)={0x0, 0xb150, 0x8, 0x6, 0x38f}) r1 = syz_io_uring_setup(0x40, &(0x7f0000001400)={0x0, 0x108e, 0x1, 0x0, 0x1e, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001480), &(0x7f00000014c0)) ioprio_get$uid(0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001580)={'ip6_vti0\x00', &(0x7f0000001500)={'syztnl0\x00', 0x0, 0x29, 0x7f, 0x5, 0x81, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x7, 0xf5e, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000001640)={'syztnl1\x00', &(0x7f00000015c0)={'ip6_vti0\x00', r2, 0x4, 0x1, 0x0, 0x80000001, 0x40, @ipv4={'\x00', '\xff\xff', @local}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7800, 0x10, 0x4, 0x400000}}) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000016c0)='ns/uts\x00') sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001780)={&(0x7f0000001700)={0x6c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@GTPA_O_TEI={0x8}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r2}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_NET_NS_FD={0x8, 0x7, r3}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x41) r4 = syz_io_uring_setup(0x1382, &(0x7f0000001800)={0x0, 0x419b, 0x10, 0x0, 0x2f2, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000001880), &(0x7f00000018c0)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0) syz_io_uring_setup(0x4d2f, &(0x7f0000001900)={0x0, 0xacea, 0x10, 0x3, 0x5, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001980), &(0x7f00000019c0)) syz_genetlink_get_family_id$nbd(&(0x7f0000001a00), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001a80), 0xffffffffffffffff) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_DSTOPTS(r5, 0x29, 0x3b, &(0x7f0000001bc0)={0xff}, 0x8) r6 = io_uring_setup(0x7d7f, &(0x7f0000001c00)={0x0, 0x6e7, 0x8, 0x1, 0x11a, 0x0, r0}) io_uring_setup(0x778d, &(0x7f0000001c80)={0x0, 0xf775, 0x10, 0x0, 0x3a8, 0x0, r6}) 20:46:09 executing program 4: ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000080)=@req={0x28, &(0x7f0000000040)={'ip6tnl0\x00', @ifru_data=&(0x7f0000000000)="f17494704e68b47eaad8fb9da92ff99b5cce055ddc13dc72692e77db7acc710c"}}) r0 = syz_io_uring_setup(0x682e, &(0x7f00000000c0)={0x0, 0x61b0, 0x4, 0x1, 0x2d2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)) syz_io_uring_setup(0x6fa4, &(0x7f00000001c0)={0x0, 0x45b1, 0x20, 0x2, 0x62}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fef000/0xe000)=nil, &(0x7f0000000240), &(0x7f0000000280)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_SEND={0x1a, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)="b72d90afab83524e5a67d39021a498ec674b4d2ca9113ff899e0d0f9b83e4bf0e5c7aa9df47be19e9a203e183c82e8042b2828fee967fd5f214e5a80dad31344738967859ee7c7408a45a6d559e9a086f7e05e104e2a4f30aac4aa379c63d71cd8e1c3343a37e93d01bc888eb7592e29d80dfb0e02f86afd532c9d0cfaf2a42c924a791fd05dd6f753e129d61651f1de6a9f72994cbb6a582ac3531e36fe5fa6477b2b98f35e1dd5", 0xa8, 0x840, 0x1, {0x0, r3}}, 0xfffff516) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff2000/0x1000)=nil, 0x1000, 0x2000000, 0x10010, r0, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000480)=@buf={0xbf, &(0x7f00000003c0)="2b4d53922143fe2395390a2145533f7bdcdb30c3bf09285c2bf6fe927deea3a89f0dbabebefdfa91c21096b9dddcbfa0d039b15c68be2b65234ebc1b9b90bfbf785f6481eab0db2dc826e1f7c8e0b94ea9641466150b090811b54951baefc0cde8c67d871e2c5d0d431598e7ada503479215055a88cd67c2e709732acfb98dc78e48141083d9bf6983dec0dd4acf6c6382bec2eec2bf195d806f2955a8ce60b05fe65bff960999faad64df00c7588262a6320066f76791f5459f9d9de1749e"}) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [""]}, 0x14}}, 0x40881) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r4 = io_uring_setup(0x6033, &(0x7f00000005c0)={0x0, 0xacab, 0x4, 0x0, 0x1, 0x0, r0}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x2000000, 0x13, r4, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002580)=[{{&(0x7f0000000640)=@isdn, 0x80, &(0x7f0000000740)=[{&(0x7f00000006c0)=""/80, 0x50}], 0x1, &(0x7f0000000780)=""/80, 0x50}}, {{&(0x7f0000000800)=@generic, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000880)=""/215, 0xd7}, {&(0x7f0000000980)=""/145, 0x91}, {&(0x7f0000000a40)=""/187, 0xbb}], 0x3}, 0x2}, {{0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000000b40)=""/121, 0x79}, {&(0x7f0000000bc0)=""/162, 0xa2}, {&(0x7f0000000c80)=""/201, 0xc9}, {&(0x7f0000000d80)=""/19, 0x13}, {&(0x7f0000000dc0)=""/4096, 0x1000}, {&(0x7f0000001dc0)=""/206, 0xce}, {&(0x7f0000001ec0)=""/33, 0x21}, {&(0x7f0000001f00)=""/27, 0x1b}, {&(0x7f0000001f40)=""/239, 0xef}], 0x9, &(0x7f0000002100)=""/234, 0xea}, 0x2}, {{&(0x7f0000002200)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000002540)=[{&(0x7f0000002280)=""/195, 0xc3}, {&(0x7f0000002380)=""/229, 0xe5}, {&(0x7f0000002480)=""/167, 0xa7}], 0x3}, 0x800}], 0x4, 0x2000, &(0x7f0000002680)={0x0, 0x3938700}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x20010, r0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f00000026c0), 0x1) r5 = syz_io_uring_setup(0x51c7, &(0x7f0000002800)={0x0, 0x5d6e, 0x0, 0x3, 0x38a}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000002880), &(0x7f00000028c0)) r6 = syz_io_uring_setup(0x3e47, &(0x7f0000002900)={0x0, 0x2baf, 0x4, 0x1, 0x62, 0x0, r5}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000002980), &(0x7f00000029c0)) syz_io_uring_setup(0x3a60, &(0x7f0000002a00)={0x0, 0x5114, 0x4, 0x3, 0xbc, 0x0, r6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000002a80), &(0x7f0000002ac0)) syz_genetlink_get_family_id$gtp(&(0x7f0000002b40), 0xffffffffffffffff) 20:46:09 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_FAMILY={0x6}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0xc000) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x6c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010100}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010102}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x4c, 0x0, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x7f}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x4}, @IEEE802154_ATTR_CCA_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4c00c000) r2 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000011c0), 0x18b000, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r3, &(0x7f0000001340)={&(0x7f0000001200), 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x70, 0x0, 0x28, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x21}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x31}, @NL80211_ATTR_PMKID={0x14, 0x55, "de6a7d645d6d49b3b5b65b5753264841"}, @NL80211_ATTR_SSID={0x5, 0x34, @random='C'}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x48}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@broadcast}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x38}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x2e}, @NL80211_ATTR_SSID={0x7, 0x34, @random="219d02"}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x4084) 20:46:18 executing program 2: io_uring_enter(0xffffffffffffffff, 0x2d60, 0x28f3, 0x1, &(0x7f0000000000)={[0x1ff]}, 0x8) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000001300)=[{&(0x7f0000000040)=""/172, 0xac}, {&(0x7f0000000100)=""/212, 0xd4}, {&(0x7f0000000200)=""/116, 0x74}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/82, 0x52}], 0x5) r0 = io_uring_setup(0x4582, &(0x7f0000001380)={0x0, 0xb150, 0x8, 0x6, 0x38f}) r1 = syz_io_uring_setup(0x40, &(0x7f0000001400)={0x0, 0x108e, 0x1, 0x0, 0x1e, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001480), &(0x7f00000014c0)) ioprio_get$uid(0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001580)={'ip6_vti0\x00', &(0x7f0000001500)={'syztnl0\x00', 0x0, 0x29, 0x7f, 0x5, 0x81, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x7, 0xf5e, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000001640)={'syztnl1\x00', &(0x7f00000015c0)={'ip6_vti0\x00', r2, 0x4, 0x1, 0x0, 0x80000001, 0x40, @ipv4={'\x00', '\xff\xff', @local}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7800, 0x10, 0x4, 0x400000}}) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000016c0)='ns/uts\x00') sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001780)={&(0x7f0000001700)={0x6c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@GTPA_O_TEI={0x8}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r2}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_NET_NS_FD={0x8, 0x7, r3}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x41) r4 = syz_io_uring_setup(0x1382, &(0x7f0000001800)={0x0, 0x419b, 0x10, 0x0, 0x2f2, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000001880), &(0x7f00000018c0)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0) syz_io_uring_setup(0x4d2f, &(0x7f0000001900)={0x0, 0xacea, 0x10, 0x3, 0x5, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001980), &(0x7f00000019c0)) syz_genetlink_get_family_id$nbd(&(0x7f0000001a00), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001a80), 0xffffffffffffffff) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_DSTOPTS(r5, 0x29, 0x3b, &(0x7f0000001bc0)={0xff}, 0x8) r6 = io_uring_setup(0x7d7f, &(0x7f0000001c00)={0x0, 0x6e7, 0x8, 0x1, 0x11a, 0x0, r0}) io_uring_setup(0x778d, &(0x7f0000001c80)={0x0, 0xf775, 0x10, 0x0, 0x3a8, 0x0, r6}) 20:46:18 executing program 0: r0 = getuid() r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TUNSETOWNER(r1, 0x400454cc, r0) ioprio_get$uid(0x0, r0) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000040)={'wg2\x00'}) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x1) r2 = syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x46d, 0xc101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x9, 0xa0, 0xfd, [{{0x9, 0x4, 0x0, 0xf9, 0x1, 0x3, 0x1, 0x0, 0x5, {0x9, 0x21, 0x7, 0x3f, 0x1, {0x22, 0xc46}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x4, 0x1f, 0x8}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0xe2, 0x3, 0x40}}]}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x10, 0x0, 0x1f, 0x20, 0x8}, 0x72, &(0x7f0000000100)={0x5, 0xf, 0x72, 0x4, [@wireless={0xb, 0x10, 0x1, 0x2, 0x0, 0x3, 0x5, 0x80, 0x80}, @generic={0x3f, 0x10, 0x1, "13eabcbedc7e85361568ba82957512f9fc3dc29c3335eacf761eb23847dd322ade415ab9dabe332209a130b7c151897613085a1787d6b6748b0354d0"}, @ssp_cap={0x18, 0x10, 0xa, 0x3f, 0x3, 0x1, 0xff0f, 0x9, [0x0, 0x3fc0, 0xc000]}, @wireless={0xb, 0x10, 0x1, 0x2, 0x40, 0x3e, 0xc7, 0xffff, 0x8}]}, 0x1, [{0xc7, &(0x7f0000000180)=@string={0xc7, 0x3, "7f126e6ffa050bba81edaf647a108d9fd37fbe3d11c15a3707477a6757d84b545a36669de4aa342241c88f7d526936f675209a74339730655071e3fcb25a208bbc069d6df4c07b4705d393a371da12cad8aaf6778ad74c8d58df24aaa77a7230a9f3628e71abaf0f819fdc49a07c577564df79e1300f987b6d6f0677e40fce2bb108a04a299c04e4bf6756185d8f38f7b15524ba0d91f7e2e25eec64a5523257550e35539b7efd2f71cc57e3428c7c38353ccfddec9577d5854e54703d3bf8b4132cd5932a"}}]}) syz_usb_ep_write(r2, 0x1f, 0x17, &(0x7f00000002c0)="18676c5fbcc850892fbc37961384e6dc244a9c136edf28") ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000300)=[0x9, 0x7]) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r3, 0x29, 0x2d, &(0x7f0000000340)={0x0, {{0xa, 0x4e20, 0x9, @mcast2, 0x83}}}, 0x88) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000400)=""/151) ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, &(0x7f00000004c0)=""/9) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000005c0)={'ip6_vti0\x00', &(0x7f0000000540)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0x8, 0x8000, 0x2e, @private0, @remote, 0x7800, 0x8, 0xb0b, 0x1ff}}) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000800)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000600)={0x1bc, 0x0, 0x2, 0x70bd29, 0x25dfdbfc, {}, [{{0x8}, {0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r4}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x81}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) 20:46:18 executing program 7: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x29, 0x2, 0x9, 0x1000, 0x7f, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40, 0x1, 0xfffffff9, 0x3}}) socketpair(0x22, 0x3, 0x4e3, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r2, 0x89f6, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'ip6gre0\x00', r0, 0x4, 0xfc, 0x20, 0xffff, 0x30, @remote, @loopback, 0x40, 0x8020, 0x6a1a, 0xffff}}) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f00000001c0)=0x4, 0x4) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, 0x0, 0x28, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xff}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040002}, 0xc050) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000380)={'sit0\x00', &(0x7f0000000300)={'ip6gre0\x00', r3, 0x4, 0x7f, 0x5, 0x2, 0x8, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @loopback, 0x1, 0x1, 0x3, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r2, 0x89f4, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'ip6tnl0\x00', r4, 0x29, 0xfe, 0xf7, 0x7, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, 0x8000, 0x7, 0x7, 0x401}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000500)={'ip6tnl0\x00', &(0x7f0000000480)={'syztnl2\x00', r4, 0x29, 0x81, 0x8, 0x7, 0xa, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8, 0x8000, 0x20, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000005c0)={'ip6tnl0\x00', &(0x7f0000000540)={'syztnl0\x00', r5, 0x29, 0x0, 0x3f, 0x8000, 0x8, @remote, @local, 0x700, 0x48, 0x0, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000680)={'syztnl1\x00', &(0x7f0000000600)={'ip6gre0\x00', r3, 0x4, 0x7, 0x7, 0xffffffff, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x700, 0x7800, 0x9, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r2, 0x89f4, &(0x7f0000000740)={'sit0\x00', &(0x7f00000006c0)={'ip6gre0\x00', r5, 0x2f, 0x0, 0xff, 0x7, 0x11, @loopback, @mcast2, 0x40, 0x700, 0x2fdf9be1, 0x3}}) syz_genetlink_get_family_id$team(&(0x7f0000000ac0), 0xffffffffffffffff) 20:46:18 executing program 4: ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000080)=@req={0x28, &(0x7f0000000040)={'ip6tnl0\x00', @ifru_data=&(0x7f0000000000)="f17494704e68b47eaad8fb9da92ff99b5cce055ddc13dc72692e77db7acc710c"}}) r0 = syz_io_uring_setup(0x682e, &(0x7f00000000c0)={0x0, 0x61b0, 0x4, 0x1, 0x2d2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)) syz_io_uring_setup(0x6fa4, &(0x7f00000001c0)={0x0, 0x45b1, 0x20, 0x2, 0x62}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fef000/0xe000)=nil, &(0x7f0000000240), &(0x7f0000000280)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_SEND={0x1a, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)="b72d90afab83524e5a67d39021a498ec674b4d2ca9113ff899e0d0f9b83e4bf0e5c7aa9df47be19e9a203e183c82e8042b2828fee967fd5f214e5a80dad31344738967859ee7c7408a45a6d559e9a086f7e05e104e2a4f30aac4aa379c63d71cd8e1c3343a37e93d01bc888eb7592e29d80dfb0e02f86afd532c9d0cfaf2a42c924a791fd05dd6f753e129d61651f1de6a9f72994cbb6a582ac3531e36fe5fa6477b2b98f35e1dd5", 0xa8, 0x840, 0x1, {0x0, r3}}, 0xfffff516) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff2000/0x1000)=nil, 0x1000, 0x2000000, 0x10010, r0, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000480)=@buf={0xbf, &(0x7f00000003c0)="2b4d53922143fe2395390a2145533f7bdcdb30c3bf09285c2bf6fe927deea3a89f0dbabebefdfa91c21096b9dddcbfa0d039b15c68be2b65234ebc1b9b90bfbf785f6481eab0db2dc826e1f7c8e0b94ea9641466150b090811b54951baefc0cde8c67d871e2c5d0d431598e7ada503479215055a88cd67c2e709732acfb98dc78e48141083d9bf6983dec0dd4acf6c6382bec2eec2bf195d806f2955a8ce60b05fe65bff960999faad64df00c7588262a6320066f76791f5459f9d9de1749e"}) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [""]}, 0x14}}, 0x40881) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r4 = io_uring_setup(0x6033, &(0x7f00000005c0)={0x0, 0xacab, 0x4, 0x0, 0x1, 0x0, r0}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x2000000, 0x13, r4, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002580)=[{{&(0x7f0000000640)=@isdn, 0x80, &(0x7f0000000740)=[{&(0x7f00000006c0)=""/80, 0x50}], 0x1, &(0x7f0000000780)=""/80, 0x50}}, {{&(0x7f0000000800)=@generic, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000880)=""/215, 0xd7}, {&(0x7f0000000980)=""/145, 0x91}, {&(0x7f0000000a40)=""/187, 0xbb}], 0x3}, 0x2}, {{0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000000b40)=""/121, 0x79}, {&(0x7f0000000bc0)=""/162, 0xa2}, {&(0x7f0000000c80)=""/201, 0xc9}, {&(0x7f0000000d80)=""/19, 0x13}, {&(0x7f0000000dc0)=""/4096, 0x1000}, {&(0x7f0000001dc0)=""/206, 0xce}, {&(0x7f0000001ec0)=""/33, 0x21}, {&(0x7f0000001f00)=""/27, 0x1b}, {&(0x7f0000001f40)=""/239, 0xef}], 0x9, &(0x7f0000002100)=""/234, 0xea}, 0x2}, {{&(0x7f0000002200)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000002540)=[{&(0x7f0000002280)=""/195, 0xc3}, {&(0x7f0000002380)=""/229, 0xe5}, {&(0x7f0000002480)=""/167, 0xa7}], 0x3}, 0x800}], 0x4, 0x2000, &(0x7f0000002680)={0x0, 0x3938700}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x20010, r0, 0x0) r5 = syz_io_uring_setup(0x4170, &(0x7f0000002700)={0x0, 0xc7db, 0x52c9ea573c6af5bf, 0x1, 0x1af, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000002780), &(0x7f00000027c0)) r6 = syz_io_uring_setup(0x51c7, &(0x7f0000002800)={0x0, 0x5d6e, 0x0, 0x3, 0x38a, 0x0, r5}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000002880), &(0x7f00000028c0)) r7 = syz_io_uring_setup(0x3e47, &(0x7f0000002900)={0x0, 0x2baf, 0x4, 0x1, 0x62, 0x0, r6}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000002980), &(0x7f00000029c0)) syz_io_uring_setup(0x3a60, &(0x7f0000002a00)={0x0, 0x5114, 0x4, 0x3, 0xbc, 0x0, r7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000002a80), &(0x7f0000002ac0)) syz_genetlink_get_family_id$gtp(&(0x7f0000002b40), 0xffffffffffffffff) 20:46:18 executing program 3: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f0000000000)=""/148) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f00000000c0)=""/40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x10000, 0x0) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000140)=""/183) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x901, 0x0) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000280)=0x7) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x44002, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000300)=""/4096) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000001300), 0x101002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000001340)={'netpci0\x00'}) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001380), 0x70380, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000001400), r0) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x17) ioctl$TUNGETFEATURES(r4, 0x800454cf, &(0x7f0000001540)) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000001680)) 20:46:18 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_FAMILY={0x6}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0xc000) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x6c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010100}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010102}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x4c, 0x0, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x7f}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x4}, @IEEE802154_ATTR_CCA_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4c00c000) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000011c0), 0x18b000, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r2, &(0x7f0000001340)={&(0x7f0000001200), 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x70, 0x0, 0x28, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x21}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x31}, @NL80211_ATTR_PMKID={0x14, 0x55, "de6a7d645d6d49b3b5b65b5753264841"}, @NL80211_ATTR_SSID={0x5, 0x34, @random='C'}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x48}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@broadcast}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x38}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x2e}, @NL80211_ATTR_SSID={0x7, 0x34, @random="219d02"}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x4084) 20:46:18 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x102, 0x0) write$eventfd(r1, &(0x7f0000000200)=0x4, 0x8) socket(0x2, 0x80003, 0x3) openat$vcs(0xffffffffffffff9c, &(0x7f0000000400), 0x20000, 0x0) 20:46:18 executing program 5: ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x2f, 0x2, 0x9, 0x9b8c, 0x20, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x20, 0x1, 0xfff0000, 0x200}}) socketpair(0x28, 0xa, 0x5, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000100)=0x5, 0x4) socketpair(0x1e, 0x6, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r2) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, r3, 0x10, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7, 0x56}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x54}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6f}]}, 0x50}, 0x1, 0x0, 0x0, 0x801}, 0x8801) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000380), r1) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x3c, r4, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48c9ea108b1f44ee}, 0x800) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x18, 0x0, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x40040c0) socketpair(0x6, 0x4, 0x8001, &(0x7f00000005c0)={0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000580), r6) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 20:46:18 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x102, 0x0) write$eventfd(r1, &(0x7f0000000200)=0x4, 0x8) socket(0x2, 0x80003, 0x3) openat$vcs(0xffffffffffffff9c, &(0x7f0000000400), 0x20000, 0x0) 20:46:18 executing program 3: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f0000000000)=""/148) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f00000000c0)=""/40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x10000, 0x0) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000140)=""/183) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x901, 0x0) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000280)=0x7) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x44002, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000300)=""/4096) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000001300), 0x101002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000001340)={'netpci0\x00'}) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001380), 0x70380, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000001400), r0) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x17) ioctl$TUNGETFEATURES(r4, 0x800454cf, &(0x7f0000001540)) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000001680)) 20:46:18 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_FAMILY={0x6}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0xc000) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x6c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010100}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010102}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x4c, 0x0, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x7f}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x4}, @IEEE802154_ATTR_CCA_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4c00c000) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000011c0), 0x18b000, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r2, &(0x7f0000001340)={&(0x7f0000001200), 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x70, 0x0, 0x28, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x21}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x31}, @NL80211_ATTR_PMKID={0x14, 0x55, "de6a7d645d6d49b3b5b65b5753264841"}, @NL80211_ATTR_SSID={0x5, 0x34, @random='C'}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x48}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@broadcast}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x38}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x2e}, @NL80211_ATTR_SSID={0x7, 0x34, @random="219d02"}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x4084) 20:46:18 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x102, 0x0) write$eventfd(r1, &(0x7f0000000200)=0x4, 0x8) socket(0x2, 0x80003, 0x3) openat$vcs(0xffffffffffffff9c, &(0x7f0000000400), 0x20000, 0x0) 20:46:18 executing program 4: ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000080)=@req={0x28, &(0x7f0000000040)={'ip6tnl0\x00', @ifru_data=&(0x7f0000000000)="f17494704e68b47eaad8fb9da92ff99b5cce055ddc13dc72692e77db7acc710c"}}) r0 = syz_io_uring_setup(0x682e, &(0x7f00000000c0)={0x0, 0x61b0, 0x4, 0x1, 0x2d2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)) syz_io_uring_setup(0x6fa4, &(0x7f00000001c0)={0x0, 0x45b1, 0x20, 0x2, 0x62}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fef000/0xe000)=nil, &(0x7f0000000240), &(0x7f0000000280)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_SEND={0x1a, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)="b72d90afab83524e5a67d39021a498ec674b4d2ca9113ff899e0d0f9b83e4bf0e5c7aa9df47be19e9a203e183c82e8042b2828fee967fd5f214e5a80dad31344738967859ee7c7408a45a6d559e9a086f7e05e104e2a4f30aac4aa379c63d71cd8e1c3343a37e93d01bc888eb7592e29d80dfb0e02f86afd532c9d0cfaf2a42c924a791fd05dd6f753e129d61651f1de6a9f72994cbb6a582ac3531e36fe5fa6477b2b98f35e1dd5", 0xa8, 0x840, 0x1, {0x0, r3}}, 0xfffff516) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff2000/0x1000)=nil, 0x1000, 0x2000000, 0x10010, r0, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000480)=@buf={0xbf, &(0x7f00000003c0)="2b4d53922143fe2395390a2145533f7bdcdb30c3bf09285c2bf6fe927deea3a89f0dbabebefdfa91c21096b9dddcbfa0d039b15c68be2b65234ebc1b9b90bfbf785f6481eab0db2dc826e1f7c8e0b94ea9641466150b090811b54951baefc0cde8c67d871e2c5d0d431598e7ada503479215055a88cd67c2e709732acfb98dc78e48141083d9bf6983dec0dd4acf6c6382bec2eec2bf195d806f2955a8ce60b05fe65bff960999faad64df00c7588262a6320066f76791f5459f9d9de1749e"}) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [""]}, 0x14}}, 0x40881) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r4 = io_uring_setup(0x6033, &(0x7f00000005c0)={0x0, 0xacab, 0x4, 0x0, 0x1, 0x0, r0}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x2000000, 0x13, r4, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002580)=[{{&(0x7f0000000640)=@isdn, 0x80, &(0x7f0000000740)=[{&(0x7f00000006c0)=""/80, 0x50}], 0x1, &(0x7f0000000780)=""/80, 0x50}}, {{&(0x7f0000000800)=@generic, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000880)=""/215, 0xd7}, {&(0x7f0000000980)=""/145, 0x91}, {&(0x7f0000000a40)=""/187, 0xbb}], 0x3}, 0x2}, {{0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000000b40)=""/121, 0x79}, {&(0x7f0000000bc0)=""/162, 0xa2}, {&(0x7f0000000c80)=""/201, 0xc9}, {&(0x7f0000000d80)=""/19, 0x13}, {&(0x7f0000000dc0)=""/4096, 0x1000}, {&(0x7f0000001dc0)=""/206, 0xce}, {&(0x7f0000001ec0)=""/33, 0x21}, {&(0x7f0000001f00)=""/27, 0x1b}, {&(0x7f0000001f40)=""/239, 0xef}], 0x9, &(0x7f0000002100)=""/234, 0xea}, 0x2}, {{&(0x7f0000002200)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000002540)=[{&(0x7f0000002280)=""/195, 0xc3}, {&(0x7f0000002380)=""/229, 0xe5}, {&(0x7f0000002480)=""/167, 0xa7}], 0x3}, 0x800}], 0x4, 0x2000, &(0x7f0000002680)={0x0, 0x3938700}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x20010, r0, 0x0) r5 = syz_io_uring_setup(0x4170, &(0x7f0000002700)={0x0, 0xc7db, 0x52c9ea573c6af5bf, 0x1, 0x1af, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000002780), &(0x7f00000027c0)) r6 = syz_io_uring_setup(0x51c7, &(0x7f0000002800)={0x0, 0x5d6e, 0x0, 0x3, 0x38a, 0x0, r5}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000002880), &(0x7f00000028c0)) r7 = syz_io_uring_setup(0x3e47, &(0x7f0000002900)={0x0, 0x2baf, 0x4, 0x1, 0x62, 0x0, r6}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000002980), &(0x7f00000029c0)) syz_io_uring_setup(0x3a60, &(0x7f0000002a00)={0x0, 0x5114, 0x4, 0x3, 0xbc, 0x0, r7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000002a80), &(0x7f0000002ac0)) syz_genetlink_get_family_id$gtp(&(0x7f0000002b40), 0xffffffffffffffff) 20:46:18 executing program 2: io_uring_enter(0xffffffffffffffff, 0x2d60, 0x28f3, 0x1, &(0x7f0000000000)={[0x1ff]}, 0x8) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000001300)=[{&(0x7f0000000040)=""/172, 0xac}, {&(0x7f0000000100)=""/212, 0xd4}, {&(0x7f0000000200)=""/116, 0x74}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/82, 0x52}], 0x5) r0 = io_uring_setup(0x4582, &(0x7f0000001380)={0x0, 0xb150, 0x8, 0x6, 0x38f}) r1 = syz_io_uring_setup(0x40, &(0x7f0000001400)={0x0, 0x108e, 0x1, 0x0, 0x1e, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001480), &(0x7f00000014c0)) ioprio_get$uid(0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001580)={'ip6_vti0\x00', &(0x7f0000001500)={'syztnl0\x00', 0x0, 0x29, 0x7f, 0x5, 0x81, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x7, 0xf5e, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000001640)={'syztnl1\x00', &(0x7f00000015c0)={'ip6_vti0\x00', r2, 0x4, 0x1, 0x0, 0x80000001, 0x40, @ipv4={'\x00', '\xff\xff', @local}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7800, 0x10, 0x4, 0x400000}}) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000016c0)='ns/uts\x00') sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001780)={&(0x7f0000001700)={0x6c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@GTPA_O_TEI={0x8}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r2}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_NET_NS_FD={0x8, 0x7, r3}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x41) r4 = syz_io_uring_setup(0x1382, &(0x7f0000001800)={0x0, 0x419b, 0x10, 0x0, 0x2f2, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000001880), &(0x7f00000018c0)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0) syz_io_uring_setup(0x4d2f, &(0x7f0000001900)={0x0, 0xacea, 0x10, 0x3, 0x5, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001980), &(0x7f00000019c0)) syz_genetlink_get_family_id$nbd(&(0x7f0000001a00), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r5, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x44, 0x0, 0x0, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @multicast2}}, @NLBL_MGMT_A_DOMAIN={0x14, 0x1, '^-[#\'@:/[@^*\\$&\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x8010}, 0x20000000) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_DSTOPTS(r6, 0x29, 0x3b, &(0x7f0000001bc0)={0xff}, 0x8) r7 = io_uring_setup(0x7d7f, &(0x7f0000001c00)={0x0, 0x6e7, 0x8, 0x1, 0x11a, 0x0, r0}) io_uring_setup(0x778d, &(0x7f0000001c80)={0x0, 0xf775, 0x10, 0x0, 0x3a8, 0x0, r7}) 20:46:18 executing program 7: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x29, 0x2, 0x9, 0x1000, 0x7f, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40, 0x1, 0xfffffff9, 0x3}}) socketpair(0x22, 0x3, 0x4e3, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r2, 0x89f6, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'ip6gre0\x00', r0, 0x4, 0xfc, 0x20, 0xffff, 0x30, @remote, @loopback, 0x40, 0x8020, 0x6a1a, 0xffff}}) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f00000001c0)=0x4, 0x4) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, 0x0, 0x28, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xff}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040002}, 0xc050) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000380)={'sit0\x00', &(0x7f0000000300)={'ip6gre0\x00', r3, 0x4, 0x7f, 0x5, 0x2, 0x8, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @loopback, 0x1, 0x1, 0x3, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r2, 0x89f4, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'ip6tnl0\x00', r4, 0x29, 0xfe, 0xf7, 0x7, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, 0x8000, 0x7, 0x7, 0x401}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000500)={'ip6tnl0\x00', &(0x7f0000000480)={'syztnl2\x00', r4, 0x29, 0x81, 0x8, 0x7, 0xa, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8, 0x8000, 0x20, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000005c0)={'ip6tnl0\x00', &(0x7f0000000540)={'syztnl0\x00', r5, 0x29, 0x0, 0x3f, 0x8000, 0x8, @remote, @local, 0x700, 0x48, 0x0, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000680)={'syztnl1\x00', &(0x7f0000000600)={'ip6gre0\x00', r3, 0x4, 0x7, 0x7, 0xffffffff, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x700, 0x7800, 0x9, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r2, 0x89f4, &(0x7f0000000740)={'sit0\x00', &(0x7f00000006c0)={'ip6gre0\x00', r5, 0x2f, 0x0, 0xff, 0x7, 0x11, @loopback, @mcast2, 0x40, 0x700, 0x2fdf9be1, 0x3}}) syz_genetlink_get_family_id$team(&(0x7f0000000ac0), 0xffffffffffffffff) 20:46:19 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_FAMILY={0x6}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0xc000) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x6c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010100}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010102}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000011c0), 0x18b000, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r2, &(0x7f0000001340)={&(0x7f0000001200), 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x70, 0x0, 0x28, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x21}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x31}, @NL80211_ATTR_PMKID={0x14, 0x55, "de6a7d645d6d49b3b5b65b5753264841"}, @NL80211_ATTR_SSID={0x5, 0x34, @random='C'}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x48}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@broadcast}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x38}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x2e}, @NL80211_ATTR_SSID={0x7, 0x34, @random="219d02"}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x4084) [ 188.049205] Bluetooth: hci1: command 0x0406 tx timeout [ 188.050722] Bluetooth: hci3: command 0x0406 tx timeout [ 188.050794] Bluetooth: hci5: command 0x0406 tx timeout [ 188.051756] Bluetooth: hci0: command 0x0406 tx timeout [ 188.052773] Bluetooth: hci7: command 0x0406 tx timeout [ 188.054766] Bluetooth: hci4: command 0x0406 tx timeout [ 188.056129] Bluetooth: hci6: command 0x0406 tx timeout [ 188.056646] Bluetooth: hci2: command 0x0406 tx timeout 20:46:28 executing program 1: ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x102, 0x0) write$eventfd(r1, &(0x7f0000000200)=0x4, 0x8) socket(0x2, 0x80003, 0x3) openat$vcs(0xffffffffffffff9c, &(0x7f0000000400), 0x20000, 0x0) 20:46:28 executing program 3: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f0000000000)=""/148) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f00000000c0)=""/40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x10000, 0x0) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000140)=""/183) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x901, 0x0) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000280)=0x7) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x44002, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000300)=""/4096) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000001300), 0x101002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000001340)={'netpci0\x00'}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000001400), r0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x2c, r4, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x10001}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000024) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x17) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000001540)) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000001680)) 20:46:28 executing program 2: io_uring_enter(0xffffffffffffffff, 0x2d60, 0x28f3, 0x1, &(0x7f0000000000)={[0x1ff]}, 0x8) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000001300)=[{&(0x7f0000000040)=""/172, 0xac}, {&(0x7f0000000100)=""/212, 0xd4}, {&(0x7f0000000200)=""/116, 0x74}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/82, 0x52}], 0x5) r0 = io_uring_setup(0x4582, &(0x7f0000001380)={0x0, 0xb150, 0x8, 0x6, 0x38f}) r1 = syz_io_uring_setup(0x40, &(0x7f0000001400)={0x0, 0x108e, 0x1, 0x0, 0x1e, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001480), &(0x7f00000014c0)) ioprio_get$uid(0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001580)={'ip6_vti0\x00', &(0x7f0000001500)={'syztnl0\x00', 0x0, 0x29, 0x7f, 0x5, 0x81, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x7, 0xf5e, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000001640)={'syztnl1\x00', &(0x7f00000015c0)={'ip6_vti0\x00', r2, 0x4, 0x1, 0x0, 0x80000001, 0x40, @ipv4={'\x00', '\xff\xff', @local}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7800, 0x10, 0x4, 0x400000}}) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000016c0)='ns/uts\x00') sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001780)={&(0x7f0000001700)={0x6c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@GTPA_O_TEI={0x8}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r2}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_NET_NS_FD={0x8, 0x7, r3}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x41) r4 = syz_io_uring_setup(0x1382, &(0x7f0000001800)={0x0, 0x419b, 0x10, 0x0, 0x2f2, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000001880), &(0x7f00000018c0)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0) syz_io_uring_setup(0x4d2f, &(0x7f0000001900)={0x0, 0xacea, 0x10, 0x3, 0x5, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001980), &(0x7f00000019c0)) syz_genetlink_get_family_id$nbd(&(0x7f0000001a00), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r5, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x44, 0x0, 0x0, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @multicast2}}, @NLBL_MGMT_A_DOMAIN={0x14, 0x1, '^-[#\'@:/[@^*\\$&\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x8010}, 0x20000000) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_DSTOPTS(r6, 0x29, 0x3b, &(0x7f0000001bc0)={0xff}, 0x8) r7 = io_uring_setup(0x7d7f, &(0x7f0000001c00)={0x0, 0x6e7, 0x8, 0x1, 0x11a, 0x0, r0}) io_uring_setup(0x778d, &(0x7f0000001c80)={0x0, 0xf775, 0x10, 0x0, 0x3a8, 0x0, r7}) 20:46:28 executing program 5: ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x2f, 0x2, 0x9, 0x9b8c, 0x20, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x20, 0x1, 0xfff0000, 0x200}}) socketpair(0x28, 0xa, 0x5, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000100)=0x5, 0x4) socketpair(0x1e, 0x6, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r2) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, r3, 0x10, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7, 0x56}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x54}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6f}]}, 0x50}, 0x1, 0x0, 0x0, 0x801}, 0x8801) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000380), r1) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x3c, r4, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48c9ea108b1f44ee}, 0x800) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x18, 0x0, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x40040c0) socketpair(0x6, 0x4, 0x8001, &(0x7f00000005c0)={0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000580), r6) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 20:46:28 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_FAMILY={0x6}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0xc000) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000011c0), 0x18b000, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r2, &(0x7f0000001340)={&(0x7f0000001200), 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x70, 0x0, 0x28, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x21}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x31}, @NL80211_ATTR_PMKID={0x14, 0x55, "de6a7d645d6d49b3b5b65b5753264841"}, @NL80211_ATTR_SSID={0x5, 0x34, @random='C'}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x48}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@broadcast}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x38}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x2e}, @NL80211_ATTR_SSID={0x7, 0x34, @random="219d02"}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x4084) 20:46:28 executing program 7: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x29, 0x2, 0x9, 0x1000, 0x7f, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40, 0x1, 0xfffffff9, 0x3}}) socketpair(0x22, 0x3, 0x4e3, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r2, 0x89f6, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'ip6gre0\x00', r0, 0x4, 0xfc, 0x20, 0xffff, 0x30, @remote, @loopback, 0x40, 0x8020, 0x6a1a, 0xffff}}) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f00000001c0)=0x4, 0x4) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, 0x0, 0x28, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xff}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040002}, 0xc050) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000380)={'sit0\x00', &(0x7f0000000300)={'ip6gre0\x00', r3, 0x4, 0x7f, 0x5, 0x2, 0x8, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @loopback, 0x1, 0x1, 0x3, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r2, 0x89f4, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'ip6tnl0\x00', r4, 0x29, 0xfe, 0xf7, 0x7, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, 0x8000, 0x7, 0x7, 0x401}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000500)={'ip6tnl0\x00', &(0x7f0000000480)={'syztnl2\x00', r4, 0x29, 0x81, 0x8, 0x7, 0xa, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8, 0x8000, 0x20, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000005c0)={'ip6tnl0\x00', &(0x7f0000000540)={'syztnl0\x00', r5, 0x29, 0x0, 0x3f, 0x8000, 0x8, @remote, @local, 0x700, 0x48, 0x0, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000680)={'syztnl1\x00', &(0x7f0000000600)={'ip6gre0\x00', r3, 0x4, 0x7, 0x7, 0xffffffff, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x700, 0x7800, 0x9, 0x9}}) getsockopt$sock_int(r2, 0x1, 0x23, &(0x7f0000000780), &(0x7f00000007c0)=0x4) syz_genetlink_get_family_id$team(&(0x7f0000000ac0), 0xffffffffffffffff) 20:46:28 executing program 4: ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000080)=@req={0x28, &(0x7f0000000040)={'ip6tnl0\x00', @ifru_data=&(0x7f0000000000)="f17494704e68b47eaad8fb9da92ff99b5cce055ddc13dc72692e77db7acc710c"}}) r0 = syz_io_uring_setup(0x682e, &(0x7f00000000c0)={0x0, 0x61b0, 0x4, 0x1, 0x2d2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)) syz_io_uring_setup(0x6fa4, &(0x7f00000001c0)={0x0, 0x45b1, 0x20, 0x2, 0x62}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fef000/0xe000)=nil, &(0x7f0000000240), &(0x7f0000000280)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_SEND={0x1a, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)="b72d90afab83524e5a67d39021a498ec674b4d2ca9113ff899e0d0f9b83e4bf0e5c7aa9df47be19e9a203e183c82e8042b2828fee967fd5f214e5a80dad31344738967859ee7c7408a45a6d559e9a086f7e05e104e2a4f30aac4aa379c63d71cd8e1c3343a37e93d01bc888eb7592e29d80dfb0e02f86afd532c9d0cfaf2a42c924a791fd05dd6f753e129d61651f1de6a9f72994cbb6a582ac3531e36fe5fa6477b2b98f35e1dd5", 0xa8, 0x840, 0x1, {0x0, r3}}, 0xfffff516) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff2000/0x1000)=nil, 0x1000, 0x2000000, 0x10010, r0, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000480)=@buf={0xbf, &(0x7f00000003c0)="2b4d53922143fe2395390a2145533f7bdcdb30c3bf09285c2bf6fe927deea3a89f0dbabebefdfa91c21096b9dddcbfa0d039b15c68be2b65234ebc1b9b90bfbf785f6481eab0db2dc826e1f7c8e0b94ea9641466150b090811b54951baefc0cde8c67d871e2c5d0d431598e7ada503479215055a88cd67c2e709732acfb98dc78e48141083d9bf6983dec0dd4acf6c6382bec2eec2bf195d806f2955a8ce60b05fe65bff960999faad64df00c7588262a6320066f76791f5459f9d9de1749e"}) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [""]}, 0x14}}, 0x40881) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r4 = io_uring_setup(0x6033, &(0x7f00000005c0)={0x0, 0xacab, 0x4, 0x0, 0x1, 0x0, r0}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x2000000, 0x13, r4, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002580)=[{{&(0x7f0000000640)=@isdn, 0x80, &(0x7f0000000740)=[{&(0x7f00000006c0)=""/80, 0x50}], 0x1, &(0x7f0000000780)=""/80, 0x50}}, {{&(0x7f0000000800)=@generic, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000880)=""/215, 0xd7}, {&(0x7f0000000980)=""/145, 0x91}, {&(0x7f0000000a40)=""/187, 0xbb}], 0x3}, 0x2}, {{0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000000b40)=""/121, 0x79}, {&(0x7f0000000bc0)=""/162, 0xa2}, {&(0x7f0000000c80)=""/201, 0xc9}, {&(0x7f0000000d80)=""/19, 0x13}, {&(0x7f0000000dc0)=""/4096, 0x1000}, {&(0x7f0000001dc0)=""/206, 0xce}, {&(0x7f0000001ec0)=""/33, 0x21}, {&(0x7f0000001f00)=""/27, 0x1b}, {&(0x7f0000001f40)=""/239, 0xef}], 0x9, &(0x7f0000002100)=""/234, 0xea}, 0x2}, {{&(0x7f0000002200)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000002540)=[{&(0x7f0000002280)=""/195, 0xc3}, {&(0x7f0000002380)=""/229, 0xe5}, {&(0x7f0000002480)=""/167, 0xa7}], 0x3}, 0x800}], 0x4, 0x2000, &(0x7f0000002680)={0x0, 0x3938700}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x20010, r0, 0x0) r5 = syz_io_uring_setup(0x4170, &(0x7f0000002700)={0x0, 0xc7db, 0x52c9ea573c6af5bf, 0x1, 0x1af, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000002780), &(0x7f00000027c0)) r6 = syz_io_uring_setup(0x51c7, &(0x7f0000002800)={0x0, 0x5d6e, 0x0, 0x3, 0x38a, 0x0, r5}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000002880), &(0x7f00000028c0)) r7 = syz_io_uring_setup(0x3e47, &(0x7f0000002900)={0x0, 0x2baf, 0x4, 0x1, 0x62, 0x0, r6}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000002980), &(0x7f00000029c0)) syz_io_uring_setup(0x3a60, &(0x7f0000002a00)={0x0, 0x5114, 0x4, 0x3, 0xbc, 0x0, r7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000002a80), &(0x7f0000002ac0)) syz_genetlink_get_family_id$gtp(&(0x7f0000002b40), 0xffffffffffffffff) 20:46:28 executing program 0: r0 = getuid() r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TUNSETOWNER(r1, 0x400454cc, r0) ioprio_get$uid(0x0, r0) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000040)={'wg2\x00'}) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x1) r2 = syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x46d, 0xc101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x9, 0xa0, 0xfd, [{{0x9, 0x4, 0x0, 0xf9, 0x1, 0x3, 0x1, 0x0, 0x5, {0x9, 0x21, 0x7, 0x3f, 0x1, {0x22, 0xc46}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x4, 0x1f, 0x8}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0xe2, 0x3, 0x40}}]}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x10, 0x0, 0x1f, 0x20, 0x8}, 0x72, &(0x7f0000000100)={0x5, 0xf, 0x72, 0x4, [@wireless={0xb, 0x10, 0x1, 0x2, 0x0, 0x3, 0x5, 0x80, 0x80}, @generic={0x3f, 0x10, 0x1, "13eabcbedc7e85361568ba82957512f9fc3dc29c3335eacf761eb23847dd322ade415ab9dabe332209a130b7c151897613085a1787d6b6748b0354d0"}, @ssp_cap={0x18, 0x10, 0xa, 0x3f, 0x3, 0x1, 0xff0f, 0x9, [0x0, 0x3fc0, 0xc000]}, @wireless={0xb, 0x10, 0x1, 0x2, 0x40, 0x3e, 0xc7, 0xffff, 0x8}]}, 0x1, [{0xc7, &(0x7f0000000180)=@string={0xc7, 0x3, "7f126e6ffa050bba81edaf647a108d9fd37fbe3d11c15a3707477a6757d84b545a36669de4aa342241c88f7d526936f675209a74339730655071e3fcb25a208bbc069d6df4c07b4705d393a371da12cad8aaf6778ad74c8d58df24aaa77a7230a9f3628e71abaf0f819fdc49a07c577564df79e1300f987b6d6f0677e40fce2bb108a04a299c04e4bf6756185d8f38f7b15524ba0d91f7e2e25eec64a5523257550e35539b7efd2f71cc57e3428c7c38353ccfddec9577d5854e54703d3bf8b4132cd5932a"}}]}) syz_usb_ep_write(r2, 0x1f, 0x17, &(0x7f00000002c0)="18676c5fbcc850892fbc37961384e6dc244a9c136edf28") ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000300)=[0x9, 0x7]) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r3, 0x29, 0x2d, &(0x7f0000000340)={0x0, {{0xa, 0x4e20, 0x9, @mcast2, 0x83}}}, 0x88) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000400)=""/151) ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, &(0x7f00000004c0)=""/9) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000005c0)={'ip6_vti0\x00', &(0x7f0000000540)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0x8, 0x8000, 0x2e, @private0, @remote, 0x7800, 0x8, 0xb0b, 0x1ff}}) syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000840)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x46a, 0x23, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x7f, 0x60, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x8, {0x9, 0x21, 0x8, 0x3f, 0x1, {0x22, 0x4d6}}, {{{0x9, 0x5, 0x81, 0x3, 0x1af, 0x3, 0x0, 0x8}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x9, 0xad, 0x5a}}]}}}]}}]}}, &(0x7f0000000a80)={0xa, &(0x7f0000000880)={0xa, 0x6, 0x201, 0x8, 0x3f, 0x55, 0xff, 0x4}, 0x112, &(0x7f00000008c0)={0x5, 0xf, 0x112, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x0, 0x4, 0x5, 0xb4}, @generic={0xee, 0x10, 0x4, "d0031eae4efd237341c8a1bdb1418904fc37f74fdabfad1df4fe696990c75cc8518ee96883820f53592b5ba731abeef63833d04c5340b79bff983649da27141de3a17e7d857083f7f8c13daf1e65de8ff19e6a50698f4e1d7bd3e6c943f1e27efd3bd1764199faf293d79d65c7acb5cc89446d89f9b70b1497b481fbc6d8d97602a51e7dfcf1a3893bf6c45e2f44f0570480ac72d25d25c82f01b3d6ebaab63fb5a5f4fd0482bc1de2fb31178f6f3e72bac9d72289115497618203e4211f1f810b23a49c119d48fe0db66a3b71fa247b94f3c2f657e92dd120fe78a0c943d5d8b0930d89f099b08058e47b"}, @ssp_cap={0x14, 0x10, 0xa, 0xcd, 0x2, 0x0, 0x7800, 0x8, [0xfe8000, 0xff00]}]}, 0x2, [{0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x406}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0xf0ff}}]}) socket$inet6_udplite(0xa, 0x2, 0x88) 20:46:28 executing program 1: ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x102, 0x0) write$eventfd(r1, &(0x7f0000000200)=0x4, 0x8) socket(0x2, 0x80003, 0x3) openat$vcs(0xffffffffffffff9c, &(0x7f0000000400), 0x20000, 0x0) 20:46:28 executing program 3: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f0000000000)=""/148) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f00000000c0)=""/40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x10000, 0x0) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000140)=""/183) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x901, 0x0) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000280)=0x7) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x44002, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000300)=""/4096) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000001300), 0x101002, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000001400), r0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x2c, r3, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x10001}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000024) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x17) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000001540)) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000001680)) 20:46:28 executing program 6: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000011c0), 0x18b000, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000001340)={&(0x7f0000001200), 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x70, 0x0, 0x28, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x21}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x31}, @NL80211_ATTR_PMKID={0x14, 0x55, "de6a7d645d6d49b3b5b65b5753264841"}, @NL80211_ATTR_SSID={0x5, 0x34, @random='C'}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x48}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@broadcast}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x38}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x2e}, @NL80211_ATTR_SSID={0x7, 0x34, @random="219d02"}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x4084) 20:46:28 executing program 7: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x29, 0x2, 0x9, 0x1000, 0x7f, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40, 0x1, 0xfffffff9, 0x3}}) socketpair(0x22, 0x3, 0x4e3, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r2, 0x89f6, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'ip6gre0\x00', r0, 0x4, 0xfc, 0x20, 0xffff, 0x30, @remote, @loopback, 0x40, 0x8020, 0x6a1a, 0xffff}}) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f00000001c0)=0x4, 0x4) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, 0x0, 0x28, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xff}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040002}, 0xc050) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000380)={'sit0\x00', &(0x7f0000000300)={'ip6gre0\x00', r3, 0x4, 0x7f, 0x5, 0x2, 0x8, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @loopback, 0x1, 0x1, 0x3, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r2, 0x89f4, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'ip6tnl0\x00', r4, 0x29, 0xfe, 0xf7, 0x7, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, 0x8000, 0x7, 0x7, 0x401}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000500)={'ip6tnl0\x00', &(0x7f0000000480)={'syztnl2\x00', r4, 0x29, 0x81, 0x8, 0x7, 0xa, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8, 0x8000, 0x20, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000005c0)={'ip6tnl0\x00', &(0x7f0000000540)={'syztnl0\x00', r5, 0x29, 0x0, 0x3f, 0x8000, 0x8, @remote, @local, 0x700, 0x48, 0x0, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000680)={'syztnl1\x00', &(0x7f0000000600)={'ip6gre0\x00', r3, 0x4, 0x7, 0x7, 0xffffffff, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x700, 0x7800, 0x9, 0x9}}) getsockopt$sock_int(r2, 0x1, 0x23, &(0x7f0000000780), &(0x7f00000007c0)=0x4) syz_genetlink_get_family_id$team(&(0x7f0000000ac0), 0xffffffffffffffff) 20:46:29 executing program 1: ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x102, 0x0) write$eventfd(r1, &(0x7f0000000200)=0x4, 0x8) socket(0x2, 0x80003, 0x3) openat$vcs(0xffffffffffffff9c, &(0x7f0000000400), 0x20000, 0x0) 20:46:29 executing program 4: ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000080)=@req={0x28, &(0x7f0000000040)={'ip6tnl0\x00', @ifru_data=&(0x7f0000000000)="f17494704e68b47eaad8fb9da92ff99b5cce055ddc13dc72692e77db7acc710c"}}) r0 = syz_io_uring_setup(0x682e, &(0x7f00000000c0)={0x0, 0x61b0, 0x4, 0x1, 0x2d2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)) syz_io_uring_setup(0x6fa4, &(0x7f00000001c0)={0x0, 0x45b1, 0x20, 0x2, 0x62}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fef000/0xe000)=nil, &(0x7f0000000240), &(0x7f0000000280)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_SEND={0x1a, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)="b72d90afab83524e5a67d39021a498ec674b4d2ca9113ff899e0d0f9b83e4bf0e5c7aa9df47be19e9a203e183c82e8042b2828fee967fd5f214e5a80dad31344738967859ee7c7408a45a6d559e9a086f7e05e104e2a4f30aac4aa379c63d71cd8e1c3343a37e93d01bc888eb7592e29d80dfb0e02f86afd532c9d0cfaf2a42c924a791fd05dd6f753e129d61651f1de6a9f72994cbb6a582ac3531e36fe5fa6477b2b98f35e1dd5", 0xa8, 0x840, 0x1, {0x0, r3}}, 0xfffff516) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff2000/0x1000)=nil, 0x1000, 0x2000000, 0x10010, r0, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000480)=@buf={0xbf, &(0x7f00000003c0)="2b4d53922143fe2395390a2145533f7bdcdb30c3bf09285c2bf6fe927deea3a89f0dbabebefdfa91c21096b9dddcbfa0d039b15c68be2b65234ebc1b9b90bfbf785f6481eab0db2dc826e1f7c8e0b94ea9641466150b090811b54951baefc0cde8c67d871e2c5d0d431598e7ada503479215055a88cd67c2e709732acfb98dc78e48141083d9bf6983dec0dd4acf6c6382bec2eec2bf195d806f2955a8ce60b05fe65bff960999faad64df00c7588262a6320066f76791f5459f9d9de1749e"}) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [""]}, 0x14}}, 0x40881) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r4 = io_uring_setup(0x6033, &(0x7f00000005c0)={0x0, 0xacab, 0x4, 0x0, 0x1, 0x0, r0}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x2000000, 0x13, r4, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002580)=[{{&(0x7f0000000640)=@isdn, 0x80, &(0x7f0000000740)=[{&(0x7f00000006c0)=""/80, 0x50}], 0x1, &(0x7f0000000780)=""/80, 0x50}}, {{&(0x7f0000000800)=@generic, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000880)=""/215, 0xd7}, {&(0x7f0000000980)=""/145, 0x91}, {&(0x7f0000000a40)=""/187, 0xbb}], 0x3}, 0x2}, {{0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000000b40)=""/121, 0x79}, {&(0x7f0000000bc0)=""/162, 0xa2}, {&(0x7f0000000c80)=""/201, 0xc9}, {&(0x7f0000000d80)=""/19, 0x13}, {&(0x7f0000000dc0)=""/4096, 0x1000}, {&(0x7f0000001dc0)=""/206, 0xce}, {&(0x7f0000001ec0)=""/33, 0x21}, {&(0x7f0000001f00)=""/27, 0x1b}, {&(0x7f0000001f40)=""/239, 0xef}], 0x9, &(0x7f0000002100)=""/234, 0xea}, 0x2}, {{&(0x7f0000002200)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000002540)=[{&(0x7f0000002280)=""/195, 0xc3}, {&(0x7f0000002380)=""/229, 0xe5}, {&(0x7f0000002480)=""/167, 0xa7}], 0x3}, 0x800}], 0x4, 0x2000, &(0x7f0000002680)={0x0, 0x3938700}) r5 = syz_io_uring_setup(0x4170, &(0x7f0000002700)={0x0, 0xc7db, 0x52c9ea573c6af5bf, 0x1, 0x1af, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000002780), &(0x7f00000027c0)) r6 = syz_io_uring_setup(0x51c7, &(0x7f0000002800)={0x0, 0x5d6e, 0x0, 0x3, 0x38a, 0x0, r5}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000002880), &(0x7f00000028c0)) r7 = syz_io_uring_setup(0x3e47, &(0x7f0000002900)={0x0, 0x2baf, 0x4, 0x1, 0x62, 0x0, r6}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000002980), &(0x7f00000029c0)) syz_io_uring_setup(0x3a60, &(0x7f0000002a00)={0x0, 0x5114, 0x4, 0x3, 0xbc, 0x0, r7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000002a80), &(0x7f0000002ac0)) syz_genetlink_get_family_id$gtp(&(0x7f0000002b40), 0xffffffffffffffff) 20:46:29 executing program 3: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f0000000000)=""/148) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f00000000c0)=""/40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x10000, 0x0) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000140)=""/183) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x901, 0x0) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000280)=0x7) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x44002, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000300)=""/4096) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000001400), r0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x2c, r3, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x10001}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000024) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x17) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000001540)) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000001680)) 20:46:29 executing program 2: io_uring_enter(0xffffffffffffffff, 0x2d60, 0x28f3, 0x1, &(0x7f0000000000)={[0x1ff]}, 0x8) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000001300)=[{&(0x7f0000000040)=""/172, 0xac}, {&(0x7f0000000100)=""/212, 0xd4}, {&(0x7f0000000200)=""/116, 0x74}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/82, 0x52}], 0x5) r0 = io_uring_setup(0x4582, &(0x7f0000001380)={0x0, 0xb150, 0x8, 0x6, 0x38f}) r1 = syz_io_uring_setup(0x40, &(0x7f0000001400)={0x0, 0x108e, 0x1, 0x0, 0x1e, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001480), &(0x7f00000014c0)) ioprio_get$uid(0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001580)={'ip6_vti0\x00', &(0x7f0000001500)={'syztnl0\x00', 0x0, 0x29, 0x7f, 0x5, 0x81, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x7, 0xf5e, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000001640)={'syztnl1\x00', &(0x7f00000015c0)={'ip6_vti0\x00', r2, 0x4, 0x1, 0x0, 0x80000001, 0x40, @ipv4={'\x00', '\xff\xff', @local}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7800, 0x10, 0x4, 0x400000}}) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000016c0)='ns/uts\x00') sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001780)={&(0x7f0000001700)={0x6c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@GTPA_O_TEI={0x8}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r2}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_NET_NS_FD={0x8, 0x7, r3}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x41) r4 = syz_io_uring_setup(0x1382, &(0x7f0000001800)={0x0, 0x419b, 0x10, 0x0, 0x2f2, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000001880), &(0x7f00000018c0)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0) syz_io_uring_setup(0x4d2f, &(0x7f0000001900)={0x0, 0xacea, 0x10, 0x3, 0x5, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001980), &(0x7f00000019c0)) syz_genetlink_get_family_id$nbd(&(0x7f0000001a00), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r5, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x44, 0x0, 0x0, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @multicast2}}, @NLBL_MGMT_A_DOMAIN={0x14, 0x1, '^-[#\'@:/[@^*\\$&\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x8010}, 0x20000000) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_DSTOPTS(r6, 0x29, 0x3b, &(0x7f0000001bc0)={0xff}, 0x8) r7 = io_uring_setup(0x7d7f, &(0x7f0000001c00)={0x0, 0x6e7, 0x8, 0x1, 0x11a, 0x0, r0}) io_uring_setup(0x778d, &(0x7f0000001c80)={0x0, 0xf775, 0x10, 0x0, 0x3a8, 0x0, r7}) 20:46:37 executing program 3: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f0000000000)=""/148) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f00000000c0)=""/40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x10000, 0x0) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000140)=""/183) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x901, 0x0) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000280)=0x7) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x44002, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000300)=""/4096) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000001400), r0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x2c, r3, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x10001}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000024) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x17) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000001540)) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000001680)) 20:46:37 executing program 7: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x29, 0x2, 0x9, 0x1000, 0x7f, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40, 0x1, 0xfffffff9, 0x3}}) socketpair(0x22, 0x3, 0x4e3, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r2, 0x89f6, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'ip6gre0\x00', r0, 0x4, 0xfc, 0x20, 0xffff, 0x30, @remote, @loopback, 0x40, 0x8020, 0x6a1a, 0xffff}}) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f00000001c0)=0x4, 0x4) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, 0x0, 0x28, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xff}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040002}, 0xc050) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000380)={'sit0\x00', &(0x7f0000000300)={'ip6gre0\x00', r3, 0x4, 0x7f, 0x5, 0x2, 0x8, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @loopback, 0x1, 0x1, 0x3, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r2, 0x89f4, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'ip6tnl0\x00', r4, 0x29, 0xfe, 0xf7, 0x7, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, 0x8000, 0x7, 0x7, 0x401}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000500)={'ip6tnl0\x00', &(0x7f0000000480)={'syztnl2\x00', r4, 0x29, 0x81, 0x8, 0x7, 0xa, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8, 0x8000, 0x20, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000005c0)={'ip6tnl0\x00', &(0x7f0000000540)={'syztnl0\x00', r5, 0x29, 0x0, 0x3f, 0x8000, 0x8, @remote, @local, 0x700, 0x48, 0x0, 0x5}}) getsockopt$sock_int(r2, 0x1, 0x23, &(0x7f0000000780), &(0x7f00000007c0)=0x4) syz_genetlink_get_family_id$team(&(0x7f0000000ac0), 0xffffffffffffffff) 20:46:37 executing program 0: r0 = getuid() r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TUNSETOWNER(r1, 0x400454cc, r0) ioprio_get$uid(0x0, r0) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000040)={'wg2\x00'}) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x1) r2 = syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x46d, 0xc101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x9, 0xa0, 0xfd, [{{0x9, 0x4, 0x0, 0xf9, 0x1, 0x3, 0x1, 0x0, 0x5, {0x9, 0x21, 0x7, 0x3f, 0x1, {0x22, 0xc46}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x4, 0x1f, 0x8}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0xe2, 0x3, 0x40}}]}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x10, 0x0, 0x1f, 0x20, 0x8}, 0x72, &(0x7f0000000100)={0x5, 0xf, 0x72, 0x4, [@wireless={0xb, 0x10, 0x1, 0x2, 0x0, 0x3, 0x5, 0x80, 0x80}, @generic={0x3f, 0x10, 0x1, "13eabcbedc7e85361568ba82957512f9fc3dc29c3335eacf761eb23847dd322ade415ab9dabe332209a130b7c151897613085a1787d6b6748b0354d0"}, @ssp_cap={0x18, 0x10, 0xa, 0x3f, 0x3, 0x1, 0xff0f, 0x9, [0x0, 0x3fc0, 0xc000]}, @wireless={0xb, 0x10, 0x1, 0x2, 0x40, 0x3e, 0xc7, 0xffff, 0x8}]}, 0x1, [{0xc7, &(0x7f0000000180)=@string={0xc7, 0x3, "7f126e6ffa050bba81edaf647a108d9fd37fbe3d11c15a3707477a6757d84b545a36669de4aa342241c88f7d526936f675209a74339730655071e3fcb25a208bbc069d6df4c07b4705d393a371da12cad8aaf6778ad74c8d58df24aaa77a7230a9f3628e71abaf0f819fdc49a07c577564df79e1300f987b6d6f0677e40fce2bb108a04a299c04e4bf6756185d8f38f7b15524ba0d91f7e2e25eec64a5523257550e35539b7efd2f71cc57e3428c7c38353ccfddec9577d5854e54703d3bf8b4132cd5932a"}}]}) syz_usb_ep_write(r2, 0x1f, 0x17, &(0x7f00000002c0)="18676c5fbcc850892fbc37961384e6dc244a9c136edf28") ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000300)=[0x9, 0x7]) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r3, 0x29, 0x2d, &(0x7f0000000340)={0x0, {{0xa, 0x4e20, 0x9, @mcast2, 0x83}}}, 0x88) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000400)=""/151) ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, &(0x7f00000004c0)=""/9) syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000840)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x46a, 0x23, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x7f, 0x60, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x8, {0x9, 0x21, 0x8, 0x3f, 0x1, {0x22, 0x4d6}}, {{{0x9, 0x5, 0x81, 0x3, 0x1af, 0x3, 0x0, 0x8}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x9, 0xad, 0x5a}}]}}}]}}]}}, &(0x7f0000000a80)={0xa, &(0x7f0000000880)={0xa, 0x6, 0x201, 0x8, 0x3f, 0x55, 0xff, 0x4}, 0x112, &(0x7f00000008c0)={0x5, 0xf, 0x112, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x0, 0x4, 0x5, 0xb4}, @generic={0xee, 0x10, 0x4, "d0031eae4efd237341c8a1bdb1418904fc37f74fdabfad1df4fe696990c75cc8518ee96883820f53592b5ba731abeef63833d04c5340b79bff983649da27141de3a17e7d857083f7f8c13daf1e65de8ff19e6a50698f4e1d7bd3e6c943f1e27efd3bd1764199faf293d79d65c7acb5cc89446d89f9b70b1497b481fbc6d8d97602a51e7dfcf1a3893bf6c45e2f44f0570480ac72d25d25c82f01b3d6ebaab63fb5a5f4fd0482bc1de2fb31178f6f3e72bac9d72289115497618203e4211f1f810b23a49c119d48fe0db66a3b71fa247b94f3c2f657e92dd120fe78a0c943d5d8b0930d89f099b08058e47b"}, @ssp_cap={0x14, 0x10, 0xa, 0xcd, 0x2, 0x0, 0x7800, 0x8, [0xfe8000, 0xff00]}]}, 0x2, [{0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x406}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0xf0ff}}]}) socket$inet6_udplite(0xa, 0x2, 0x88) 20:46:37 executing program 4: ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000080)=@req={0x28, &(0x7f0000000040)={'ip6tnl0\x00', @ifru_data=&(0x7f0000000000)="f17494704e68b47eaad8fb9da92ff99b5cce055ddc13dc72692e77db7acc710c"}}) r0 = syz_io_uring_setup(0x682e, &(0x7f00000000c0)={0x0, 0x61b0, 0x4, 0x1, 0x2d2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)) syz_io_uring_setup(0x6fa4, &(0x7f00000001c0)={0x0, 0x45b1, 0x20, 0x2, 0x62}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fef000/0xe000)=nil, &(0x7f0000000240), &(0x7f0000000280)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_SEND={0x1a, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)="b72d90afab83524e5a67d39021a498ec674b4d2ca9113ff899e0d0f9b83e4bf0e5c7aa9df47be19e9a203e183c82e8042b2828fee967fd5f214e5a80dad31344738967859ee7c7408a45a6d559e9a086f7e05e104e2a4f30aac4aa379c63d71cd8e1c3343a37e93d01bc888eb7592e29d80dfb0e02f86afd532c9d0cfaf2a42c924a791fd05dd6f753e129d61651f1de6a9f72994cbb6a582ac3531e36fe5fa6477b2b98f35e1dd5", 0xa8, 0x840, 0x1, {0x0, r3}}, 0xfffff516) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff2000/0x1000)=nil, 0x1000, 0x2000000, 0x10010, r0, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000480)=@buf={0xbf, &(0x7f00000003c0)="2b4d53922143fe2395390a2145533f7bdcdb30c3bf09285c2bf6fe927deea3a89f0dbabebefdfa91c21096b9dddcbfa0d039b15c68be2b65234ebc1b9b90bfbf785f6481eab0db2dc826e1f7c8e0b94ea9641466150b090811b54951baefc0cde8c67d871e2c5d0d431598e7ada503479215055a88cd67c2e709732acfb98dc78e48141083d9bf6983dec0dd4acf6c6382bec2eec2bf195d806f2955a8ce60b05fe65bff960999faad64df00c7588262a6320066f76791f5459f9d9de1749e"}) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [""]}, 0x14}}, 0x40881) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r4 = io_uring_setup(0x6033, &(0x7f00000005c0)={0x0, 0xacab, 0x4, 0x0, 0x1, 0x0, r0}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x2000000, 0x13, r4, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002580)=[{{&(0x7f0000000640)=@isdn, 0x80, &(0x7f0000000740)=[{&(0x7f00000006c0)=""/80, 0x50}], 0x1, &(0x7f0000000780)=""/80, 0x50}}, {{&(0x7f0000000800)=@generic, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000880)=""/215, 0xd7}, {&(0x7f0000000980)=""/145, 0x91}, {&(0x7f0000000a40)=""/187, 0xbb}], 0x3}, 0x2}, {{0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000000b40)=""/121, 0x79}, {&(0x7f0000000bc0)=""/162, 0xa2}, {&(0x7f0000000c80)=""/201, 0xc9}, {&(0x7f0000000d80)=""/19, 0x13}, {&(0x7f0000000dc0)=""/4096, 0x1000}, {&(0x7f0000001dc0)=""/206, 0xce}, {&(0x7f0000001ec0)=""/33, 0x21}, {&(0x7f0000001f00)=""/27, 0x1b}, {&(0x7f0000001f40)=""/239, 0xef}], 0x9, &(0x7f0000002100)=""/234, 0xea}, 0x2}, {{&(0x7f0000002200)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000002540)=[{&(0x7f0000002280)=""/195, 0xc3}, {&(0x7f0000002380)=""/229, 0xe5}, {&(0x7f0000002480)=""/167, 0xa7}], 0x3}, 0x800}], 0x4, 0x2000, &(0x7f0000002680)={0x0, 0x3938700}) r5 = syz_io_uring_setup(0x4170, &(0x7f0000002700)={0x0, 0xc7db, 0x52c9ea573c6af5bf, 0x1, 0x1af, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000002780), &(0x7f00000027c0)) r6 = syz_io_uring_setup(0x51c7, &(0x7f0000002800)={0x0, 0x5d6e, 0x0, 0x3, 0x38a, 0x0, r5}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000002880), &(0x7f00000028c0)) r7 = syz_io_uring_setup(0x3e47, &(0x7f0000002900)={0x0, 0x2baf, 0x4, 0x1, 0x62, 0x0, r6}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000002980), &(0x7f00000029c0)) syz_io_uring_setup(0x3a60, &(0x7f0000002a00)={0x0, 0x5114, 0x4, 0x3, 0xbc, 0x0, r7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000002a80), &(0x7f0000002ac0)) syz_genetlink_get_family_id$gtp(&(0x7f0000002b40), 0xffffffffffffffff) 20:46:37 executing program 1: ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x102, 0x0) write$eventfd(r1, &(0x7f0000000200)=0x4, 0x8) socket(0x2, 0x80003, 0x3) openat$vcs(0xffffffffffffff9c, &(0x7f0000000400), 0x20000, 0x0) 20:46:37 executing program 5: ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x2f, 0x2, 0x9, 0x9b8c, 0x20, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x20, 0x1, 0xfff0000, 0x200}}) socketpair(0x28, 0xa, 0x5, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000100)=0x5, 0x4) socketpair(0x1e, 0x6, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r2) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, r3, 0x10, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7, 0x56}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x54}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6f}]}, 0x50}, 0x1, 0x0, 0x0, 0x801}, 0x8801) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000380), r1) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x3c, r4, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48c9ea108b1f44ee}, 0x800) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x18, 0x0, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x40040c0) socketpair(0x6, 0x4, 0x8001, &(0x7f00000005c0)={0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000580), r6) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 20:46:37 executing program 2: io_uring_enter(0xffffffffffffffff, 0x2d60, 0x28f3, 0x1, &(0x7f0000000000)={[0x1ff]}, 0x8) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000001300)=[{&(0x7f0000000040)=""/172, 0xac}, {&(0x7f0000000100)=""/212, 0xd4}, {&(0x7f0000000200)=""/116, 0x74}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/82, 0x52}], 0x5) r0 = io_uring_setup(0x4582, &(0x7f0000001380)={0x0, 0xb150, 0x8, 0x6, 0x38f}) r1 = syz_io_uring_setup(0x40, &(0x7f0000001400)={0x0, 0x108e, 0x1, 0x0, 0x1e, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001480), &(0x7f00000014c0)) ioprio_get$uid(0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001580)={'ip6_vti0\x00', &(0x7f0000001500)={'syztnl0\x00', 0x0, 0x29, 0x7f, 0x5, 0x81, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x7, 0xf5e, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000001640)={'syztnl1\x00', &(0x7f00000015c0)={'ip6_vti0\x00', r2, 0x4, 0x1, 0x0, 0x80000001, 0x40, @ipv4={'\x00', '\xff\xff', @local}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7800, 0x10, 0x4, 0x400000}}) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000016c0)='ns/uts\x00') sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001780)={&(0x7f0000001700)={0x6c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@GTPA_O_TEI={0x8}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r2}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_NET_NS_FD={0x8, 0x7, r3}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x41) r4 = syz_io_uring_setup(0x1382, &(0x7f0000001800)={0x0, 0x419b, 0x10, 0x0, 0x2f2, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000001880), &(0x7f00000018c0)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0) syz_io_uring_setup(0x4d2f, &(0x7f0000001900)={0x0, 0xacea, 0x10, 0x3, 0x5, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001980), &(0x7f00000019c0)) syz_genetlink_get_family_id$nbd(&(0x7f0000001a00), 0xffffffffffffffff) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001a80), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x44, r5, 0x0, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @multicast2}}, @NLBL_MGMT_A_DOMAIN={0x14, 0x1, '^-[#\'@:/[@^*\\$&\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x8010}, 0x20000000) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_DSTOPTS(r6, 0x29, 0x3b, &(0x7f0000001bc0)={0xff}, 0x8) r7 = io_uring_setup(0x7d7f, &(0x7f0000001c00)={0x0, 0x6e7, 0x8, 0x1, 0x11a, 0x0, r0}) io_uring_setup(0x778d, &(0x7f0000001c80)={0x0, 0xf775, 0x10, 0x0, 0x3a8, 0x0, r7}) 20:46:37 executing program 6: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000011c0), 0x18b000, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000001340)={&(0x7f0000001200), 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x70, 0x0, 0x28, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x21}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x31}, @NL80211_ATTR_PMKID={0x14, 0x55, "de6a7d645d6d49b3b5b65b5753264841"}, @NL80211_ATTR_SSID={0x5, 0x34, @random='C'}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x48}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@broadcast}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x38}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x2e}, @NL80211_ATTR_SSID={0x7, 0x34, @random="219d02"}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x4084) 20:46:37 executing program 6: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000011c0), 0x18b000, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000001340)={&(0x7f0000001200), 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x70, 0x0, 0x28, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x21}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x31}, @NL80211_ATTR_PMKID={0x14, 0x55, "de6a7d645d6d49b3b5b65b5753264841"}, @NL80211_ATTR_SSID={0x5, 0x34, @random='C'}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x48}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@broadcast}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x38}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x2e}, @NL80211_ATTR_SSID={0x7, 0x34, @random="219d02"}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x4084) 20:46:37 executing program 1: ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x102, 0x0) write$eventfd(r1, &(0x7f0000000200)=0x4, 0x8) socket(0x2, 0x80003, 0x3) openat$vcs(0xffffffffffffff9c, &(0x7f0000000400), 0x20000, 0x0) 20:46:37 executing program 4: ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000080)=@req={0x28, &(0x7f0000000040)={'ip6tnl0\x00', @ifru_data=&(0x7f0000000000)="f17494704e68b47eaad8fb9da92ff99b5cce055ddc13dc72692e77db7acc710c"}}) r0 = syz_io_uring_setup(0x682e, &(0x7f00000000c0)={0x0, 0x61b0, 0x4, 0x1, 0x2d2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)) syz_io_uring_setup(0x6fa4, &(0x7f00000001c0)={0x0, 0x45b1, 0x20, 0x2, 0x62}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fef000/0xe000)=nil, &(0x7f0000000240), &(0x7f0000000280)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_SEND={0x1a, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)="b72d90afab83524e5a67d39021a498ec674b4d2ca9113ff899e0d0f9b83e4bf0e5c7aa9df47be19e9a203e183c82e8042b2828fee967fd5f214e5a80dad31344738967859ee7c7408a45a6d559e9a086f7e05e104e2a4f30aac4aa379c63d71cd8e1c3343a37e93d01bc888eb7592e29d80dfb0e02f86afd532c9d0cfaf2a42c924a791fd05dd6f753e129d61651f1de6a9f72994cbb6a582ac3531e36fe5fa6477b2b98f35e1dd5", 0xa8, 0x840, 0x1, {0x0, r3}}, 0xfffff516) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff2000/0x1000)=nil, 0x1000, 0x2000000, 0x10010, r0, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000480)=@buf={0xbf, &(0x7f00000003c0)="2b4d53922143fe2395390a2145533f7bdcdb30c3bf09285c2bf6fe927deea3a89f0dbabebefdfa91c21096b9dddcbfa0d039b15c68be2b65234ebc1b9b90bfbf785f6481eab0db2dc826e1f7c8e0b94ea9641466150b090811b54951baefc0cde8c67d871e2c5d0d431598e7ada503479215055a88cd67c2e709732acfb98dc78e48141083d9bf6983dec0dd4acf6c6382bec2eec2bf195d806f2955a8ce60b05fe65bff960999faad64df00c7588262a6320066f76791f5459f9d9de1749e"}) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [""]}, 0x14}}, 0x40881) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r4 = io_uring_setup(0x6033, &(0x7f00000005c0)={0x0, 0xacab, 0x4, 0x0, 0x1, 0x0, r0}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x2000000, 0x13, r4, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002580)=[{{&(0x7f0000000640)=@isdn, 0x80, &(0x7f0000000740)=[{&(0x7f00000006c0)=""/80, 0x50}], 0x1, &(0x7f0000000780)=""/80, 0x50}}, {{&(0x7f0000000800)=@generic, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000880)=""/215, 0xd7}, {&(0x7f0000000980)=""/145, 0x91}, {&(0x7f0000000a40)=""/187, 0xbb}], 0x3}, 0x2}, {{0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000000b40)=""/121, 0x79}, {&(0x7f0000000bc0)=""/162, 0xa2}, {&(0x7f0000000c80)=""/201, 0xc9}, {&(0x7f0000000d80)=""/19, 0x13}, {&(0x7f0000000dc0)=""/4096, 0x1000}, {&(0x7f0000001dc0)=""/206, 0xce}, {&(0x7f0000001ec0)=""/33, 0x21}, {&(0x7f0000001f00)=""/27, 0x1b}, {&(0x7f0000001f40)=""/239, 0xef}], 0x9, &(0x7f0000002100)=""/234, 0xea}, 0x2}, {{&(0x7f0000002200)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000002540)=[{&(0x7f0000002280)=""/195, 0xc3}, {&(0x7f0000002380)=""/229, 0xe5}, {&(0x7f0000002480)=""/167, 0xa7}], 0x3}, 0x800}], 0x4, 0x2000, &(0x7f0000002680)={0x0, 0x3938700}) r5 = syz_io_uring_setup(0x4170, &(0x7f0000002700)={0x0, 0xc7db, 0x52c9ea573c6af5bf, 0x1, 0x1af, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000002780), &(0x7f00000027c0)) r6 = syz_io_uring_setup(0x51c7, &(0x7f0000002800)={0x0, 0x5d6e, 0x0, 0x3, 0x38a, 0x0, r5}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000002880), &(0x7f00000028c0)) r7 = syz_io_uring_setup(0x3e47, &(0x7f0000002900)={0x0, 0x2baf, 0x4, 0x1, 0x62, 0x0, r6}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000002980), &(0x7f00000029c0)) syz_io_uring_setup(0x3a60, &(0x7f0000002a00)={0x0, 0x5114, 0x4, 0x3, 0xbc, 0x0, r7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000002a80), &(0x7f0000002ac0)) syz_genetlink_get_family_id$gtp(&(0x7f0000002b40), 0xffffffffffffffff) 20:46:37 executing program 3: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f0000000000)=""/148) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f00000000c0)=""/40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x10000, 0x0) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000140)=""/183) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x901, 0x0) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000280)=0x7) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x44002, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000300)=""/4096) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000001400), r0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x2c, r3, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x10001}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000024) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x17) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000001540)) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000001680)) 20:46:37 executing program 6: r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x18b000, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000001340)={&(0x7f0000001200), 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x70, 0x0, 0x28, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x21}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x31}, @NL80211_ATTR_PMKID={0x14, 0x55, "de6a7d645d6d49b3b5b65b5753264841"}, @NL80211_ATTR_SSID={0x5, 0x34, @random='C'}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x48}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@broadcast}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x38}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x2e}, @NL80211_ATTR_SSID={0x7, 0x34, @random="219d02"}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x4084) 20:46:37 executing program 7: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x29, 0x2, 0x9, 0x1000, 0x7f, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40, 0x1, 0xfffffff9, 0x3}}) socketpair(0x22, 0x3, 0x4e3, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r2, 0x89f6, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'ip6gre0\x00', r0, 0x4, 0xfc, 0x20, 0xffff, 0x30, @remote, @loopback, 0x40, 0x8020, 0x6a1a, 0xffff}}) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f00000001c0)=0x4, 0x4) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, 0x0, 0x28, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xff}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040002}, 0xc050) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000380)={'sit0\x00', &(0x7f0000000300)={'ip6gre0\x00', r3, 0x4, 0x7f, 0x5, 0x2, 0x8, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @loopback, 0x1, 0x1, 0x3, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r2, 0x89f4, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'ip6tnl0\x00', r4, 0x29, 0xfe, 0xf7, 0x7, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, 0x8000, 0x7, 0x7, 0x401}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000500)={'ip6tnl0\x00', &(0x7f0000000480)={'syztnl2\x00', r4, 0x29, 0x81, 0x8, 0x7, 0xa, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8, 0x8000, 0x20, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000005c0)={'ip6tnl0\x00', &(0x7f0000000540)={'syztnl0\x00', r5, 0x29, 0x0, 0x3f, 0x8000, 0x8, @remote, @local, 0x700, 0x48, 0x0, 0x5}}) getsockopt$sock_int(r2, 0x1, 0x23, &(0x7f0000000780), &(0x7f00000007c0)=0x4) syz_genetlink_get_family_id$team(&(0x7f0000000ac0), 0xffffffffffffffff) 20:46:38 executing program 1: ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x102, 0x0) write$eventfd(r0, &(0x7f0000000200)=0x4, 0x8) socket(0x2, 0x80003, 0x3) openat$vcs(0xffffffffffffff9c, &(0x7f0000000400), 0x20000, 0x0) 20:46:38 executing program 2: io_uring_enter(0xffffffffffffffff, 0x2d60, 0x28f3, 0x1, &(0x7f0000000000)={[0x1ff]}, 0x8) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000001300)=[{&(0x7f0000000040)=""/172, 0xac}, {&(0x7f0000000100)=""/212, 0xd4}, {&(0x7f0000000200)=""/116, 0x74}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/82, 0x52}], 0x5) r0 = io_uring_setup(0x4582, &(0x7f0000001380)={0x0, 0xb150, 0x8, 0x6, 0x38f}) r1 = syz_io_uring_setup(0x40, &(0x7f0000001400)={0x0, 0x108e, 0x1, 0x0, 0x1e, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001480), &(0x7f00000014c0)) ioprio_get$uid(0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001580)={'ip6_vti0\x00', &(0x7f0000001500)={'syztnl0\x00', 0x0, 0x29, 0x7f, 0x5, 0x81, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x7, 0xf5e, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000001640)={'syztnl1\x00', &(0x7f00000015c0)={'ip6_vti0\x00', r2, 0x4, 0x1, 0x0, 0x80000001, 0x40, @ipv4={'\x00', '\xff\xff', @local}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7800, 0x10, 0x4, 0x400000}}) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000016c0)='ns/uts\x00') sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001780)={&(0x7f0000001700)={0x6c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@GTPA_O_TEI={0x8}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r2}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_NET_NS_FD={0x8, 0x7, r3}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x41) r4 = syz_io_uring_setup(0x1382, &(0x7f0000001800)={0x0, 0x419b, 0x10, 0x0, 0x2f2, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000001880), &(0x7f00000018c0)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0) syz_io_uring_setup(0x4d2f, &(0x7f0000001900)={0x0, 0xacea, 0x10, 0x3, 0x5, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001980), &(0x7f00000019c0)) syz_genetlink_get_family_id$nbd(&(0x7f0000001a00), 0xffffffffffffffff) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001a80), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x44, r5, 0x0, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @multicast2}}, @NLBL_MGMT_A_DOMAIN={0x14, 0x1, '^-[#\'@:/[@^*\\$&\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x8010}, 0x20000000) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_DSTOPTS(r6, 0x29, 0x3b, &(0x7f0000001bc0)={0xff}, 0x8) r7 = io_uring_setup(0x7d7f, &(0x7f0000001c00)={0x0, 0x6e7, 0x8, 0x1, 0x11a, 0x0, r0}) io_uring_setup(0x778d, &(0x7f0000001c80)={0x0, 0xf775, 0x10, 0x0, 0x3a8, 0x0, r7}) 20:46:38 executing program 6: r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x18b000, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000001340)={&(0x7f0000001200), 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x70, 0x0, 0x28, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x21}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x31}, @NL80211_ATTR_PMKID={0x14, 0x55, "de6a7d645d6d49b3b5b65b5753264841"}, @NL80211_ATTR_SSID={0x5, 0x34, @random='C'}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x48}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@broadcast}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x38}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x2e}, @NL80211_ATTR_SSID={0x7, 0x34, @random="219d02"}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x4084) 20:46:38 executing program 5: ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x2f, 0x2, 0x9, 0x9b8c, 0x20, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x20, 0x1, 0xfff0000, 0x200}}) socketpair(0x28, 0xa, 0x5, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000100)=0x5, 0x4) socketpair(0x1e, 0x6, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r2) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, r3, 0x10, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7, 0x56}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x54}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6f}]}, 0x50}, 0x1, 0x0, 0x0, 0x801}, 0x8801) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000380), r1) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x3c, r4, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48c9ea108b1f44ee}, 0x800) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x18, 0x0, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x40040c0) socketpair(0x6, 0x4, 0x8001, &(0x7f00000005c0)={0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000580), r6) socket$inet6(0xa, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 20:46:38 executing program 0: r0 = getuid() r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TUNSETOWNER(r1, 0x400454cc, r0) ioprio_get$uid(0x0, r0) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000040)={'wg2\x00'}) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x1) r2 = syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x46d, 0xc101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x9, 0xa0, 0xfd, [{{0x9, 0x4, 0x0, 0xf9, 0x1, 0x3, 0x1, 0x0, 0x5, {0x9, 0x21, 0x7, 0x3f, 0x1, {0x22, 0xc46}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x4, 0x1f, 0x8}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0xe2, 0x3, 0x40}}]}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x10, 0x0, 0x1f, 0x20, 0x8}, 0x72, &(0x7f0000000100)={0x5, 0xf, 0x72, 0x4, [@wireless={0xb, 0x10, 0x1, 0x2, 0x0, 0x3, 0x5, 0x80, 0x80}, @generic={0x3f, 0x10, 0x1, "13eabcbedc7e85361568ba82957512f9fc3dc29c3335eacf761eb23847dd322ade415ab9dabe332209a130b7c151897613085a1787d6b6748b0354d0"}, @ssp_cap={0x18, 0x10, 0xa, 0x3f, 0x3, 0x1, 0xff0f, 0x9, [0x0, 0x3fc0, 0xc000]}, @wireless={0xb, 0x10, 0x1, 0x2, 0x40, 0x3e, 0xc7, 0xffff, 0x8}]}, 0x1, [{0xc7, &(0x7f0000000180)=@string={0xc7, 0x3, "7f126e6ffa050bba81edaf647a108d9fd37fbe3d11c15a3707477a6757d84b545a36669de4aa342241c88f7d526936f675209a74339730655071e3fcb25a208bbc069d6df4c07b4705d393a371da12cad8aaf6778ad74c8d58df24aaa77a7230a9f3628e71abaf0f819fdc49a07c577564df79e1300f987b6d6f0677e40fce2bb108a04a299c04e4bf6756185d8f38f7b15524ba0d91f7e2e25eec64a5523257550e35539b7efd2f71cc57e3428c7c38353ccfddec9577d5854e54703d3bf8b4132cd5932a"}}]}) syz_usb_ep_write(r2, 0x1f, 0x17, &(0x7f00000002c0)="18676c5fbcc850892fbc37961384e6dc244a9c136edf28") ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000300)=[0x9, 0x7]) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r3, 0x29, 0x2d, &(0x7f0000000340)={0x0, {{0xa, 0x4e20, 0x9, @mcast2, 0x83}}}, 0x88) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000400)=""/151) syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000840)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x46a, 0x23, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x7f, 0x60, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x8, {0x9, 0x21, 0x8, 0x3f, 0x1, {0x22, 0x4d6}}, {{{0x9, 0x5, 0x81, 0x3, 0x1af, 0x3, 0x0, 0x8}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x9, 0xad, 0x5a}}]}}}]}}]}}, &(0x7f0000000a80)={0xa, &(0x7f0000000880)={0xa, 0x6, 0x201, 0x8, 0x3f, 0x55, 0xff, 0x4}, 0x112, &(0x7f00000008c0)={0x5, 0xf, 0x112, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x0, 0x4, 0x5, 0xb4}, @generic={0xee, 0x10, 0x4, "d0031eae4efd237341c8a1bdb1418904fc37f74fdabfad1df4fe696990c75cc8518ee96883820f53592b5ba731abeef63833d04c5340b79bff983649da27141de3a17e7d857083f7f8c13daf1e65de8ff19e6a50698f4e1d7bd3e6c943f1e27efd3bd1764199faf293d79d65c7acb5cc89446d89f9b70b1497b481fbc6d8d97602a51e7dfcf1a3893bf6c45e2f44f0570480ac72d25d25c82f01b3d6ebaab63fb5a5f4fd0482bc1de2fb31178f6f3e72bac9d72289115497618203e4211f1f810b23a49c119d48fe0db66a3b71fa247b94f3c2f657e92dd120fe78a0c943d5d8b0930d89f099b08058e47b"}, @ssp_cap={0x14, 0x10, 0xa, 0xcd, 0x2, 0x0, 0x7800, 0x8, [0xfe8000, 0xff00]}]}, 0x2, [{0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x406}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0xf0ff}}]}) socket$inet6_udplite(0xa, 0x2, 0x88) 20:46:38 executing program 1: ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x102, 0x0) write$eventfd(r0, &(0x7f0000000200)=0x4, 0x8) socket(0x2, 0x80003, 0x3) openat$vcs(0xffffffffffffff9c, &(0x7f0000000400), 0x20000, 0x0) [ 203.352846] [ 203.353189] ===================================== [ 203.353898] WARNING: bad unlock balance detected! [ 203.354596] 6.19.0-rc5-next-20260116 #1 Not tainted [ 203.355321] ------------------------------------- [ 203.356018] syz-executor.2/279 is trying to release lock (rcu_read_lock) at: [ 203.357080] [] __wait_on_freeing_inode+0x105/0x350 [ 203.358041] but there are no more locks to release! [ 203.358769] [ 203.358769] other info that might help us debug this: [ 203.361029] 4 locks held by syz-executor.2/279: [ 203.362555] #0: ffff888009f0c3f8 (sb_writers#3){.+.+}-{0:0}, at: filename_create+0xf7/0x400 [ 203.365584] #1: ffff88801c8f6330 (&type->i_mutex_dir_key#3/1){+.+.}-{4:4}, at: filename_create+0x1b1/0x400 [ 203.368040] #2: ffff88800a430950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xe32/0x12d0 [ 203.370953] #3: ffffffff85c16898 (inode_hash_lock){+.+.}-{3:3}, at: insert_inode_locked+0xf9/0x890 [ 203.372307] [ 203.372307] stack backtrace: [ 203.372961] CPU: 0 UID: 0 PID: 279 Comm: syz-executor.2 Not tainted 6.19.0-rc5-next-20260116 #1 PREEMPT(lazy) [ 203.372987] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 203.373000] Call Trace: [ 203.373007] [ 203.373015] dump_stack_lvl+0xca/0x120 [ 203.373058] ? __wait_on_freeing_inode+0x105/0x350 [ 203.373085] print_unlock_imbalance_bug+0x118/0x130 [ 203.373112] ? __wait_on_freeing_inode+0x105/0x350 [ 203.373139] lock_release+0x1ee/0x270 [ 203.373167] __wait_on_freeing_inode+0x10a/0x350 [ 203.373194] ? __pfx___wait_on_freeing_inode+0x10/0x10 [ 203.373224] ? __pfx_var_wake_function+0x10/0x10 [ 203.373256] ? lock_is_held_type+0x9e/0x120 [ 203.373277] insert_inode_locked+0x25f/0x890 [ 203.373310] __ext4_new_inode+0x223d/0x4cd0 [ 203.373341] ? __pfx___ext4_new_inode+0x10/0x10 [ 203.373367] ? __pfx_avc_has_perm+0x10/0x10 [ 203.373392] ? __pfx___dquot_initialize+0x10/0x10 [ 203.373431] ext4_mkdir+0x331/0xb30 [ 203.373465] ? __pfx_ext4_mkdir+0x10/0x10 [ 203.373495] ? security_inode_permission+0x72/0xe0 [ 203.373518] vfs_mkdir+0x6d8/0xc00 [ 203.373550] filename_mkdirat+0x118/0x430 [ 203.373574] ? __pfx_filename_mkdirat+0x10/0x10 [ 203.373598] ? strncpy_from_user+0x21b/0x2f0 [ 203.373628] __x64_sys_mkdir+0x6e/0xd0 [ 203.373652] do_syscall_64+0xbf/0x420 [ 203.373676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.373697] RIP: 0033:0x7ff4ea459c27 [ 203.373714] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 203.373734] RSP: 002b:00007fff6bb0d458 EFLAGS: 00000202 ORIG_RAX: 0000000000000053 [ 203.373753] RAX: ffffffffffffffda RBX: 00007fff6bb0d4e0 RCX: 00007ff4ea459c27 [ 203.373767] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 00007fff6bb0d4e0 [ 203.373780] RBP: 00007fff6bb0d4bc R08: 0000000000000000 R09: 0000000000000004 [ 203.373793] R10: 00007fff6bb0d1f6 R11: 0000000000000202 R12: 0000000000000032 [ 203.373806] R13: 0000000000031920 R14: 0000000000000013 R15: 00007fff6bb0d520 [ 203.373825] [ 203.402110] ------------[ cut here ]------------ [ 203.402890] WARNING: kernel/rcu/tree_plugin.h:443 at __rcu_read_unlock+0x25f/0x5c0, CPU#0: syz-executor.2/279 [ 203.404861] Modules linked in: [ 203.405497] CPU: 0 UID: 0 PID: 279 Comm: syz-executor.2 Not tainted 6.19.0-rc5-next-20260116 #1 PREEMPT(lazy) [ 203.407015] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 203.408295] RIP: 0010:__rcu_read_unlock+0x25f/0x5c0 [ 203.409231] Code: f2 02 00 00 c7 43 58 01 00 00 00 bf 09 00 00 00 e8 d6 b7 de ff 4d 85 f6 0f 84 73 fe ff ff e8 38 8a 20 00 fb e9 68 fe ff ff 90 <0f> 0b 90 5b 5d 41 5c 41 5d 41 5e e9 81 4d 74 03 e8 2c 5d 56 00 e9 [ 203.411961] RSP: 0018:ffff88801b45f9e0 EFLAGS: 00010286 [ 203.412831] RAX: 00000000ffffffff RBX: ffff8880177ed280 RCX: ffffffff815660f7 [ 203.413948] RDX: 0000000000000000 RSI: ffffffff81566100 RDI: ffff8880177ed67c [ 203.415077] RBP: ffff8880177ed280 R08: 0000000000000000 R09: fffffbfff0ba7040 [ 203.416197] R10: 0000000000000000 R11: 0000000000000001 R12: ffff8880177ed280 [ 203.417327] R13: 0000000000000001 R14: ffffffff85c0e5f0 R15: ffff8880075a58e0 [ 203.418510] FS: 0000555571d69400(0000) GS:ffff8880e5342000(0000) knlGS:0000000000000000 [ 203.419759] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 203.420707] CR2: 00007fd2f9c20028 CR3: 000000000e585000 CR4: 0000000000350ef0 [ 203.421828] Call Trace: [ 203.422275] [ 203.423669] __wait_on_freeing_inode+0x10f/0x350 [ 203.428578] ? __pfx___wait_on_freeing_inode+0x10/0x10 [ 203.433681] ? __pfx_var_wake_function+0x10/0x10 [ 203.436015] ? lock_is_held_type+0x9e/0x120 [ 203.438108] insert_inode_locked+0x25f/0x890 [ 203.441227] __ext4_new_inode+0x223d/0x4cd0 [ 203.445971] ? __pfx___ext4_new_inode+0x10/0x10 [ 203.447812] ? __pfx_avc_has_perm+0x10/0x10 [ 203.448986] ? __pfx___dquot_initialize+0x10/0x10 [ 203.453161] ext4_mkdir+0x331/0xb30 [ 203.456920] ? __pfx_ext4_mkdir+0x10/0x10 [ 203.458078] ? security_inode_permission+0x72/0xe0 [ 203.461167] vfs_mkdir+0x6d8/0xc00 [ 203.463801] filename_mkdirat+0x118/0x430 [ 203.465886] ? __pfx_filename_mkdirat+0x10/0x10 [ 203.467276] ? strncpy_from_user+0x21b/0x2f0 [ 203.470878] __x64_sys_mkdir+0x6e/0xd0 [ 203.472051] do_syscall_64+0xbf/0x420 [ 203.473631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.474641] RIP: 0033:0x7ff4ea459c27 [ 203.475307] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 203.478014] RSP: 002b:00007fff6bb0d458 EFLAGS: 00000202 ORIG_RAX: 0000000000000053 [ 203.479195] RAX: ffffffffffffffda RBX: 00007fff6bb0d4e0 RCX: 00007ff4ea459c27 [ 203.480318] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 00007fff6bb0d4e0 [ 203.481499] RBP: 00007fff6bb0d4bc R08: 0000000000000000 R09: 0000000000000004 [ 203.482621] R10: 00007fff6bb0d1f6 R11: 0000000000000202 R12: 0000000000000032 [ 203.483733] R13: 0000000000031920 R14: 0000000000000013 R15: 00007fff6bb0d520 [ 203.488962] [ 203.489322] irq event stamp: 254965 [ 203.489924] hardirqs last enabled at (254965): [] _raw_spin_unlock_irqrestore+0x2c/0x50 [ 203.491523] hardirqs last disabled at (254964): [] _raw_spin_lock_irqsave+0x53/0x60 [ 203.493077] softirqs last enabled at (254960): [] kernel_fpu_end+0x59/0x70 [ 203.494518] softirqs last disabled at (254958): [] kernel_fpu_begin_mask+0x1bb/0x300 [ 203.496143] ---[ end trace 0000000000000000 ]--- 20:46:46 executing program 2: io_uring_enter(0xffffffffffffffff, 0x2d60, 0x28f3, 0x1, &(0x7f0000000000)={[0x1ff]}, 0x8) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000001300)=[{&(0x7f0000000040)=""/172, 0xac}, {&(0x7f0000000100)=""/212, 0xd4}, {&(0x7f0000000200)=""/116, 0x74}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/82, 0x52}], 0x5) r0 = io_uring_setup(0x4582, &(0x7f0000001380)={0x0, 0xb150, 0x8, 0x6, 0x38f}) r1 = syz_io_uring_setup(0x40, &(0x7f0000001400)={0x0, 0x108e, 0x1, 0x0, 0x1e, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001480), &(0x7f00000014c0)) ioprio_get$uid(0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001580)={'ip6_vti0\x00', &(0x7f0000001500)={'syztnl0\x00', 0x0, 0x29, 0x7f, 0x5, 0x81, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x7, 0xf5e, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000001640)={'syztnl1\x00', &(0x7f00000015c0)={'ip6_vti0\x00', r2, 0x4, 0x1, 0x0, 0x80000001, 0x40, @ipv4={'\x00', '\xff\xff', @local}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7800, 0x10, 0x4, 0x400000}}) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000016c0)='ns/uts\x00') sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001780)={&(0x7f0000001700)={0x6c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@GTPA_O_TEI={0x8}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r2}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_NET_NS_FD={0x8, 0x7, r3}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x41) r4 = syz_io_uring_setup(0x1382, &(0x7f0000001800)={0x0, 0x419b, 0x10, 0x0, 0x2f2, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000001880), &(0x7f00000018c0)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0) syz_io_uring_setup(0x4d2f, &(0x7f0000001900)={0x0, 0xacea, 0x10, 0x3, 0x5, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001980), &(0x7f00000019c0)) syz_genetlink_get_family_id$nbd(&(0x7f0000001a00), 0xffffffffffffffff) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001a80), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x44, r5, 0x0, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @multicast2}}, @NLBL_MGMT_A_DOMAIN={0x14, 0x1, '^-[#\'@:/[@^*\\$&\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x8010}, 0x20000000) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_DSTOPTS(r6, 0x29, 0x3b, &(0x7f0000001bc0)={0xff}, 0x8) r7 = io_uring_setup(0x7d7f, &(0x7f0000001c00)={0x0, 0x6e7, 0x8, 0x1, 0x11a, 0x0, r0}) io_uring_setup(0x778d, &(0x7f0000001c80)={0x0, 0xf775, 0x10, 0x0, 0x3a8, 0x0, r7}) 20:46:46 executing program 3: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f0000000000)=""/148) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f00000000c0)=""/40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x10000, 0x0) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000140)=""/183) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x901, 0x0) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000280)=0x7) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x44002, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000300)=""/4096) openat$tun(0xffffffffffffff9c, &(0x7f0000001300), 0x101002, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000001400), r0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x2c, r3, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x10001}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000024) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x17) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000001540)) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000001680)) 20:46:46 executing program 0: r0 = getuid() r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TUNSETOWNER(r1, 0x400454cc, r0) ioprio_get$uid(0x0, r0) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000040)={'wg2\x00'}) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x1) r2 = syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x46d, 0xc101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x9, 0xa0, 0xfd, [{{0x9, 0x4, 0x0, 0xf9, 0x1, 0x3, 0x1, 0x0, 0x5, {0x9, 0x21, 0x7, 0x3f, 0x1, {0x22, 0xc46}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x4, 0x1f, 0x8}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0xe2, 0x3, 0x40}}]}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x10, 0x0, 0x1f, 0x20, 0x8}, 0x72, &(0x7f0000000100)={0x5, 0xf, 0x72, 0x4, [@wireless={0xb, 0x10, 0x1, 0x2, 0x0, 0x3, 0x5, 0x80, 0x80}, @generic={0x3f, 0x10, 0x1, "13eabcbedc7e85361568ba82957512f9fc3dc29c3335eacf761eb23847dd322ade415ab9dabe332209a130b7c151897613085a1787d6b6748b0354d0"}, @ssp_cap={0x18, 0x10, 0xa, 0x3f, 0x3, 0x1, 0xff0f, 0x9, [0x0, 0x3fc0, 0xc000]}, @wireless={0xb, 0x10, 0x1, 0x2, 0x40, 0x3e, 0xc7, 0xffff, 0x8}]}, 0x1, [{0xc7, &(0x7f0000000180)=@string={0xc7, 0x3, "7f126e6ffa050bba81edaf647a108d9fd37fbe3d11c15a3707477a6757d84b545a36669de4aa342241c88f7d526936f675209a74339730655071e3fcb25a208bbc069d6df4c07b4705d393a371da12cad8aaf6778ad74c8d58df24aaa77a7230a9f3628e71abaf0f819fdc49a07c577564df79e1300f987b6d6f0677e40fce2bb108a04a299c04e4bf6756185d8f38f7b15524ba0d91f7e2e25eec64a5523257550e35539b7efd2f71cc57e3428c7c38353ccfddec9577d5854e54703d3bf8b4132cd5932a"}}]}) syz_usb_ep_write(r2, 0x1f, 0x17, &(0x7f00000002c0)="18676c5fbcc850892fbc37961384e6dc244a9c136edf28") ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000300)=[0x9, 0x7]) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r3, 0x29, 0x2d, &(0x7f0000000340)={0x0, {{0xa, 0x4e20, 0x9, @mcast2, 0x83}}}, 0x88) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000400)=""/151) syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000840)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x46a, 0x23, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x7f, 0x60, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x8, {0x9, 0x21, 0x8, 0x3f, 0x1, {0x22, 0x4d6}}, {{{0x9, 0x5, 0x81, 0x3, 0x1af, 0x3, 0x0, 0x8}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x9, 0xad, 0x5a}}]}}}]}}]}}, &(0x7f0000000a80)={0xa, &(0x7f0000000880)={0xa, 0x6, 0x201, 0x8, 0x3f, 0x55, 0xff, 0x4}, 0x112, &(0x7f00000008c0)={0x5, 0xf, 0x112, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x0, 0x4, 0x5, 0xb4}, @generic={0xee, 0x10, 0x4, "d0031eae4efd237341c8a1bdb1418904fc37f74fdabfad1df4fe696990c75cc8518ee96883820f53592b5ba731abeef63833d04c5340b79bff983649da27141de3a17e7d857083f7f8c13daf1e65de8ff19e6a50698f4e1d7bd3e6c943f1e27efd3bd1764199faf293d79d65c7acb5cc89446d89f9b70b1497b481fbc6d8d97602a51e7dfcf1a3893bf6c45e2f44f0570480ac72d25d25c82f01b3d6ebaab63fb5a5f4fd0482bc1de2fb31178f6f3e72bac9d72289115497618203e4211f1f810b23a49c119d48fe0db66a3b71fa247b94f3c2f657e92dd120fe78a0c943d5d8b0930d89f099b08058e47b"}, @ssp_cap={0x14, 0x10, 0xa, 0xcd, 0x2, 0x0, 0x7800, 0x8, [0xfe8000, 0xff00]}]}, 0x2, [{0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x406}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0xf0ff}}]}) socket$inet6_udplite(0xa, 0x2, 0x88) 20:46:46 executing program 5: ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x2f, 0x2, 0x9, 0x9b8c, 0x20, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x20, 0x1, 0xfff0000, 0x200}}) socketpair(0x28, 0xa, 0x5, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000100)=0x5, 0x4) socketpair(0x1e, 0x6, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r2) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, r3, 0x10, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7, 0x56}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x54}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6f}]}, 0x50}, 0x1, 0x0, 0x0, 0x801}, 0x8801) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000380), r1) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x3c, r4, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48c9ea108b1f44ee}, 0x800) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x18, 0x0, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x40040c0) socketpair(0x6, 0x4, 0x8001, &(0x7f00000005c0)={0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000580), r6) socket$inet6(0xa, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 20:46:46 executing program 4: ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000080)=@req={0x28, &(0x7f0000000040)={'ip6tnl0\x00', @ifru_data=&(0x7f0000000000)="f17494704e68b47eaad8fb9da92ff99b5cce055ddc13dc72692e77db7acc710c"}}) r0 = syz_io_uring_setup(0x682e, &(0x7f00000000c0)={0x0, 0x61b0, 0x4, 0x1, 0x2d2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)) syz_io_uring_setup(0x6fa4, &(0x7f00000001c0)={0x0, 0x45b1, 0x20, 0x2, 0x62}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fef000/0xe000)=nil, &(0x7f0000000240), &(0x7f0000000280)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_SEND={0x1a, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)="b72d90afab83524e5a67d39021a498ec674b4d2ca9113ff899e0d0f9b83e4bf0e5c7aa9df47be19e9a203e183c82e8042b2828fee967fd5f214e5a80dad31344738967859ee7c7408a45a6d559e9a086f7e05e104e2a4f30aac4aa379c63d71cd8e1c3343a37e93d01bc888eb7592e29d80dfb0e02f86afd532c9d0cfaf2a42c924a791fd05dd6f753e129d61651f1de6a9f72994cbb6a582ac3531e36fe5fa6477b2b98f35e1dd5", 0xa8, 0x840, 0x1, {0x0, r3}}, 0xfffff516) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff2000/0x1000)=nil, 0x1000, 0x2000000, 0x10010, r0, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000480)=@buf={0xbf, &(0x7f00000003c0)="2b4d53922143fe2395390a2145533f7bdcdb30c3bf09285c2bf6fe927deea3a89f0dbabebefdfa91c21096b9dddcbfa0d039b15c68be2b65234ebc1b9b90bfbf785f6481eab0db2dc826e1f7c8e0b94ea9641466150b090811b54951baefc0cde8c67d871e2c5d0d431598e7ada503479215055a88cd67c2e709732acfb98dc78e48141083d9bf6983dec0dd4acf6c6382bec2eec2bf195d806f2955a8ce60b05fe65bff960999faad64df00c7588262a6320066f76791f5459f9d9de1749e"}) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [""]}, 0x14}}, 0x40881) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r4 = io_uring_setup(0x6033, &(0x7f00000005c0)={0x0, 0xacab, 0x4, 0x0, 0x1, 0x0, r0}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x2000000, 0x13, r4, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x20010, r0, 0x0) r5 = syz_io_uring_setup(0x4170, &(0x7f0000002700)={0x0, 0xc7db, 0x52c9ea573c6af5bf, 0x1, 0x1af, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000002780), &(0x7f00000027c0)) r6 = syz_io_uring_setup(0x51c7, &(0x7f0000002800)={0x0, 0x5d6e, 0x0, 0x3, 0x38a, 0x0, r5}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000002880), &(0x7f00000028c0)) r7 = syz_io_uring_setup(0x3e47, &(0x7f0000002900)={0x0, 0x2baf, 0x4, 0x1, 0x62, 0x0, r6}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000002980), &(0x7f00000029c0)) syz_io_uring_setup(0x3a60, &(0x7f0000002a00)={0x0, 0x5114, 0x4, 0x3, 0xbc, 0x0, r7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000002a80), &(0x7f0000002ac0)) syz_genetlink_get_family_id$gtp(&(0x7f0000002b40), 0xffffffffffffffff) 20:46:46 executing program 6: r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x18b000, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000001340)={&(0x7f0000001200), 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x70, 0x0, 0x28, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x21}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x31}, @NL80211_ATTR_PMKID={0x14, 0x55, "de6a7d645d6d49b3b5b65b5753264841"}, @NL80211_ATTR_SSID={0x5, 0x34, @random='C'}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x48}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@broadcast}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x38}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x2e}, @NL80211_ATTR_SSID={0x7, 0x34, @random="219d02"}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x4084) 20:46:46 executing program 1: ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x102, 0x0) write$eventfd(r0, &(0x7f0000000200)=0x4, 0x8) socket(0x2, 0x80003, 0x3) openat$vcs(0xffffffffffffff9c, &(0x7f0000000400), 0x20000, 0x0) 20:46:46 executing program 7: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x29, 0x2, 0x9, 0x1000, 0x7f, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40, 0x1, 0xfffffff9, 0x3}}) socketpair(0x22, 0x3, 0x4e3, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r2, 0x89f6, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'ip6gre0\x00', r0, 0x4, 0xfc, 0x20, 0xffff, 0x30, @remote, @loopback, 0x40, 0x8020, 0x6a1a, 0xffff}}) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f00000001c0)=0x4, 0x4) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, 0x0, 0x28, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xff}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040002}, 0xc050) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000380)={'sit0\x00', &(0x7f0000000300)={'ip6gre0\x00', r3, 0x4, 0x7f, 0x5, 0x2, 0x8, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @loopback, 0x1, 0x1, 0x3, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r2, 0x89f4, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'ip6tnl0\x00', r4, 0x29, 0xfe, 0xf7, 0x7, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, 0x8000, 0x7, 0x7, 0x401}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000500)={'ip6tnl0\x00', &(0x7f0000000480)={'syztnl2\x00', r4, 0x29, 0x81, 0x8, 0x7, 0xa, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8, 0x8000, 0x20, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000005c0)={'ip6tnl0\x00', &(0x7f0000000540)={'syztnl0\x00', r5, 0x29, 0x0, 0x3f, 0x8000, 0x8, @remote, @local, 0x700, 0x48, 0x0, 0x5}}) getsockopt$sock_int(r2, 0x1, 0x23, &(0x7f0000000780), &(0x7f00000007c0)=0x4) syz_genetlink_get_family_id$team(&(0x7f0000000ac0), 0xffffffffffffffff) 20:46:46 executing program 6: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000011c0), 0x0, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000001340)={&(0x7f0000001200), 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x70, 0x0, 0x28, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x21}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x31}, @NL80211_ATTR_PMKID={0x14, 0x55, "de6a7d645d6d49b3b5b65b5753264841"}, @NL80211_ATTR_SSID={0x5, 0x34, @random='C'}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x48}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@broadcast}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x38}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x2e}, @NL80211_ATTR_SSID={0x7, 0x34, @random="219d02"}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x4084) 20:46:46 executing program 1: ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) r1 = openat$vcs(0xffffffffffffff9c, 0x0, 0x102, 0x0) write$eventfd(r1, &(0x7f0000000200)=0x4, 0x8) socket(0x2, 0x80003, 0x3) openat$vcs(0xffffffffffffff9c, &(0x7f0000000400), 0x20000, 0x0) 20:46:46 executing program 6: openat$vcs(0xffffffffffffff9c, &(0x7f00000011c0), 0x0, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000001200), 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x70, 0x0, 0x28, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x21}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x31}, @NL80211_ATTR_PMKID={0x14, 0x55, "de6a7d645d6d49b3b5b65b5753264841"}, @NL80211_ATTR_SSID={0x5, 0x34, @random='C'}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x48}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@broadcast}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x38}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x2e}, @NL80211_ATTR_SSID={0x7, 0x34, @random="219d02"}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x4084) 20:46:46 executing program 4: ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000080)=@req={0x28, &(0x7f0000000040)={'ip6tnl0\x00', @ifru_data=&(0x7f0000000000)="f17494704e68b47eaad8fb9da92ff99b5cce055ddc13dc72692e77db7acc710c"}}) r0 = syz_io_uring_setup(0x682e, &(0x7f00000000c0)={0x0, 0x61b0, 0x4, 0x1, 0x2d2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)) syz_io_uring_setup(0x6fa4, &(0x7f00000001c0)={0x0, 0x45b1, 0x20, 0x2, 0x62}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fef000/0xe000)=nil, &(0x7f0000000240), &(0x7f0000000280)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_SEND={0x1a, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)="b72d90afab83524e5a67d39021a498ec674b4d2ca9113ff899e0d0f9b83e4bf0e5c7aa9df47be19e9a203e183c82e8042b2828fee967fd5f214e5a80dad31344738967859ee7c7408a45a6d559e9a086f7e05e104e2a4f30aac4aa379c63d71cd8e1c3343a37e93d01bc888eb7592e29d80dfb0e02f86afd532c9d0cfaf2a42c924a791fd05dd6f753e129d61651f1de6a9f72994cbb6a582ac3531e36fe5fa6477b2b98f35e1dd5", 0xa8, 0x840, 0x1, {0x0, r3}}, 0xfffff516) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff2000/0x1000)=nil, 0x1000, 0x2000000, 0x10010, r0, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000480)=@buf={0xbf, &(0x7f00000003c0)="2b4d53922143fe2395390a2145533f7bdcdb30c3bf09285c2bf6fe927deea3a89f0dbabebefdfa91c21096b9dddcbfa0d039b15c68be2b65234ebc1b9b90bfbf785f6481eab0db2dc826e1f7c8e0b94ea9641466150b090811b54951baefc0cde8c67d871e2c5d0d431598e7ada503479215055a88cd67c2e709732acfb98dc78e48141083d9bf6983dec0dd4acf6c6382bec2eec2bf195d806f2955a8ce60b05fe65bff960999faad64df00c7588262a6320066f76791f5459f9d9de1749e"}) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [""]}, 0x14}}, 0x40881) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r4 = io_uring_setup(0x6033, &(0x7f00000005c0)={0x0, 0xacab, 0x4, 0x0, 0x1, 0x0, r0}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x2000000, 0x13, r4, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x20010, r0, 0x0) r5 = syz_io_uring_setup(0x4170, &(0x7f0000002700)={0x0, 0xc7db, 0x52c9ea573c6af5bf, 0x1, 0x1af, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000002780), &(0x7f00000027c0)) r6 = syz_io_uring_setup(0x51c7, &(0x7f0000002800)={0x0, 0x5d6e, 0x0, 0x3, 0x38a, 0x0, r5}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000002880), &(0x7f00000028c0)) r7 = syz_io_uring_setup(0x3e47, &(0x7f0000002900)={0x0, 0x2baf, 0x4, 0x1, 0x62, 0x0, r6}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000002980), &(0x7f00000029c0)) syz_io_uring_setup(0x3a60, &(0x7f0000002a00)={0x0, 0x5114, 0x4, 0x3, 0xbc, 0x0, r7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000002a80), &(0x7f0000002ac0)) syz_genetlink_get_family_id$gtp(&(0x7f0000002b40), 0xffffffffffffffff) 20:46:46 executing program 1: ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) r1 = openat$vcs(0xffffffffffffff9c, 0x0, 0x102, 0x0) write$eventfd(r1, &(0x7f0000000200)=0x4, 0x8) socket(0x2, 0x80003, 0x3) openat$vcs(0xffffffffffffff9c, &(0x7f0000000400), 0x20000, 0x0) VM DIAGNOSIS: 20:46:38 Registers: info registers vcpu 0 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff829750a0 RDI=ffffffff889c19e0 RBP=ffffffff889c19a0 RSP=ffff88801b45f470 R8 =0000000000000000 R9 =ffffed100176c046 R10=00000000000fe503 R11=666666203a302320 R12=0000000000000823 R13=0000000000000020 R14=fffffbfff113838e R15=dffffc0000000000 RIP=ffffffff829750f5 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555571d69400 00000000 00000000 GS =0000 ffff8880e5342000 00000000 00000000 LDT=0000 fffffe1600000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fd2f9c20028 CR3=000000000e585000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000a60ce07b00000000cec3662e XMM01=000000000000000003515b82db34ca11 XMM02=0000000000000000333bebdfd0a6a21d XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=0000000000000001 RCX=ffffffff84d1a2ce RDX=fffffbfff0b82d11 RSI=0000000000000004 RDI=ffffffff85c16880 RBP=ffffffff85c16880 RSP=ffff88800a38fb10 R8 =0000000000000000 R9 =fffffbfff0b82d10 R10=ffffffff85c16883 R11=0000000000000000 R12=1ffff11001471f63 R13=0000000000000003 R14=fffffbfff0b82d10 R15=ffff88800a38fb48 RIP=ffffffff84d1a460 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00005555718ab400 00000000 00000000 GS =0000 ffff8880e5442000 00000000 00000000 LDT=0000 fffffe3a00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f9138003020 CR3=000000000ea94000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=000000000000002f002f2e2e2f002e2e XMM01=0000000000000000696c61766e49002f XMM02=ffffffffffffff0f0e0d0c0b0a090807 XMM03=696e656420737365636341002f737973 XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=000055a63cffbb9000000000ffffffff XMM07=00000000000000000000000000000000 XMM08=2f63697361622f6372732f2e2e000d0a XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000