fdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:18:56 executing program 3: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) fork() 01:18:57 executing program 2: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000580)=""/27, 0x1b}], 0x6, &(0x7f0000000640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x1, 0x20, &(0x7f0000000740)) openat$cgroup_int(r2, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:19:15 executing program 1: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f00000003c0)='syz0\x00', 0x1ff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000700), 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) r2 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:19:15 executing program 3: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) fork() 01:19:15 executing program 0: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000980), 0x2080, 0x0) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:19:15 executing program 4: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0xd00, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4801) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x9) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000280)='syz1\x00', 0x1ff) socketpair(0x1, 0xa, 0x4, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000300)="dc2954afc7f767f4dbf018f657f3e70e2728fdf6934804b3d805638cc80fa6815c12f90caf1f9cc916d126b9e38ba17e2c0b46177e5cc7c80bb767c5a30280437f12572822b52ec2b7a0edee2afe34ffa7f77901699dcb1d91450783ef846ecb19a8c07b7dd387a6df1a3ef0309f595bd05167ea2b0773c4ed7707bb24087050c12005a531b6a1b4f751fbc2726fa8ca5bfc44e6066641b9ddaf46f79efada4802469dc228d7cd6b6208de466ee9df93127cc16918b54c01f5f6383d2ce6107fab01d90a92b6", 0xc6, 0x40000, 0x1}, 0x4) openat$cgroup_ro(r1, &(0x7f0000000440)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) r5 = pidfd_getfd(r1, r2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000700)={@mcast2, 0x79}) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, r6, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x880) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000980)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x7c, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc0}, 0x40000c1) 01:19:15 executing program 5: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_EEE_TX_LPI_TIMER={0x8}, @ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x9}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r1, &(0x7f00000003c0)='syz0\x00', 0x1ff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@GTPA_LINK={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvfrom(r3, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r4 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:19:15 executing program 6: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000580)=""/27, 0x1b}], 0x6, &(0x7f0000000640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x1, 0x20, &(0x7f0000000740)) openat$cgroup_int(r2, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$cgroup_int(r4, &(0x7f0000000800)='notify_on_release\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:19:15 executing program 7: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f00000003c0)='syz0\x00', 0x1ff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000700), 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) recvfrom(0xffffffffffffffff, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r2 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:19:15 executing program 2: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000580)=""/27, 0x1b}], 0x6, &(0x7f0000000640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x1, 0x20, &(0x7f0000000740)) openat$cgroup_int(r2, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:19:15 executing program 4: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0xd00, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4801) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x9) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000280)='syz1\x00', 0x1ff) socketpair(0x1, 0xa, 0x4, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000300)="dc2954afc7f767f4dbf018f657f3e70e2728fdf6934804b3d805638cc80fa6815c12f90caf1f9cc916d126b9e38ba17e2c0b46177e5cc7c80bb767c5a30280437f12572822b52ec2b7a0edee2afe34ffa7f77901699dcb1d91450783ef846ecb19a8c07b7dd387a6df1a3ef0309f595bd05167ea2b0773c4ed7707bb24087050c12005a531b6a1b4f751fbc2726fa8ca5bfc44e6066641b9ddaf46f79efada4802469dc228d7cd6b6208de466ee9df93127cc16918b54c01f5f6383d2ce6107fab01d90a92b6", 0xc6, 0x40000, 0x1}, 0x4) openat$cgroup_ro(r1, &(0x7f0000000440)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) r5 = pidfd_getfd(r1, r2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000700)={@mcast2, 0x79}) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, r6, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x880) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000980)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x7c, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc0}, 0x40000c1) 01:19:16 executing program 7: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f00000003c0)='syz0\x00', 0x1ff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000700), 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) recvfrom(0xffffffffffffffff, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r2 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:19:16 executing program 4: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0xd00, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4801) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x9) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000280)='syz1\x00', 0x1ff) socketpair(0x1, 0xa, 0x4, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000300)="dc2954afc7f767f4dbf018f657f3e70e2728fdf6934804b3d805638cc80fa6815c12f90caf1f9cc916d126b9e38ba17e2c0b46177e5cc7c80bb767c5a30280437f12572822b52ec2b7a0edee2afe34ffa7f77901699dcb1d91450783ef846ecb19a8c07b7dd387a6df1a3ef0309f595bd05167ea2b0773c4ed7707bb24087050c12005a531b6a1b4f751fbc2726fa8ca5bfc44e6066641b9ddaf46f79efada4802469dc228d7cd6b6208de466ee9df93127cc16918b54c01f5f6383d2ce6107fab01d90a92b6", 0xc6, 0x40000, 0x1}, 0x4) openat$cgroup_ro(r1, &(0x7f0000000440)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) r5 = pidfd_getfd(r1, r2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000700)={@mcast2, 0x79}) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, r6, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x880) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000980)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x7c, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc0}, 0x40000c1) 01:19:16 executing program 6: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000580)=""/27, 0x1b}], 0x6, &(0x7f0000000640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x1, 0x20, &(0x7f0000000740)) openat$cgroup_int(r2, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$cgroup_int(r4, &(0x7f0000000800)='notify_on_release\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:19:16 executing program 0: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000980), 0x2080, 0x0) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:19:16 executing program 3: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) fork() 01:19:16 executing program 1: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f00000003c0)='syz0\x00', 0x1ff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000700), 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000740)={@remote, 0x35}) recvfrom(0xffffffffffffffff, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r2 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:19:34 executing program 4: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0xd00, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4801) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x9) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r2, 0x0, 0x1ff) socketpair(0x1, 0xa, 0x4, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000300)="dc2954afc7f767f4dbf018f657f3e70e2728fdf6934804b3d805638cc80fa6815c12f90caf1f9cc916d126b9e38ba17e2c0b46177e5cc7c80bb767c5a30280437f12572822b52ec2b7a0edee2afe34ffa7f77901699dcb1d91450783ef846ecb19a8c07b7dd387a6df1a3ef0309f595bd05167ea2b0773c4ed7707bb24087050c12005a531b6a1b4f751fbc2726fa8ca5bfc44e6066641b9ddaf46f79efada4802469dc228d7cd6b6208de466ee9df93127cc16918b54c01f5f6383d2ce6107fab01d90a92b6", 0xc6, 0x40000, 0x1}, 0x4) openat$cgroup_ro(r1, &(0x7f0000000440)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) r5 = pidfd_getfd(r1, r2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000700)={@mcast2, 0x79}) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, r6, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x880) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000980)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x7c, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc0}, 0x40000c1) 01:19:34 executing program 5: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_EEE_TX_LPI_TIMER={0x8}, @ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x9}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r1, &(0x7f00000003c0)='syz0\x00', 0x1ff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@GTPA_LINK={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvfrom(r3, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r4 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:19:34 executing program 6: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000580)=""/27, 0x1b}], 0x6, &(0x7f0000000640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x1, 0x20, &(0x7f0000000740)) openat$cgroup_int(r2, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$cgroup_int(r4, &(0x7f0000000800)='notify_on_release\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:19:34 executing program 1: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f00000003c0)='syz0\x00', 0x1ff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000700), 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000740)={@remote, 0x35}) recvfrom(0xffffffffffffffff, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r2 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:19:34 executing program 2: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000580)=""/27, 0x1b}], 0x6, &(0x7f0000000640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x1, 0x20, &(0x7f0000000740)) openat$cgroup_int(r2, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:19:34 executing program 0: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000980), 0x2080, 0x0) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:19:34 executing program 3: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) fork() 01:19:34 executing program 7: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f00000003c0)='syz0\x00', 0x1ff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000700), 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) recvfrom(0xffffffffffffffff, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r2 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:19:34 executing program 1: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f00000003c0)='syz0\x00', 0x1ff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000700), 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000740)={@remote, 0x35}) recvfrom(0xffffffffffffffff, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r2 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:19:57 executing program 5: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) r0 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_EEE_TX_LPI_TIMER={0x8}, @ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x9}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r1, &(0x7f00000003c0)='syz0\x00', 0x1ff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@GTPA_LINK={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvfrom(r3, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r4 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:19:57 executing program 3: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) fork() 01:19:57 executing program 7: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f00000003c0)='syz0\x00', 0x1ff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000700), 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) recvfrom(0xffffffffffffffff, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r2 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:19:57 executing program 2: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000580)=""/27, 0x1b}], 0x6, &(0x7f0000000640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x1, 0x20, &(0x7f0000000740)) openat$cgroup_int(r2, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:19:57 executing program 1: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f00000003c0)='syz0\x00', 0x1ff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000700), 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) recvfrom(0xffffffffffffffff, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r1 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:19:57 executing program 4: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0xd00, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4801) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x9) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r2, 0x0, 0x1ff) socketpair(0x1, 0xa, 0x4, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000300)="dc2954afc7f767f4dbf018f657f3e70e2728fdf6934804b3d805638cc80fa6815c12f90caf1f9cc916d126b9e38ba17e2c0b46177e5cc7c80bb767c5a30280437f12572822b52ec2b7a0edee2afe34ffa7f77901699dcb1d91450783ef846ecb19a8c07b7dd387a6df1a3ef0309f595bd05167ea2b0773c4ed7707bb24087050c12005a531b6a1b4f751fbc2726fa8ca5bfc44e6066641b9ddaf46f79efada4802469dc228d7cd6b6208de466ee9df93127cc16918b54c01f5f6383d2ce6107fab01d90a92b6", 0xc6, 0x40000, 0x1}, 0x4) openat$cgroup_ro(r1, &(0x7f0000000440)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) r5 = pidfd_getfd(r1, r2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000700)={@mcast2, 0x79}) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, r6, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x880) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000980)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x7c, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc0}, 0x40000c1) 01:19:57 executing program 0: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000980), 0x2080, 0x0) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:19:57 executing program 6: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000580)=""/27, 0x1b}], 0x6, &(0x7f0000000640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x1, 0x20, &(0x7f0000000740)) openat$cgroup_int(r2, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$cgroup_int(r4, &(0x7f0000000800)='notify_on_release\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:19:58 executing program 0: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000980), 0x2080, 0x0) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:19:58 executing program 6: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000580)=""/27, 0x1b}], 0x6, &(0x7f0000000640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x1, 0x20, &(0x7f0000000740)) openat$cgroup_int(r2, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$cgroup_int(r4, &(0x7f0000000800)='notify_on_release\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:19:58 executing program 4: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0xd00, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4801) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x9) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r2, 0x0, 0x1ff) socketpair(0x1, 0xa, 0x4, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000300)="dc2954afc7f767f4dbf018f657f3e70e2728fdf6934804b3d805638cc80fa6815c12f90caf1f9cc916d126b9e38ba17e2c0b46177e5cc7c80bb767c5a30280437f12572822b52ec2b7a0edee2afe34ffa7f77901699dcb1d91450783ef846ecb19a8c07b7dd387a6df1a3ef0309f595bd05167ea2b0773c4ed7707bb24087050c12005a531b6a1b4f751fbc2726fa8ca5bfc44e6066641b9ddaf46f79efada4802469dc228d7cd6b6208de466ee9df93127cc16918b54c01f5f6383d2ce6107fab01d90a92b6", 0xc6, 0x40000, 0x1}, 0x4) openat$cgroup_ro(r1, &(0x7f0000000440)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) r5 = pidfd_getfd(r1, r2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000700)={@mcast2, 0x79}) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, r6, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x880) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000980)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x7c, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc0}, 0x40000c1) 01:19:58 executing program 3: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) fork() 01:19:58 executing program 2: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000580)=""/27, 0x1b}], 0x6, &(0x7f0000000640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x1, 0x20, &(0x7f0000000740)) openat$cgroup_int(r2, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:19:58 executing program 4: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0xd00, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4801) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x9) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r2, &(0x7f0000000280)='syz1\x00', 0x1ff) socketpair(0x0, 0xa, 0x4, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000300)="dc2954afc7f767f4dbf018f657f3e70e2728fdf6934804b3d805638cc80fa6815c12f90caf1f9cc916d126b9e38ba17e2c0b46177e5cc7c80bb767c5a30280437f12572822b52ec2b7a0edee2afe34ffa7f77901699dcb1d91450783ef846ecb19a8c07b7dd387a6df1a3ef0309f595bd05167ea2b0773c4ed7707bb24087050c12005a531b6a1b4f751fbc2726fa8ca5bfc44e6066641b9ddaf46f79efada4802469dc228d7cd6b6208de466ee9df93127cc16918b54c01f5f6383d2ce6107fab01d90a92b6", 0xc6, 0x40000, 0x1}, 0x4) openat$cgroup_ro(r1, &(0x7f0000000440)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) r5 = pidfd_getfd(r1, r2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000700)={@mcast2, 0x79}) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, r6, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x880) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000980)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x7c, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc0}, 0x40000c1) 01:19:58 executing program 6: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000580)=""/27, 0x1b}], 0x6, &(0x7f0000000640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x1, 0x20, &(0x7f0000000740)) openat$cgroup_int(r2, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$cgroup_int(r4, &(0x7f0000000800)='notify_on_release\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:19:58 executing program 5: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) r0 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_EEE_TX_LPI_TIMER={0x8}, @ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x9}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r1, &(0x7f00000003c0)='syz0\x00', 0x1ff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@GTPA_LINK={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvfrom(r3, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r4 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:19:58 executing program 7: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f00000003c0)='syz0\x00', 0x1ff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000700), 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) recvfrom(0xffffffffffffffff, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r2 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:19:59 executing program 1: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f00000003c0)='syz0\x00', 0x1ff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000700), 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) recvfrom(0xffffffffffffffff, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r1 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:19:59 executing program 0: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000980), 0x2080, 0x0) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:19:59 executing program 3: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) fork() 01:20:24 executing program 4: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0xd00, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4801) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x9) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r2, &(0x7f0000000280)='syz1\x00', 0x1ff) socketpair(0x0, 0xa, 0x4, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000300)="dc2954afc7f767f4dbf018f657f3e70e2728fdf6934804b3d805638cc80fa6815c12f90caf1f9cc916d126b9e38ba17e2c0b46177e5cc7c80bb767c5a30280437f12572822b52ec2b7a0edee2afe34ffa7f77901699dcb1d91450783ef846ecb19a8c07b7dd387a6df1a3ef0309f595bd05167ea2b0773c4ed7707bb24087050c12005a531b6a1b4f751fbc2726fa8ca5bfc44e6066641b9ddaf46f79efada4802469dc228d7cd6b6208de466ee9df93127cc16918b54c01f5f6383d2ce6107fab01d90a92b6", 0xc6, 0x40000, 0x1}, 0x4) openat$cgroup_ro(r1, &(0x7f0000000440)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) r5 = pidfd_getfd(r1, r2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000700)={@mcast2, 0x79}) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, r6, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x880) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000980)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x7c, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc0}, 0x40000c1) 01:20:24 executing program 5: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) r0 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_EEE_TX_LPI_TIMER={0x8}, @ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x9}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r1, &(0x7f00000003c0)='syz0\x00', 0x1ff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@GTPA_LINK={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvfrom(r3, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r4 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:20:24 executing program 6: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000580)=""/27, 0x1b}], 0x6, &(0x7f0000000640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x1, 0x20, &(0x7f0000000740)) openat$cgroup_int(r2, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$cgroup_int(r4, &(0x7f0000000800)='notify_on_release\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:20:24 executing program 0: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000980), 0x2080, 0x0) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:20:24 executing program 3: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) fork() 01:20:24 executing program 2: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000580)=""/27, 0x1b}], 0x6, &(0x7f0000000640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x1, 0x20, &(0x7f0000000740)) openat$cgroup_int(r2, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:20:24 executing program 7: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f00000003c0)='syz0\x00', 0x1ff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000700), 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) recvfrom(0xffffffffffffffff, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r2 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:20:24 executing program 1: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f00000003c0)='syz0\x00', 0x1ff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000700), 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) recvfrom(0xffffffffffffffff, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r1 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:20:24 executing program 3: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) fork() 01:20:24 executing program 0: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000980), 0x2080, 0x0) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:20:24 executing program 4: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0xd00, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4801) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x9) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r2, &(0x7f0000000280)='syz1\x00', 0x1ff) socketpair(0x0, 0xa, 0x4, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000300)="dc2954afc7f767f4dbf018f657f3e70e2728fdf6934804b3d805638cc80fa6815c12f90caf1f9cc916d126b9e38ba17e2c0b46177e5cc7c80bb767c5a30280437f12572822b52ec2b7a0edee2afe34ffa7f77901699dcb1d91450783ef846ecb19a8c07b7dd387a6df1a3ef0309f595bd05167ea2b0773c4ed7707bb24087050c12005a531b6a1b4f751fbc2726fa8ca5bfc44e6066641b9ddaf46f79efada4802469dc228d7cd6b6208de466ee9df93127cc16918b54c01f5f6383d2ce6107fab01d90a92b6", 0xc6, 0x40000, 0x1}, 0x4) openat$cgroup_ro(r1, &(0x7f0000000440)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) r5 = pidfd_getfd(r1, r2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000700)={@mcast2, 0x79}) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, r6, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x880) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000980)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x7c, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc0}, 0x40000c1) 01:20:24 executing program 6: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000580)=""/27, 0x1b}], 0x6, &(0x7f0000000640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x1, 0x20, &(0x7f0000000740)) openat$cgroup_int(r2, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$cgroup_int(r4, &(0x7f0000000800)='notify_on_release\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:20:24 executing program 2: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000580)=""/27, 0x1b}], 0x6, &(0x7f0000000640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x1, 0x20, &(0x7f0000000740)) openat$cgroup_int(r2, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:20:48 executing program 0: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000980), 0x2080, 0x0) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:20:48 executing program 1: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f00000003c0)='syz0\x00', 0x1ff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) recvfrom(0xffffffffffffffff, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r2 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:20:48 executing program 2: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000580)=""/27, 0x1b}], 0x6, &(0x7f0000000640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x1, 0x20, &(0x7f0000000740)) openat$cgroup_int(r2, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:20:48 executing program 5: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f00000003c0)='syz0\x00', 0x1ff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@GTPA_LINK={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) r2 = socket$nl_generic(0x10, 0x3, 0x10) recvfrom(r2, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r3 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:20:48 executing program 4: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0xd00, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4801) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x9) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r2, &(0x7f0000000280)='syz1\x00', 0x1ff) socketpair(0x1, 0x0, 0x4, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000300)="dc2954afc7f767f4dbf018f657f3e70e2728fdf6934804b3d805638cc80fa6815c12f90caf1f9cc916d126b9e38ba17e2c0b46177e5cc7c80bb767c5a30280437f12572822b52ec2b7a0edee2afe34ffa7f77901699dcb1d91450783ef846ecb19a8c07b7dd387a6df1a3ef0309f595bd05167ea2b0773c4ed7707bb24087050c12005a531b6a1b4f751fbc2726fa8ca5bfc44e6066641b9ddaf46f79efada4802469dc228d7cd6b6208de466ee9df93127cc16918b54c01f5f6383d2ce6107fab01d90a92b6", 0xc6, 0x40000, 0x1}, 0x4) openat$cgroup_ro(r1, &(0x7f0000000440)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) r5 = pidfd_getfd(r1, r2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000700)={@mcast2, 0x79}) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, r6, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x880) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000980)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x7c, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc0}, 0x40000c1) 01:20:48 executing program 6: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000580)=""/27, 0x1b}], 0x6, &(0x7f0000000640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x1, 0x20, &(0x7f0000000740)) openat$cgroup_int(r2, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$cgroup_int(r4, &(0x7f0000000800)='notify_on_release\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:20:48 executing program 7: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f00000003c0)='syz0\x00', 0x1ff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000700), 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) recvfrom(0xffffffffffffffff, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r2 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:20:48 executing program 3: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) fork() 01:20:48 executing program 0: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0x0, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000980), 0x2080, 0x0) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:20:48 executing program 6: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000580)=""/27, 0x1b}], 0x6, &(0x7f0000000640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x1, 0x20, &(0x7f0000000740)) openat$cgroup_int(r2, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$cgroup_int(r4, &(0x7f0000000800)='notify_on_release\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:20:49 executing program 4: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0xd00, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4801) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x9) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r2, &(0x7f0000000280)='syz1\x00', 0x1ff) socketpair(0x1, 0x0, 0x4, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000300)="dc2954afc7f767f4dbf018f657f3e70e2728fdf6934804b3d805638cc80fa6815c12f90caf1f9cc916d126b9e38ba17e2c0b46177e5cc7c80bb767c5a30280437f12572822b52ec2b7a0edee2afe34ffa7f77901699dcb1d91450783ef846ecb19a8c07b7dd387a6df1a3ef0309f595bd05167ea2b0773c4ed7707bb24087050c12005a531b6a1b4f751fbc2726fa8ca5bfc44e6066641b9ddaf46f79efada4802469dc228d7cd6b6208de466ee9df93127cc16918b54c01f5f6383d2ce6107fab01d90a92b6", 0xc6, 0x40000, 0x1}, 0x4) openat$cgroup_ro(r1, &(0x7f0000000440)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) r5 = pidfd_getfd(r1, r2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000700)={@mcast2, 0x79}) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, r6, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x880) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000980)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x7c, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc0}, 0x40000c1) 01:20:49 executing program 0: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0x0, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000980), 0x2080, 0x0) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:20:49 executing program 1: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f00000003c0)='syz0\x00', 0x1ff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) recvfrom(0xffffffffffffffff, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r2 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:20:49 executing program 6: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000580)=""/27, 0x1b}], 0x6, &(0x7f0000000640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x1, 0x20, &(0x7f0000000740)) openat$cgroup_int(r2, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$cgroup_int(r4, &(0x7f0000000800)='notify_on_release\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:20:49 executing program 2: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000580)=""/27, 0x1b}], 0x6, &(0x7f0000000640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x1, 0x20, &(0x7f0000000740)) openat$cgroup_int(r2, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:20:49 executing program 3: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) fork() 01:20:49 executing program 7: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r0, 0x0, 0x1ff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000700), 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) recvfrom(0xffffffffffffffff, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r2 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:20:49 executing program 5: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f00000003c0)='syz0\x00', 0x1ff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@GTPA_LINK={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) r2 = socket$nl_generic(0x10, 0x3, 0x10) recvfrom(r2, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r3 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:20:49 executing program 6: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000580)=""/27, 0x1b}], 0x6, &(0x7f0000000640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x1, 0x20, &(0x7f0000000740)) openat$cgroup_int(r2, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$cgroup_int(r4, &(0x7f0000000800)='notify_on_release\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:20:49 executing program 2: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000580)=""/27, 0x1b}], 0x6, &(0x7f0000000640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x1, 0x20, &(0x7f0000000740)) openat$cgroup_int(r2, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:20:49 executing program 4: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0xd00, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4801) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x9) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r2, &(0x7f0000000280)='syz1\x00', 0x1ff) socketpair(0x1, 0x0, 0x4, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000300)="dc2954afc7f767f4dbf018f657f3e70e2728fdf6934804b3d805638cc80fa6815c12f90caf1f9cc916d126b9e38ba17e2c0b46177e5cc7c80bb767c5a30280437f12572822b52ec2b7a0edee2afe34ffa7f77901699dcb1d91450783ef846ecb19a8c07b7dd387a6df1a3ef0309f595bd05167ea2b0773c4ed7707bb24087050c12005a531b6a1b4f751fbc2726fa8ca5bfc44e6066641b9ddaf46f79efada4802469dc228d7cd6b6208de466ee9df93127cc16918b54c01f5f6383d2ce6107fab01d90a92b6", 0xc6, 0x40000, 0x1}, 0x4) openat$cgroup_ro(r1, &(0x7f0000000440)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) r5 = pidfd_getfd(r1, r2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000700)={@mcast2, 0x79}) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, r6, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x880) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000980)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x7c, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc0}, 0x40000c1) 01:20:49 executing program 0: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0x0, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000980), 0x2080, 0x0) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:20:50 executing program 7: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r0, 0x0, 0x1ff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000700), 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) recvfrom(0xffffffffffffffff, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r2 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:20:50 executing program 3: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) fork() 01:20:50 executing program 6: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000580)=""/27, 0x1b}], 0x6, &(0x7f0000000640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x1, 0x20, &(0x7f0000000740)) openat$cgroup_int(r2, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$cgroup_int(r4, &(0x7f0000000800)='notify_on_release\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:20:50 executing program 4: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0xd00, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4801) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x9) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r2, &(0x7f0000000280)='syz1\x00', 0x1ff) socketpair(0x1, 0xa, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000300)="dc2954afc7f767f4dbf018f657f3e70e2728fdf6934804b3d805638cc80fa6815c12f90caf1f9cc916d126b9e38ba17e2c0b46177e5cc7c80bb767c5a30280437f12572822b52ec2b7a0edee2afe34ffa7f77901699dcb1d91450783ef846ecb19a8c07b7dd387a6df1a3ef0309f595bd05167ea2b0773c4ed7707bb24087050c12005a531b6a1b4f751fbc2726fa8ca5bfc44e6066641b9ddaf46f79efada4802469dc228d7cd6b6208de466ee9df93127cc16918b54c01f5f6383d2ce6107fab01d90a92b6", 0xc6, 0x40000, 0x1}, 0x4) openat$cgroup_ro(r1, &(0x7f0000000440)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) r5 = pidfd_getfd(r1, r2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000700)={@mcast2, 0x79}) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, r6, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x880) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000980)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x7c, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc0}, 0x40000c1) 01:20:50 executing program 0: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000980), 0x2080, 0x0) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:21:15 executing program 1: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f00000003c0)='syz0\x00', 0x1ff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) recvfrom(0xffffffffffffffff, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r2 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:21:15 executing program 5: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f00000003c0)='syz0\x00', 0x1ff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@GTPA_LINK={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) r2 = socket$nl_generic(0x10, 0x3, 0x10) recvfrom(r2, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r3 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:21:15 executing program 7: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r0, 0x0, 0x1ff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000700), 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) recvfrom(0xffffffffffffffff, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r2 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:21:15 executing program 3: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) fork() 01:21:15 executing program 2: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000580)=""/27, 0x1b}], 0x6, &(0x7f0000000640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x1, 0x20, &(0x7f0000000740)) openat$cgroup_int(r2, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:21:15 executing program 0: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000980), 0x2080, 0x0) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:21:15 executing program 6: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000580)=""/27, 0x1b}], 0x6, &(0x7f0000000640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x1, 0x20, &(0x7f0000000740)) openat$cgroup_int(r2, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$cgroup_int(r4, &(0x7f0000000800)='notify_on_release\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:21:15 executing program 4: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0xd00, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4801) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x9) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r2, &(0x7f0000000280)='syz1\x00', 0x1ff) socketpair(0x1, 0xa, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000300)="dc2954afc7f767f4dbf018f657f3e70e2728fdf6934804b3d805638cc80fa6815c12f90caf1f9cc916d126b9e38ba17e2c0b46177e5cc7c80bb767c5a30280437f12572822b52ec2b7a0edee2afe34ffa7f77901699dcb1d91450783ef846ecb19a8c07b7dd387a6df1a3ef0309f595bd05167ea2b0773c4ed7707bb24087050c12005a531b6a1b4f751fbc2726fa8ca5bfc44e6066641b9ddaf46f79efada4802469dc228d7cd6b6208de466ee9df93127cc16918b54c01f5f6383d2ce6107fab01d90a92b6", 0xc6, 0x40000, 0x1}, 0x4) openat$cgroup_ro(r1, &(0x7f0000000440)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) r5 = pidfd_getfd(r1, r2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000700)={@mcast2, 0x79}) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, r6, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x880) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000980)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x7c, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc0}, 0x40000c1) 01:21:16 executing program 3: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) fork() 01:21:16 executing program 4: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0xd00, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4801) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x9) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r2, &(0x7f0000000280)='syz1\x00', 0x1ff) socketpair(0x1, 0xa, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000300)="dc2954afc7f767f4dbf018f657f3e70e2728fdf6934804b3d805638cc80fa6815c12f90caf1f9cc916d126b9e38ba17e2c0b46177e5cc7c80bb767c5a30280437f12572822b52ec2b7a0edee2afe34ffa7f77901699dcb1d91450783ef846ecb19a8c07b7dd387a6df1a3ef0309f595bd05167ea2b0773c4ed7707bb24087050c12005a531b6a1b4f751fbc2726fa8ca5bfc44e6066641b9ddaf46f79efada4802469dc228d7cd6b6208de466ee9df93127cc16918b54c01f5f6383d2ce6107fab01d90a92b6", 0xc6, 0x40000, 0x1}, 0x4) openat$cgroup_ro(r1, &(0x7f0000000440)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) r5 = pidfd_getfd(r1, r2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000700)={@mcast2, 0x79}) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, r6, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x880) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000980)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x7c, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc0}, 0x40000c1) 01:21:16 executing program 7: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f00000003c0)='syz0\x00', 0x1ff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, 0x0, 0x40000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000700), 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) recvfrom(0xffffffffffffffff, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r2 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:21:39 executing program 1: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f00000003c0)='syz0\x00', 0x1ff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000700), 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) recvfrom(0xffffffffffffffff, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r2 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:21:39 executing program 7: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f00000003c0)='syz0\x00', 0x1ff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, 0x0, 0x40000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000700), 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) recvfrom(0xffffffffffffffff, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r2 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:21:39 executing program 2: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000580)=""/27, 0x1b}], 0x6, &(0x7f0000000640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x1, 0x20, &(0x7f0000000740)) openat$cgroup_int(r2, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:21:39 executing program 4: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0xd00, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4801) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x9) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r2, &(0x7f0000000280)='syz1\x00', 0x1ff) socketpair(0x1, 0xa, 0x4, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)="dc2954afc7f767f4dbf018f657f3e70e2728fdf6934804b3d805638cc80fa6815c12f90caf1f9cc916d126b9e38ba17e2c0b46177e5cc7c80bb767c5a30280437f12572822b52ec2b7a0edee2afe34ffa7f77901699dcb1d91450783ef846ecb19a8c07b7dd387a6df1a3ef0309f595bd05167ea2b0773c4ed7707bb24087050c12005a531b6a1b4f751fbc2726fa8ca5bfc44e6066641b9ddaf46f79efada4802469dc228d7cd6b6208de466ee9df93127cc16918b54c01f5f6383d2ce6107fab01d90a92b6", 0xc6, 0x40000, 0x1}, 0x4) openat$cgroup_ro(r1, &(0x7f0000000440)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) r3 = pidfd_getfd(r1, r2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000700)={@mcast2, 0x79}) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, r4, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x880) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x7c, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc0}, 0x40000c1) 01:21:39 executing program 0: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000980), 0x2080, 0x0) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:21:39 executing program 3: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) fork() 01:21:39 executing program 6: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000580)=""/27, 0x1b}], 0x6, &(0x7f0000000640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x1, 0x20, &(0x7f0000000740)) openat$cgroup_int(r2, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$cgroup_int(r4, &(0x7f0000000800)='notify_on_release\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:21:39 executing program 5: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_EEE_TX_LPI_TIMER={0x8}, @ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x9}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r1, &(0x7f00000003c0)='syz0\x00', 0x1ff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@GTPA_LINK={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvfrom(r3, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r4 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:22:02 executing program 6: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000580)=""/27, 0x1b}], 0x6, &(0x7f0000000640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x1, 0x20, &(0x7f0000000740)) openat$cgroup_int(r2, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$cgroup_int(r4, &(0x7f0000000800)='notify_on_release\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:22:02 executing program 0: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x0, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000980), 0x2080, 0x0) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:22:02 executing program 5: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_EEE_TX_LPI_TIMER={0x8}, @ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x9}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r1, &(0x7f00000003c0)='syz0\x00', 0x1ff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@GTPA_LINK={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvfrom(r3, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r4 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:22:02 executing program 7: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f00000003c0)='syz0\x00', 0x1ff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, 0x0, 0x40000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000700), 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) recvfrom(0xffffffffffffffff, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r2 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:22:02 executing program 3: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) fork() 01:22:02 executing program 2: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000580)=""/27, 0x1b}], 0x6, &(0x7f0000000640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x1, 0x20, &(0x7f0000000740)) openat$cgroup_int(r2, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:22:02 executing program 4: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0xd00, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4801) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x9) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r2, &(0x7f0000000280)='syz1\x00', 0x1ff) socketpair(0x1, 0xa, 0x4, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)="dc2954afc7f767f4dbf018f657f3e70e2728fdf6934804b3d805638cc80fa6815c12f90caf1f9cc916d126b9e38ba17e2c0b46177e5cc7c80bb767c5a30280437f12572822b52ec2b7a0edee2afe34ffa7f77901699dcb1d91450783ef846ecb19a8c07b7dd387a6df1a3ef0309f595bd05167ea2b0773c4ed7707bb24087050c12005a531b6a1b4f751fbc2726fa8ca5bfc44e6066641b9ddaf46f79efada4802469dc228d7cd6b6208de466ee9df93127cc16918b54c01f5f6383d2ce6107fab01d90a92b6", 0xc6, 0x40000, 0x1}, 0x4) openat$cgroup_ro(r1, &(0x7f0000000440)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) r3 = pidfd_getfd(r1, r2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000700)={@mcast2, 0x79}) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, r4, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x880) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x7c, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc0}, 0x40000c1) 01:22:02 executing program 1: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f00000003c0)='syz0\x00', 0x1ff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000700), 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) recvfrom(0xffffffffffffffff, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r2 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:22:02 executing program 6: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000580)=""/27, 0x1b}], 0x6, &(0x7f0000000640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x1, 0x20, &(0x7f0000000740)) openat$cgroup_int(r2, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$cgroup_int(r4, &(0x7f0000000800)='notify_on_release\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:22:02 executing program 3: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) fork() 01:22:02 executing program 4: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0xd00, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4801) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x9) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r2, &(0x7f0000000280)='syz1\x00', 0x1ff) socketpair(0x1, 0xa, 0x4, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)="dc2954afc7f767f4dbf018f657f3e70e2728fdf6934804b3d805638cc80fa6815c12f90caf1f9cc916d126b9e38ba17e2c0b46177e5cc7c80bb767c5a30280437f12572822b52ec2b7a0edee2afe34ffa7f77901699dcb1d91450783ef846ecb19a8c07b7dd387a6df1a3ef0309f595bd05167ea2b0773c4ed7707bb24087050c12005a531b6a1b4f751fbc2726fa8ca5bfc44e6066641b9ddaf46f79efada4802469dc228d7cd6b6208de466ee9df93127cc16918b54c01f5f6383d2ce6107fab01d90a92b6", 0xc6, 0x40000, 0x1}, 0x4) openat$cgroup_ro(r1, &(0x7f0000000440)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) r3 = pidfd_getfd(r1, r2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000700)={@mcast2, 0x79}) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, r4, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x880) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x7c, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc0}, 0x40000c1) 01:22:03 executing program 2: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000580)=""/27, 0x1b}], 0x6, &(0x7f0000000640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x1, 0x20, &(0x7f0000000740)) openat$cgroup_int(r2, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:22:03 executing program 0: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x0, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000980), 0x2080, 0x0) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:22:03 executing program 4: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0xd00, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4801) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x9) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r2, &(0x7f0000000280)='syz1\x00', 0x1ff) socketpair(0x1, 0xa, 0x4, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) openat$cgroup_ro(r1, &(0x7f0000000440)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) r4 = pidfd_getfd(r1, r2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000700)={@mcast2, 0x79}) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, r5, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x880) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000980)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x7c, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc0}, 0x40000c1) 01:22:03 executing program 6: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000580)=""/27, 0x1b}], 0x6, &(0x7f0000000640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x1, 0x20, &(0x7f0000000740)) openat$cgroup_int(r2, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$cgroup_int(r4, &(0x7f0000000800)='notify_on_release\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:22:03 executing program 3: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) fork() 01:22:03 executing program 0: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x0, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000980), 0x2080, 0x0) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:22:03 executing program 7: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f00000003c0)='syz0\x00', 0x1ff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000700), 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) recvfrom(0xffffffffffffffff, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r2 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:22:03 executing program 5: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_EEE_TX_LPI_TIMER={0x8}, @ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x9}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r1, &(0x7f00000003c0)='syz0\x00', 0x1ff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@GTPA_LINK={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvfrom(r3, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r4 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:22:03 executing program 1: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f00000003c0)='syz0\x00', 0x1ff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000700), 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) recvfrom(0xffffffffffffffff, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r2 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:22:03 executing program 4: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0xd00, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4801) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x9) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r2, &(0x7f0000000280)='syz1\x00', 0x1ff) socketpair(0x1, 0xa, 0x4, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) openat$cgroup_ro(r1, &(0x7f0000000440)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) r4 = pidfd_getfd(r1, r2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000700)={@mcast2, 0x79}) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, r5, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x880) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000980)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x7c, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc0}, 0x40000c1) 01:22:28 executing program 6: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000580)=""/27, 0x1b}], 0x6, &(0x7f0000000640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x1, 0x20, &(0x7f0000000740)) openat$cgroup_int(r2, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$cgroup_int(r4, &(0x7f0000000800)='notify_on_release\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:22:28 executing program 2: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000580)=""/27, 0x1b}], 0x6, &(0x7f0000000640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x1, 0x20, &(0x7f0000000740)) openat$cgroup_int(r2, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:22:28 executing program 5: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_EEE_TX_LPI_TIMER={0x8}, @ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x9}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r1, &(0x7f00000003c0)='syz0\x00', 0x1ff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@GTPA_LINK={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvfrom(r3, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r4 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:22:28 executing program 4: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0xd00, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4801) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x9) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r2, &(0x7f0000000280)='syz1\x00', 0x1ff) socketpair(0x1, 0xa, 0x4, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) openat$cgroup_ro(r1, &(0x7f0000000440)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) r4 = pidfd_getfd(r1, r2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000700)={@mcast2, 0x79}) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, r5, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x880) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000980)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x7c, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc0}, 0x40000c1) 01:22:28 executing program 0: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x0, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000980), 0x2080, 0x0) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:22:28 executing program 1: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f00000003c0)='syz0\x00', 0x1ff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000700), 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) recvfrom(0xffffffffffffffff, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r1 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:22:28 executing program 7: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f00000003c0)='syz0\x00', 0x1ff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000700), 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) recvfrom(0xffffffffffffffff, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r2 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:22:28 executing program 3: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) fork() 01:22:28 executing program 3: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) fork() 01:22:28 executing program 3: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) fork() 01:23:07 executing program 3: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) fork() 01:23:07 executing program 1: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f00000003c0)='syz0\x00', 0x1ff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000700), 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) recvfrom(0xffffffffffffffff, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r1 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:23:07 executing program 6: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000580)=""/27, 0x1b}], 0x6, &(0x7f0000000640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x1, 0x20, &(0x7f0000000740)) openat$cgroup_int(r2, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$cgroup_int(r4, &(0x7f0000000800)='notify_on_release\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:23:07 executing program 2: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000580)=""/27, 0x1b}], 0x6, &(0x7f0000000640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x1, 0x20, &(0x7f0000000740)) openat$cgroup_int(r2, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:23:07 executing program 5: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_EEE_TX_LPI_TIMER={0x8}, @ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x9}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r1, &(0x7f00000003c0)='syz0\x00', 0x1ff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@GTPA_LINK={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvfrom(r3, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r4 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:23:07 executing program 7: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f00000003c0)='syz0\x00', 0x1ff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000700), 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) recvfrom(0xffffffffffffffff, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r2 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:23:07 executing program 4: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0xd00, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4801) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x9) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r2, &(0x7f0000000280)='syz1\x00', 0x1ff) socketpair(0x1, 0xa, 0x4, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, &(0x7f0000000300)="dc2954afc7f767f4dbf018f657f3e70e2728fdf6934804b3d805638cc80fa6815c12f90caf1f9cc916d126b9e38ba17e2c0b46177e5cc7c80bb767c5a30280437f12572822b52ec2b7a0edee2afe34ffa7f77901699dcb1d91450783ef846ecb19a8c07b7dd387a6df1a3ef0309f595bd05167ea2b0773c4ed7707bb24087050c12005a531b6a1b4f751fbc2726fa8ca5bfc44e6066641b9ddaf46f79efada4802469dc228d7cd6b6208de466ee9df93127cc16918b54c01f5f6383d2ce6107fab01d90a92b6", 0xc6, 0x40000, 0x1}, 0x4) openat$cgroup_ro(r1, &(0x7f0000000440)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) r5 = pidfd_getfd(r1, r2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000700)={@mcast2, 0x79}) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, r6, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x880) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000980)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x7c, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc0}, 0x40000c1) 01:23:07 executing program 0: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x0, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000980), 0x2080, 0x0) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:23:07 executing program 1: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f00000003c0)='syz0\x00', 0x1ff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000700), 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) recvfrom(0xffffffffffffffff, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r1 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:23:08 executing program 2: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000580)=""/27, 0x1b}], 0x6, &(0x7f0000000640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x1, 0x20, &(0x7f0000000740)) openat$cgroup_int(r2, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:23:08 executing program 3: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) fork() 01:23:08 executing program 1: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f00000003c0)='syz0\x00', 0x1ff) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000700), 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) recvfrom(0xffffffffffffffff, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r2 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:23:08 executing program 4: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0xd00, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4801) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x9) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r2, &(0x7f0000000280)='syz1\x00', 0x1ff) socketpair(0x1, 0xa, 0x4, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, &(0x7f0000000300)="dc2954afc7f767f4dbf018f657f3e70e2728fdf6934804b3d805638cc80fa6815c12f90caf1f9cc916d126b9e38ba17e2c0b46177e5cc7c80bb767c5a30280437f12572822b52ec2b7a0edee2afe34ffa7f77901699dcb1d91450783ef846ecb19a8c07b7dd387a6df1a3ef0309f595bd05167ea2b0773c4ed7707bb24087050c12005a531b6a1b4f751fbc2726fa8ca5bfc44e6066641b9ddaf46f79efada4802469dc228d7cd6b6208de466ee9df93127cc16918b54c01f5f6383d2ce6107fab01d90a92b6", 0xc6, 0x40000, 0x1}, 0x4) openat$cgroup_ro(r1, &(0x7f0000000440)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) r5 = pidfd_getfd(r1, r2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000700)={@mcast2, 0x79}) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, r6, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x880) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000980)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x7c, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc0}, 0x40000c1) 01:23:08 executing program 6: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000580)=""/27, 0x1b}], 0x6, &(0x7f0000000640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x1, 0x20, &(0x7f0000000740)) openat$cgroup_int(r2, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$cgroup_int(r4, &(0x7f0000000800)='notify_on_release\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:23:08 executing program 0: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x0, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000980), 0x2080, 0x0) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:23:08 executing program 5: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_EEE_TX_LPI_TIMER={0x8}, @ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x9}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r1, &(0x7f00000003c0)='syz0\x00', 0x1ff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@GTPA_LINK={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvfrom(r3, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r4 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:23:08 executing program 3: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) fork() 01:23:08 executing program 2: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000580)=""/27, 0x1b}], 0x6, &(0x7f0000000640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x1, 0x20, &(0x7f0000000740)) openat$cgroup_int(r2, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:23:08 executing program 7: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f00000003c0)='syz0\x00', 0x1ff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000700), 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) recvfrom(0xffffffffffffffff, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r2 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:23:09 executing program 1: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f00000003c0)='syz0\x00', 0x1ff) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000700), 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) recvfrom(0xffffffffffffffff, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r2 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:23:09 executing program 3: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) fork() 01:23:09 executing program 6: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000580)=""/27, 0x1b}], 0x6, &(0x7f0000000640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x1, 0x20, &(0x7f0000000740)) openat$cgroup_int(r2, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$cgroup_int(r4, &(0x7f0000000800)='notify_on_release\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:23:09 executing program 4: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0xd00, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4801) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x9) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r2, &(0x7f0000000280)='syz1\x00', 0x1ff) socketpair(0x1, 0xa, 0x4, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, &(0x7f0000000300)="dc2954afc7f767f4dbf018f657f3e70e2728fdf6934804b3d805638cc80fa6815c12f90caf1f9cc916d126b9e38ba17e2c0b46177e5cc7c80bb767c5a30280437f12572822b52ec2b7a0edee2afe34ffa7f77901699dcb1d91450783ef846ecb19a8c07b7dd387a6df1a3ef0309f595bd05167ea2b0773c4ed7707bb24087050c12005a531b6a1b4f751fbc2726fa8ca5bfc44e6066641b9ddaf46f79efada4802469dc228d7cd6b6208de466ee9df93127cc16918b54c01f5f6383d2ce6107fab01d90a92b6", 0xc6, 0x40000, 0x1}, 0x4) openat$cgroup_ro(r1, &(0x7f0000000440)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) r5 = pidfd_getfd(r1, r2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000700)={@mcast2, 0x79}) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, r6, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x880) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000980)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x7c, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc0}, 0x40000c1) 01:23:09 executing program 3: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) fork() 01:23:09 executing program 0: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x0, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000980), 0x2080, 0x0) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:23:09 executing program 3: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) fork() 01:23:09 executing program 3: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) fork() 01:23:09 executing program 3: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) fork() 01:23:09 executing program 4: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0xd00, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4801) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x9) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r2, &(0x7f0000000280)='syz1\x00', 0x1ff) socketpair(0x1, 0xa, 0x4, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)="dc2954afc7f767f4dbf018f657f3e70e2728fdf6934804b3d805638cc80fa6815c12f90caf1f9cc916d126b9e38ba17e2c0b46177e5cc7c80bb767c5a30280437f12572822b52ec2b7a0edee2afe34ffa7f77901699dcb1d91450783ef846ecb19a8c07b7dd387a6df1a3ef0309f595bd05167ea2b0773c4ed7707bb24087050c12005a531b6a1b4f751fbc2726fa8ca5bfc44e6066641b9ddaf46f79efada4802469dc228d7cd6b6208de466ee9df93127cc16918b54c01f5f6383d2ce6107fab01d90a92b6", 0xc6, 0x40000, 0x1}, 0x4) openat$cgroup_ro(r1, &(0x7f0000000440)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) r4 = pidfd_getfd(r1, r2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000700)={@mcast2, 0x79}) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, r5, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x880) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000980)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x7c, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc0}, 0x40000c1) 01:23:10 executing program 2: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000580)=""/27, 0x1b}], 0x6, &(0x7f0000000640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x1, 0x20, &(0x7f0000000740)) openat$cgroup_int(r2, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:23:10 executing program 3: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) fork() 01:23:34 executing program 2: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000580)=""/27, 0x1b}], 0x6, &(0x7f0000000640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x1, 0x20, &(0x7f0000000740)) openat$cgroup_int(r2, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:23:34 executing program 6: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000580)=""/27, 0x1b}], 0x6, &(0x7f0000000640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x1, 0x20, &(0x7f0000000740)) openat$cgroup_int(r2, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$cgroup_int(r4, &(0x7f0000000800)='notify_on_release\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:23:34 executing program 5: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f00000003c0)='syz0\x00', 0x1ff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@GTPA_LINK={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) r2 = socket$nl_generic(0x10, 0x3, 0x10) recvfrom(r2, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r3 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:23:34 executing program 3: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) fork() 01:23:34 executing program 4: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0xd00, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4801) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x9) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r2, &(0x7f0000000280)='syz1\x00', 0x1ff) socketpair(0x1, 0xa, 0x4, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)="dc2954afc7f767f4dbf018f657f3e70e2728fdf6934804b3d805638cc80fa6815c12f90caf1f9cc916d126b9e38ba17e2c0b46177e5cc7c80bb767c5a30280437f12572822b52ec2b7a0edee2afe34ffa7f77901699dcb1d91450783ef846ecb19a8c07b7dd387a6df1a3ef0309f595bd05167ea2b0773c4ed7707bb24087050c12005a531b6a1b4f751fbc2726fa8ca5bfc44e6066641b9ddaf46f79efada4802469dc228d7cd6b6208de466ee9df93127cc16918b54c01f5f6383d2ce6107fab01d90a92b6", 0xc6, 0x40000, 0x1}, 0x4) openat$cgroup_ro(r1, &(0x7f0000000440)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) r4 = pidfd_getfd(r1, r2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000700)={@mcast2, 0x79}) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, r5, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x880) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000980)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x7c, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc0}, 0x40000c1) 01:23:34 executing program 1: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f00000003c0)='syz0\x00', 0x1ff) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000700), 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) recvfrom(0xffffffffffffffff, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r2 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:23:34 executing program 0: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x0, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000980), 0x2080, 0x0) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:23:34 executing program 7: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f00000003c0)='syz0\x00', 0x1ff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000700), 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) recvfrom(0xffffffffffffffff, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r2 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:23:35 executing program 3: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) fork() 01:23:35 executing program 6: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000580)=""/27, 0x1b}], 0x6, &(0x7f0000000640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x1, 0x20, &(0x7f0000000740)) openat$cgroup_int(r2, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$cgroup_int(r4, &(0x7f0000000800)='notify_on_release\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:23:35 executing program 0: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x0, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000980), 0x2080, 0x0) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:23:35 executing program 4: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0xd00, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4801) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x9) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r2, &(0x7f0000000280)='syz1\x00', 0x1ff) socketpair(0x1, 0xa, 0x4, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)="dc2954afc7f767f4dbf018f657f3e70e2728fdf6934804b3d805638cc80fa6815c12f90caf1f9cc916d126b9e38ba17e2c0b46177e5cc7c80bb767c5a30280437f12572822b52ec2b7a0edee2afe34ffa7f77901699dcb1d91450783ef846ecb19a8c07b7dd387a6df1a3ef0309f595bd05167ea2b0773c4ed7707bb24087050c12005a531b6a1b4f751fbc2726fa8ca5bfc44e6066641b9ddaf46f79efada4802469dc228d7cd6b6208de466ee9df93127cc16918b54c01f5f6383d2ce6107fab01d90a92b6", 0xc6, 0x40000, 0x1}, 0x4) openat$cgroup_ro(r1, &(0x7f0000000440)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) r4 = pidfd_getfd(r1, r2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000700)={@mcast2, 0x79}) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, r5, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x880) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000980)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x7c, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc0}, 0x40000c1) 01:23:35 executing program 1: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000700), 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) recvfrom(0xffffffffffffffff, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r2 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:23:35 executing program 7: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f00000003c0)='syz0\x00', 0x1ff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000700), 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) recvfrom(0xffffffffffffffff, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r2 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:23:35 executing program 4: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0xd00, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4801) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x9) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r2, &(0x7f0000000280)='syz1\x00', 0x1ff) socketpair(0x1, 0xa, 0x4, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, 0x0, 0x0, 0x40000, 0x1}, 0x4) openat$cgroup_ro(r1, &(0x7f0000000440)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) r5 = pidfd_getfd(r1, r2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000700)={@mcast2, 0x79}) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, r6, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x880) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000980)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x7c, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc0}, 0x40000c1) 01:23:35 executing program 5: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f00000003c0)='syz0\x00', 0x1ff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@GTPA_LINK={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) r2 = socket$nl_generic(0x10, 0x3, 0x10) recvfrom(r2, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r3 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:23:55 executing program 4: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0xd00, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4801) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x9) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r2, &(0x7f0000000280)='syz1\x00', 0x1ff) socketpair(0x1, 0xa, 0x4, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, 0x0, 0x0, 0x40000, 0x1}, 0x4) openat$cgroup_ro(r1, &(0x7f0000000440)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) r5 = pidfd_getfd(r1, r2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000700)={@mcast2, 0x79}) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, r6, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x880) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000980)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x7c, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc0}, 0x40000c1) 01:23:55 executing program 2: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000580)=""/27, 0x1b}], 0x6, &(0x7f0000000640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x1, 0x20, &(0x7f0000000740)) openat$cgroup_int(r2, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:23:55 executing program 0: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x0, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000980), 0x2080, 0x0) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:23:55 executing program 3: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) fork() 01:23:55 executing program 6: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000580)=""/27, 0x1b}], 0x6, &(0x7f0000000640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x1, 0x20, &(0x7f0000000740)) openat$cgroup_int(r2, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$cgroup_int(r4, &(0x7f0000000800)='notify_on_release\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:23:55 executing program 1: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000700), 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) recvfrom(0xffffffffffffffff, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r2 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:23:55 executing program 7: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f00000003c0)='syz0\x00', 0x1ff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000700), 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) recvfrom(0xffffffffffffffff, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r2 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:23:55 executing program 5: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f00000003c0)='syz0\x00', 0x1ff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@GTPA_LINK={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) r2 = socket$nl_generic(0x10, 0x3, 0x10) recvfrom(r2, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r3 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:23:55 executing program 3: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) fork() 01:23:55 executing program 1: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000700), 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) recvfrom(0xffffffffffffffff, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r2 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:24:18 executing program 4: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0xd00, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4801) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x9) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r2, &(0x7f0000000280)='syz1\x00', 0x1ff) socketpair(0x1, 0xa, 0x4, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, 0x0, 0x0, 0x40000, 0x1}, 0x4) openat$cgroup_ro(r1, &(0x7f0000000440)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) r5 = pidfd_getfd(r1, r2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000700)={@mcast2, 0x79}) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, r6, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x880) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000980)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x7c, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc0}, 0x40000c1) 01:24:18 executing program 3: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) fork() 01:24:18 executing program 5: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f00000003c0)='syz0\x00', 0x1ff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@GTPA_LINK={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) r2 = socket$nl_generic(0x10, 0x3, 0x10) recvfrom(r2, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r3 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:24:18 executing program 2: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000580)=""/27, 0x1b}], 0x6, &(0x7f0000000640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x1, 0x20, &(0x7f0000000740)) openat$cgroup_int(r2, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:24:18 executing program 0: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x0, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000980), 0x2080, 0x0) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:24:18 executing program 6: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000580)=""/27, 0x1b}], 0x6, &(0x7f0000000640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x1, 0x20, &(0x7f0000000740)) openat$cgroup_int(r2, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$cgroup_int(r4, &(0x7f0000000800)='notify_on_release\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:24:18 executing program 7: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f00000003c0)='syz0\x00', 0x1ff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000700), 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) recvfrom(0xffffffffffffffff, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r2 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:24:18 executing program 1: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000700), 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) recvfrom(0xffffffffffffffff, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r1 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:24:18 executing program 3: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) fork() 01:24:42 executing program 5: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f00000003c0)='syz0\x00', 0x1ff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@GTPA_LINK={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) r2 = socket$nl_generic(0x10, 0x3, 0x10) recvfrom(r2, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r3 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:24:42 executing program 2: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000580)=""/27, 0x1b}], 0x6, &(0x7f0000000640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x1, 0x20, &(0x7f0000000740)) openat$cgroup_int(r2, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:24:42 executing program 7: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f00000003c0)='syz0\x00', 0x1ff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000700), 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) recvfrom(0xffffffffffffffff, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r2 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:24:42 executing program 4: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0xd00, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4801) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x9) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r2, &(0x7f0000000280)='syz1\x00', 0x1ff) socketpair(0x1, 0xa, 0x4, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000300), 0x0, 0x40000, 0x1}, 0x4) openat$cgroup_ro(r1, &(0x7f0000000440)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) r5 = pidfd_getfd(r1, r2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000700)={@mcast2, 0x79}) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, r6, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x880) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000980)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x7c, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc0}, 0x40000c1) 01:24:42 executing program 3: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) fork() 01:24:42 executing program 1: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000700), 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) recvfrom(0xffffffffffffffff, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r1 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:24:42 executing program 6: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000580)=""/27, 0x1b}], 0x6, &(0x7f0000000640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x1, 0x20, &(0x7f0000000740)) openat$cgroup_int(r2, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$cgroup_int(r4, &(0x7f0000000800)='notify_on_release\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:24:42 executing program 0: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x0, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000980), 0x2080, 0x0) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:24:43 executing program 4: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0xd00, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4801) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x9) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r2, &(0x7f0000000280)='syz1\x00', 0x1ff) socketpair(0x1, 0xa, 0x4, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000300), 0x0, 0x40000, 0x1}, 0x4) openat$cgroup_ro(r1, &(0x7f0000000440)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) r5 = pidfd_getfd(r1, r2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000700)={@mcast2, 0x79}) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, r6, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x880) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000980)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x7c, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc0}, 0x40000c1) 01:24:43 executing program 2: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000580)=""/27, 0x1b}], 0x6, &(0x7f0000000640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x1, 0x20, &(0x7f0000000740)) openat$cgroup_int(r2, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:24:43 executing program 6: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0x0, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000580)=""/27, 0x1b}], 0x6, &(0x7f0000000640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x1, 0x20, &(0x7f0000000740)) openat$cgroup_int(r2, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$cgroup_int(r4, &(0x7f0000000800)='notify_on_release\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:24:43 executing program 0: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x0, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000980), 0x2080, 0x0) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:24:43 executing program 3: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0x0, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) fork() 01:24:43 executing program 4: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0xd00, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4801) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x9) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r2, &(0x7f0000000280)='syz1\x00', 0x1ff) socketpair(0x1, 0xa, 0x4, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000300), 0x0, 0x40000, 0x1}, 0x4) openat$cgroup_ro(r1, &(0x7f0000000440)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) r5 = pidfd_getfd(r1, r2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000700)={@mcast2, 0x79}) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, r6, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x880) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000980)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x7c, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc0}, 0x40000c1) 01:24:43 executing program 6: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0x0, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000580)=""/27, 0x1b}], 0x6, &(0x7f0000000640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x1, 0x20, &(0x7f0000000740)) openat$cgroup_int(r2, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$cgroup_int(r4, &(0x7f0000000800)='notify_on_release\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:24:43 executing program 7: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f00000003c0)='syz0\x00', 0x1ff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000700), 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) recvfrom(0xffffffffffffffff, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r2 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:24:43 executing program 5: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f00000003c0)='syz0\x00', 0x1ff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@GTPA_LINK={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) r2 = socket$nl_generic(0x10, 0x3, 0x10) recvfrom(r2, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r3 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:24:44 executing program 2: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000580)=""/27, 0x1b}], 0x6, &(0x7f0000000640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x1, 0x20, &(0x7f0000000740)) openat$cgroup_int(r2, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:24:44 executing program 1: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000700), 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) recvfrom(0xffffffffffffffff, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r1 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:25:08 executing program 4: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0xd00, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4801) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x9) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r2, &(0x7f0000000280)='syz1\x00', 0x1ff) socketpair(0x1, 0xa, 0x4, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000300)="dc2954afc7f767f4dbf018f657f3e70e2728fdf6934804b3d805638cc80fa6815c12f90caf1f9cc916d126b9e38ba17e2c0b46177e5cc7c80bb767c5a30280437f12572822b52ec2b7a0edee2afe34ffa7f77901699dcb1d91450783ef846ecb19a8c0", 0x63, 0x40000, 0x1}, 0x4) openat$cgroup_ro(r1, &(0x7f0000000440)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) r5 = pidfd_getfd(r1, r2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000700)={@mcast2, 0x79}) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, r6, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x880) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000980)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x7c, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc0}, 0x40000c1) 01:25:08 executing program 5: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_EEE_TX_LPI_TIMER={0x8}, @ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x9}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f00000003c0)='syz0\x00', 0x1ff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@GTPA_LINK={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) r2 = socket$nl_generic(0x10, 0x3, 0x10) recvfrom(r2, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r3 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:25:08 executing program 1: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000700), 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) recvfrom(0xffffffffffffffff, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r2 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:25:08 executing program 2: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000580)=""/27, 0x1b}], 0x6, &(0x7f0000000640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x1, 0x20, &(0x7f0000000740)) openat$cgroup_int(r2, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:25:08 executing program 6: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0x0, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000580)=""/27, 0x1b}], 0x6, &(0x7f0000000640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x1, 0x20, &(0x7f0000000740)) openat$cgroup_int(r2, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$cgroup_int(r4, &(0x7f0000000800)='notify_on_release\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:25:08 executing program 0: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x0, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000980), 0x2080, 0x0) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:25:08 executing program 7: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f00000003c0)='syz0\x00', 0x1ff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000700), 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) recvfrom(0xffffffffffffffff, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r2 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:25:08 executing program 3: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0x0, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) fork() 01:25:08 executing program 4: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0xd00, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4801) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x9) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r2, &(0x7f0000000280)='syz1\x00', 0x1ff) socketpair(0x1, 0xa, 0x4, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000300)="dc2954afc7f767f4dbf018f657f3e70e2728fdf6934804b3d805638cc80fa6815c12f90caf1f9cc916d126b9e38ba17e2c0b46177e5cc7c80bb767c5a30280437f12572822b52ec2b7a0edee2afe34ffa7f77901699dcb1d91450783ef846ecb19a8c0", 0x63, 0x40000, 0x1}, 0x4) openat$cgroup_ro(r1, &(0x7f0000000440)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) r5 = pidfd_getfd(r1, r2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000700)={@mcast2, 0x79}) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, r6, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x880) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000980)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x7c, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc0}, 0x40000c1) 01:25:08 executing program 0: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x0, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000980), 0x2080, 0x0) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:25:08 executing program 6: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000580)=""/27, 0x1b}], 0x6, &(0x7f0000000640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x1, 0x20, &(0x7f0000000740)) openat$cgroup_int(r2, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$cgroup_int(r4, &(0x7f0000000800)='notify_on_release\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:25:09 executing program 3: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0x0, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) fork() 01:25:09 executing program 1: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000700), 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) recvfrom(0xffffffffffffffff, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r2 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:25:09 executing program 2: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000580)=""/27, 0x1b}], 0x6, &(0x7f0000000640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x1, 0x20, &(0x7f0000000740)) openat$cgroup_int(r2, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:25:09 executing program 4: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0xd00, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4801) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x9) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r2, &(0x7f0000000280)='syz1\x00', 0x1ff) socketpair(0x1, 0xa, 0x4, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000300)="dc2954afc7f767f4dbf018f657f3e70e2728fdf6934804b3d805638cc80fa6815c12f90caf1f9cc916d126b9e38ba17e2c0b46177e5cc7c80bb767c5a30280437f12572822b52ec2b7a0edee2afe34ffa7f77901699dcb1d91450783ef846ecb19a8c0", 0x63, 0x40000, 0x1}, 0x4) openat$cgroup_ro(r1, &(0x7f0000000440)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) r5 = pidfd_getfd(r1, r2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000700)={@mcast2, 0x79}) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, r6, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x880) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000980)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x7c, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc0}, 0x40000c1) 01:25:09 executing program 5: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_EEE_TX_LPI_TIMER={0x8}, @ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x9}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f00000003c0)='syz0\x00', 0x1ff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@GTPA_LINK={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) r2 = socket$nl_generic(0x10, 0x3, 0x10) recvfrom(r2, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r3 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:25:09 executing program 4: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0xd00, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4801) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x9) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r2, &(0x7f0000000280)='syz1\x00', 0x1ff) socketpair(0x1, 0xa, 0x4, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000300)="dc2954afc7f767f4dbf018f657f3e70e2728fdf6934804b3d805638cc80fa6815c12f90caf1f9cc916d126b9e38ba17e2c0b46177e5cc7c80bb767c5a30280437f12572822b52ec2b7a0edee2afe34ffa7f77901699dcb1d91450783ef846ecb19a8c07b7dd387a6df1a3ef0309f595bd05167ea2b0773c4ed7707bb24087050c12005a531b6a1b4f751fbc2726fa8ca5bfc44e606", 0x95, 0x40000, 0x1}, 0x4) openat$cgroup_ro(r1, &(0x7f0000000440)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) r5 = pidfd_getfd(r1, r2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000700)={@mcast2, 0x79}) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, r6, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x880) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000980)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x7c, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc0}, 0x40000c1) 01:25:09 executing program 7: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f00000003c0)='syz0\x00', 0x1ff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000700), 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) recvfrom(0xffffffffffffffff, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r2 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:25:09 executing program 4: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0xd00, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4801) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x9) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r2, &(0x7f0000000280)='syz1\x00', 0x1ff) socketpair(0x1, 0xa, 0x4, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000300)="dc2954afc7f767f4dbf018f657f3e70e2728fdf6934804b3d805638cc80fa6815c12f90caf1f9cc916d126b9e38ba17e2c0b46177e5cc7c80bb767c5a30280437f12572822b52ec2b7a0edee2afe34ffa7f77901699dcb1d91450783ef846ecb19a8c07b7dd387a6df1a3ef0309f595bd05167ea2b0773c4ed7707bb24087050c12005a531b6a1b4f751fbc2726fa8ca5bfc44e606", 0x95, 0x40000, 0x1}, 0x4) openat$cgroup_ro(r1, &(0x7f0000000440)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) r5 = pidfd_getfd(r1, r2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000700)={@mcast2, 0x79}) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, r6, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x880) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000980)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x7c, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc0}, 0x40000c1) 01:25:32 executing program 6: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000580)=""/27, 0x1b}], 0x6, &(0x7f0000000640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x1, 0x20, &(0x7f0000000740)) openat$cgroup_int(r2, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$cgroup_int(r4, &(0x7f0000000800)='notify_on_release\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:25:32 executing program 5: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_EEE_TX_LPI_TIMER={0x8}, @ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x9}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f00000003c0)='syz0\x00', 0x1ff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@GTPA_LINK={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) r2 = socket$nl_generic(0x10, 0x3, 0x10) recvfrom(r2, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r3 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:25:32 executing program 2: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000580)=""/27, 0x1b}], 0x6, &(0x7f0000000640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x1, 0x20, &(0x7f0000000740)) openat$cgroup_int(r2, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:25:32 executing program 4: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0xd00, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4801) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x9) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r2, &(0x7f0000000280)='syz1\x00', 0x1ff) socketpair(0x1, 0xa, 0x4, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000300)="dc2954afc7f767f4dbf018f657f3e70e2728fdf6934804b3d805638cc80fa6815c12f90caf1f9cc916d126b9e38ba17e2c0b46177e5cc7c80bb767c5a30280437f12572822b52ec2b7a0edee2afe34ffa7f77901699dcb1d91450783ef846ecb19a8c07b7dd387a6df1a3ef0309f595bd05167ea2b0773c4ed7707bb24087050c12005a531b6a1b4f751fbc2726fa8ca5bfc44e606", 0x95, 0x40000, 0x1}, 0x4) openat$cgroup_ro(r1, &(0x7f0000000440)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) r5 = pidfd_getfd(r1, r2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000700)={@mcast2, 0x79}) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, r6, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x880) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000980)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x7c, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc0}, 0x40000c1) 01:25:32 executing program 0: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000980), 0x2080, 0x0) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:25:32 executing program 3: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) fork() 01:25:32 executing program 7: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f00000003c0)='syz0\x00', 0x1ff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x0, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000700), 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) recvfrom(0xffffffffffffffff, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r2 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:25:32 executing program 1: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000700), 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) recvfrom(0xffffffffffffffff, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r2 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:25:33 executing program 4: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0xd00, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4801) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x9) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r2, &(0x7f0000000280)='syz1\x00', 0x1ff) socketpair(0x1, 0xa, 0x4, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000300)="dc2954afc7f767f4dbf018f657f3e70e2728fdf6934804b3d805638cc80fa6815c12f90caf1f9cc916d126b9e38ba17e2c0b46177e5cc7c80bb767c5a30280437f12572822b52ec2b7a0edee2afe34ffa7f77901699dcb1d91450783ef846ecb19a8c07b7dd387a6df1a3ef0309f595bd05167ea2b0773c4ed7707bb24087050c12005a531b6a1b4f751fbc2726fa8ca5bfc44e6066641b9ddaf46f79efada4802469dc228d7cd6b6208de466ee9", 0xae, 0x40000, 0x1}, 0x4) openat$cgroup_ro(r1, &(0x7f0000000440)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) r5 = pidfd_getfd(r1, r2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000700)={@mcast2, 0x79}) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, r6, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x880) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000980)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x7c, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc0}, 0x40000c1) 01:25:33 executing program 3: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) fork() 01:25:33 executing program 6: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000580)=""/27, 0x1b}], 0x6, &(0x7f0000000640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x1, 0x20, &(0x7f0000000740)) openat$cgroup_int(r2, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$cgroup_int(r4, &(0x7f0000000800)='notify_on_release\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:25:33 executing program 0: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000980), 0x2080, 0x0) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:25:33 executing program 7: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f00000003c0)='syz0\x00', 0x1ff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x0, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000700), 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) recvfrom(0xffffffffffffffff, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r2 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:25:33 executing program 2: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000580)=""/27, 0x1b}], 0x6, &(0x7f0000000640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x1, 0x20, &(0x7f0000000740)) openat$cgroup_int(r2, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:25:33 executing program 5: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r0, 0x0, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_EEE_TX_LPI_TIMER={0x8}, @ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x9}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r1, &(0x7f00000003c0)='syz0\x00', 0x1ff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@GTPA_LINK={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvfrom(r3, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r4 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:26:02 executing program 5: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r0, 0x0, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_EEE_TX_LPI_TIMER={0x8}, @ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x9}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r1, &(0x7f00000003c0)='syz0\x00', 0x1ff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@GTPA_LINK={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvfrom(r3, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r4 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:26:02 executing program 1: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x80) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000700), 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) recvfrom(0xffffffffffffffff, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r2 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:26:02 executing program 2: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000580)=""/27, 0x1b}], 0x6, &(0x7f0000000640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x1, 0x20, &(0x7f0000000740)) openat$cgroup_int(r2, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:26:02 executing program 7: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f00000003c0)='syz0\x00', 0x1ff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x0, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000700), 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) recvfrom(0xffffffffffffffff, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r2 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:26:02 executing program 3: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) fork() 01:26:02 executing program 4: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0xd00, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4801) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x9) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r2, &(0x7f0000000280)='syz1\x00', 0x1ff) socketpair(0x1, 0xa, 0x4, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000300)="dc2954afc7f767f4dbf018f657f3e70e2728fdf6934804b3d805638cc80fa6815c12f90caf1f9cc916d126b9e38ba17e2c0b46177e5cc7c80bb767c5a30280437f12572822b52ec2b7a0edee2afe34ffa7f77901699dcb1d91450783ef846ecb19a8c07b7dd387a6df1a3ef0309f595bd05167ea2b0773c4ed7707bb24087050c12005a531b6a1b4f751fbc2726fa8ca5bfc44e6066641b9ddaf46f79efada4802469dc228d7cd6b6208de466ee9", 0xae, 0x40000, 0x1}, 0x4) openat$cgroup_ro(r1, &(0x7f0000000440)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) r5 = pidfd_getfd(r1, r2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000700)={@mcast2, 0x79}) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, r6, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x880) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000980)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x7c, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc0}, 0x40000c1) 01:26:02 executing program 0: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000980), 0x2080, 0x0) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:26:02 executing program 6: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x0, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000580)=""/27, 0x1b}], 0x6, &(0x7f0000000640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x1, 0x20, &(0x7f0000000740)) openat$cgroup_int(r2, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$cgroup_int(r4, &(0x7f0000000800)='notify_on_release\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:26:02 executing program 0: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000980), 0x2080, 0x0) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:26:03 executing program 3: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x0, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) fork() 01:26:03 executing program 6: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x0, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000580)=""/27, 0x1b}], 0x6, &(0x7f0000000640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x1, 0x20, &(0x7f0000000740)) openat$cgroup_int(r2, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$cgroup_int(r4, &(0x7f0000000800)='notify_on_release\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:26:03 executing program 4: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0xd00, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4801) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x9) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r2, &(0x7f0000000280)='syz1\x00', 0x1ff) socketpair(0x1, 0xa, 0x4, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000300)="dc2954afc7f767f4dbf018f657f3e70e2728fdf6934804b3d805638cc80fa6815c12f90caf1f9cc916d126b9e38ba17e2c0b46177e5cc7c80bb767c5a30280437f12572822b52ec2b7a0edee2afe34ffa7f77901699dcb1d91450783ef846ecb19a8c07b7dd387a6df1a3ef0309f595bd05167ea2b0773c4ed7707bb24087050c12005a531b6a1b4f751fbc2726fa8ca5bfc44e6066641b9ddaf46f79efada4802469dc228d7cd6b6208de466ee9", 0xae, 0x40000, 0x1}, 0x4) openat$cgroup_ro(r1, &(0x7f0000000440)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) r5 = pidfd_getfd(r1, r2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000700)={@mcast2, 0x79}) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, r6, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x880) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000980)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x7c, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc0}, 0x40000c1) 01:26:03 executing program 1: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x80) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000700), 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) recvfrom(0xffffffffffffffff, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r2 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:26:03 executing program 7: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f00000003c0)='syz0\x00', 0x1ff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x400, 0x0, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000700), 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) recvfrom(0xffffffffffffffff, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r2 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:26:03 executing program 2: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000580)=""/27, 0x1b}], 0x6, &(0x7f0000000640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x1, 0x20, &(0x7f0000000740)) openat$cgroup_int(r2, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:26:24 executing program 0: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000980), 0x2080, 0x0) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:26:24 executing program 2: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000580)=""/27, 0x1b}], 0x6, &(0x7f0000000640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x1, 0x20, &(0x7f0000000740)) openat$cgroup_int(r2, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:26:24 executing program 6: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x0, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000580)=""/27, 0x1b}], 0x6, &(0x7f0000000640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x1, 0x20, &(0x7f0000000740)) openat$cgroup_int(r2, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$cgroup_int(r4, &(0x7f0000000800)='notify_on_release\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:26:24 executing program 5: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r0, 0x0, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_EEE_TX_LPI_TIMER={0x8}, @ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x9}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r1, &(0x7f00000003c0)='syz0\x00', 0x1ff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@GTPA_LINK={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvfrom(r3, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r4 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:26:24 executing program 4: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0xd00, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4801) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x9) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r2, &(0x7f0000000280)='syz1\x00', 0x1ff) socketpair(0x1, 0xa, 0x4, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000300)="dc2954afc7f767f4dbf018f657f3e70e2728fdf6934804b3d805638cc80fa6815c12f90caf1f9cc916d126b9e38ba17e2c0b46177e5cc7c80bb767c5a30280437f12572822b52ec2b7a0edee2afe34ffa7f77901699dcb1d91450783ef846ecb19a8c07b7dd387a6df1a3ef0309f595bd05167ea2b0773c4ed7707bb24087050c12005a531b6a1b4f751fbc2726fa8ca5bfc44e6066641b9ddaf46f79efada4802469dc228d7cd6b6208de466ee9df93127cc16918b54c01f5f6", 0xba, 0x40000, 0x1}, 0x4) openat$cgroup_ro(r1, &(0x7f0000000440)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) r5 = pidfd_getfd(r1, r2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000700)={@mcast2, 0x79}) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, r6, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x880) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000980)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x7c, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc0}, 0x40000c1) 01:26:24 executing program 3: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x0, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) fork() 01:26:24 executing program 7: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f00000003c0)='syz0\x00', 0x1ff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x400, 0x0, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000700), 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) recvfrom(0xffffffffffffffff, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r2 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:26:24 executing program 1: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x80) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000700), 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) recvfrom(0xffffffffffffffff, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r2 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:26:25 executing program 7: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f00000003c0)='syz0\x00', 0x1ff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x400, 0x0, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000700), 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) recvfrom(0xffffffffffffffff, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r2 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:26:25 executing program 1: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000700), 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) recvfrom(0xffffffffffffffff, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r2 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:26:25 executing program 6: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x0, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000580)=""/27, 0x1b}], 0x6, &(0x7f0000000640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x1, 0x20, &(0x7f0000000740)) openat$cgroup_int(r2, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$cgroup_int(r4, &(0x7f0000000800)='notify_on_release\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:26:25 executing program 7: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f00000003c0)='syz0\x00', 0x1ff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x400, 0x70bd2b, 0x0, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000700), 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) recvfrom(0xffffffffffffffff, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r2 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:26:25 executing program 4: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0xd00, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4801) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x9) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r2, &(0x7f0000000280)='syz1\x00', 0x1ff) socketpair(0x1, 0xa, 0x4, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000300)="dc2954afc7f767f4dbf018f657f3e70e2728fdf6934804b3d805638cc80fa6815c12f90caf1f9cc916d126b9e38ba17e2c0b46177e5cc7c80bb767c5a30280437f12572822b52ec2b7a0edee2afe34ffa7f77901699dcb1d91450783ef846ecb19a8c07b7dd387a6df1a3ef0309f595bd05167ea2b0773c4ed7707bb24087050c12005a531b6a1b4f751fbc2726fa8ca5bfc44e6066641b9ddaf46f79efada4802469dc228d7cd6b6208de466ee9df93127cc16918b54c01f5f6", 0xba, 0x40000, 0x1}, 0x4) openat$cgroup_ro(r1, &(0x7f0000000440)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) r5 = pidfd_getfd(r1, r2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000700)={@mcast2, 0x79}) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, r6, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x880) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000980)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x7c, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc0}, 0x40000c1) 01:26:25 executing program 2: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000580)=""/27, 0x1b}], 0x6, &(0x7f0000000640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x1, 0x20, &(0x7f0000000740)) openat$cgroup_int(r2, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:26:26 executing program 5: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r0, 0x1, 0x0, 0x25dfdbfe, {}, [@ETHTOOL_A_EEE_TX_LPI_TIMER={0x8}, @ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x9}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r1, &(0x7f00000003c0)='syz0\x00', 0x1ff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@GTPA_LINK={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvfrom(r3, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r4 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:26:26 executing program 0: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000980), 0x2080, 0x0) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:26:26 executing program 3: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x0, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) fork() 01:26:51 executing program 1: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000700), 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) recvfrom(0xffffffffffffffff, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r2 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:26:51 executing program 5: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r0, 0x1, 0x0, 0x25dfdbfe, {}, [@ETHTOOL_A_EEE_TX_LPI_TIMER={0x8}, @ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x9}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r1, &(0x7f00000003c0)='syz0\x00', 0x1ff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@GTPA_LINK={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvfrom(r3, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r4 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:26:51 executing program 3: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x0, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) fork() 01:26:51 executing program 6: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x0, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000580)=""/27, 0x1b}], 0x6, &(0x7f0000000640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x1, 0x20, &(0x7f0000000740)) openat$cgroup_int(r2, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$cgroup_int(r4, &(0x7f0000000800)='notify_on_release\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:26:51 executing program 7: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f00000003c0)='syz0\x00', 0x1ff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x400, 0x70bd2b, 0x0, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000700), 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) recvfrom(0xffffffffffffffff, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r2 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:26:51 executing program 2: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000580)=""/27, 0x1b}], 0x6, &(0x7f0000000640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x1, 0x20, &(0x7f0000000740)) openat$cgroup_int(r2, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:26:51 executing program 4: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0xd00, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4801) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x9) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r2, &(0x7f0000000280)='syz1\x00', 0x1ff) socketpair(0x1, 0xa, 0x4, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000300)="dc2954afc7f767f4dbf018f657f3e70e2728fdf6934804b3d805638cc80fa6815c12f90caf1f9cc916d126b9e38ba17e2c0b46177e5cc7c80bb767c5a30280437f12572822b52ec2b7a0edee2afe34ffa7f77901699dcb1d91450783ef846ecb19a8c07b7dd387a6df1a3ef0309f595bd05167ea2b0773c4ed7707bb24087050c12005a531b6a1b4f751fbc2726fa8ca5bfc44e6066641b9ddaf46f79efada4802469dc228d7cd6b6208de466ee9df93127cc16918b54c01f5f6", 0xba, 0x40000, 0x1}, 0x4) openat$cgroup_ro(r1, &(0x7f0000000440)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) r5 = pidfd_getfd(r1, r2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000700)={@mcast2, 0x79}) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, r6, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x880) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000980)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x7c, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc0}, 0x40000c1) 01:26:51 executing program 0: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000980), 0x2080, 0x0) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:26:51 executing program 7: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f00000003c0)='syz0\x00', 0x1ff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x400, 0x70bd2b, 0x0, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000700), 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) recvfrom(0xffffffffffffffff, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r2 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:26:51 executing program 4: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0xd00, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4801) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x9) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r2, &(0x7f0000000280)='syz1\x00', 0x1ff) socketpair(0x1, 0xa, 0x4, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000300)="dc2954afc7f767f4dbf018f657f3e70e2728fdf6934804b3d805638cc80fa6815c12f90caf1f9cc916d126b9e38ba17e2c0b46177e5cc7c80bb767c5a30280437f12572822b52ec2b7a0edee2afe34ffa7f77901699dcb1d91450783ef846ecb19a8c07b7dd387a6df1a3ef0309f595bd05167ea2b0773c4ed7707bb24087050c12005a531b6a1b4f751fbc2726fa8ca5bfc44e6066641b9ddaf46f79efada4802469dc228d7cd6b6208de466ee9df93127cc16918b54c01f5f6383d2ce6107f", 0xc0, 0x40000, 0x1}, 0x4) openat$cgroup_ro(r1, &(0x7f0000000440)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) r5 = pidfd_getfd(r1, r2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000700)={@mcast2, 0x79}) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, r6, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x880) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000980)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x7c, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc0}, 0x40000c1) 01:26:51 executing program 1: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000700), 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) recvfrom(0xffffffffffffffff, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r2 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:26:51 executing program 6: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x0, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000580)=""/27, 0x1b}], 0x6, &(0x7f0000000640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x1, 0x20, &(0x7f0000000740)) openat$cgroup_int(r2, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$cgroup_int(r4, &(0x7f0000000800)='notify_on_release\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:26:52 executing program 0: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000980), 0x2080, 0x0) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:27:15 executing program 0: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000980), 0x2080, 0x0) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:27:15 executing program 7: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f00000003c0)='syz0\x00', 0x1ff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x58, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000700), 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) recvfrom(0xffffffffffffffff, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r2 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:27:15 executing program 6: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x0, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000580)=""/27, 0x1b}], 0x6, &(0x7f0000000640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x1, 0x20, &(0x7f0000000740)) openat$cgroup_int(r2, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$cgroup_int(r4, &(0x7f0000000800)='notify_on_release\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:27:15 executing program 5: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r0, 0x1, 0x0, 0x25dfdbfe, {}, [@ETHTOOL_A_EEE_TX_LPI_TIMER={0x8}, @ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x9}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r1, &(0x7f00000003c0)='syz0\x00', 0x1ff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@GTPA_LINK={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvfrom(r3, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r4 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:27:15 executing program 4: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0xd00, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4801) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x9) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r2, &(0x7f0000000280)='syz1\x00', 0x1ff) socketpair(0x1, 0xa, 0x4, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000300)="dc2954afc7f767f4dbf018f657f3e70e2728fdf6934804b3d805638cc80fa6815c12f90caf1f9cc916d126b9e38ba17e2c0b46177e5cc7c80bb767c5a30280437f12572822b52ec2b7a0edee2afe34ffa7f77901699dcb1d91450783ef846ecb19a8c07b7dd387a6df1a3ef0309f595bd05167ea2b0773c4ed7707bb24087050c12005a531b6a1b4f751fbc2726fa8ca5bfc44e6066641b9ddaf46f79efada4802469dc228d7cd6b6208de466ee9df93127cc16918b54c01f5f6383d2ce6107f", 0xc0, 0x40000, 0x1}, 0x4) openat$cgroup_ro(r1, &(0x7f0000000440)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) r5 = pidfd_getfd(r1, r2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000700)={@mcast2, 0x79}) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, r6, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x880) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000980)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x7c, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc0}, 0x40000c1) 01:27:15 executing program 3: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x0, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) fork() 01:27:15 executing program 2: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000580)=""/27, 0x1b}], 0x6, &(0x7f0000000640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x1, 0x20, &(0x7f0000000740)) openat$cgroup_int(r2, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:27:15 executing program 1: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000700), 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) recvfrom(0xffffffffffffffff, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r2 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:27:15 executing program 1: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000700), 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) recvfrom(0xffffffffffffffff, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r2 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:27:15 executing program 2: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000580)=""/27, 0x1b}], 0x6, &(0x7f0000000640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x1, 0x20, &(0x7f0000000740)) openat$cgroup_int(r2, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:27:15 executing program 3: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x0, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) fork() 01:27:15 executing program 6: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x0, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000580)=""/27, 0x1b}], 0x6, &(0x7f0000000640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x1, 0x20, &(0x7f0000000740)) openat$cgroup_int(r2, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$cgroup_int(r4, &(0x7f0000000800)='notify_on_release\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:27:15 executing program 4: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0xd00, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4801) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x9) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r2, &(0x7f0000000280)='syz1\x00', 0x1ff) socketpair(0x1, 0xa, 0x4, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000300)="dc2954afc7f767f4dbf018f657f3e70e2728fdf6934804b3d805638cc80fa6815c12f90caf1f9cc916d126b9e38ba17e2c0b46177e5cc7c80bb767c5a30280437f12572822b52ec2b7a0edee2afe34ffa7f77901699dcb1d91450783ef846ecb19a8c07b7dd387a6df1a3ef0309f595bd05167ea2b0773c4ed7707bb24087050c12005a531b6a1b4f751fbc2726fa8ca5bfc44e6066641b9ddaf46f79efada4802469dc228d7cd6b6208de466ee9df93127cc16918b54c01f5f6383d2ce6107f", 0xc0, 0x40000, 0x1}, 0x4) openat$cgroup_ro(r1, &(0x7f0000000440)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) r5 = pidfd_getfd(r1, r2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000700)={@mcast2, 0x79}) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, r6, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x880) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000980)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x7c, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc0}, 0x40000c1) 01:27:15 executing program 0: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x75efb9ad, 0xffffffffffffffff, 0x8) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000980), 0x2080, 0x0) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:27:16 executing program 1: sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000700), 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) recvfrom(0xffffffffffffffff, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r2 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:27:16 executing program 2: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000580)=""/27, 0x1b}], 0x6, &(0x7f0000000640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x1, 0x20, &(0x7f0000000740)) openat$cgroup_int(r2, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:27:16 executing program 5: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r0, 0x1, 0x70bd2b, 0x0, {}, [@ETHTOOL_A_EEE_TX_LPI_TIMER={0x8}, @ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x9}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r1, &(0x7f00000003c0)='syz0\x00', 0x1ff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@GTPA_LINK={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvfrom(r3, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r4 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:27:42 executing program 6: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x0, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000580)=""/27, 0x1b}], 0x6, &(0x7f0000000640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x1, 0x20, &(0x7f0000000740)) openat$cgroup_int(r2, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$cgroup_int(r4, &(0x7f0000000800)='notify_on_release\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:27:42 executing program 5: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r0, 0x1, 0x70bd2b, 0x0, {}, [@ETHTOOL_A_EEE_TX_LPI_TIMER={0x8}, @ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x9}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r1, &(0x7f00000003c0)='syz0\x00', 0x1ff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@GTPA_LINK={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvfrom(r3, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r4 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:27:42 executing program 2: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000580)=""/27, 0x1b}], 0x6, &(0x7f0000000640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x1, 0x20, &(0x7f0000000740)) openat$cgroup_int(r2, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:27:42 executing program 1: sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000700), 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) recvfrom(0xffffffffffffffff, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r2 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:27:42 executing program 7: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f00000003c0)='syz0\x00', 0x1ff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x50, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000700), 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) recvfrom(0xffffffffffffffff, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r2 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:27:42 executing program 4: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0xd00, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4801) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x9) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r2, &(0x7f0000000280)='syz1\x00', 0x1ff) socketpair(0x1, 0xa, 0x4, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000300)="dc2954afc7f767f4dbf018f657f3e70e2728fdf6934804b3d805638cc80fa6815c12f90caf1f9cc916d126b9e38ba17e2c0b46177e5cc7c80bb767c5a30280437f12572822b52ec2b7a0edee2afe34ffa7f77901699dcb1d91450783ef846ecb19a8c07b7dd387a6df1a3ef0309f595bd05167ea2b0773c4ed7707bb24087050c12005a531b6a1b4f751fbc2726fa8ca5bfc44e6066641b9ddaf46f79efada4802469dc228d7cd6b6208de466ee9df93127cc16918b54c01f5f6383d2ce6107fab01d9", 0xc3, 0x40000, 0x1}, 0x4) openat$cgroup_ro(r1, &(0x7f0000000440)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) r5 = pidfd_getfd(r1, r2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000700)={@mcast2, 0x79}) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, r6, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x880) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000980)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x7c, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc0}, 0x40000c1) 01:27:42 executing program 3: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x0, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) fork() 01:27:42 executing program 0: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x75efb9ad, 0xffffffffffffffff, 0x8) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000980), 0x2080, 0x0) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:27:42 executing program 4: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0xd00, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4801) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x9) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r2, &(0x7f0000000280)='syz1\x00', 0x1ff) socketpair(0x1, 0xa, 0x4, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000300)="dc2954afc7f767f4dbf018f657f3e70e2728fdf6934804b3d805638cc80fa6815c12f90caf1f9cc916d126b9e38ba17e2c0b46177e5cc7c80bb767c5a30280437f12572822b52ec2b7a0edee2afe34ffa7f77901699dcb1d91450783ef846ecb19a8c07b7dd387a6df1a3ef0309f595bd05167ea2b0773c4ed7707bb24087050c12005a531b6a1b4f751fbc2726fa8ca5bfc44e6066641b9ddaf46f79efada4802469dc228d7cd6b6208de466ee9df93127cc16918b54c01f5f6383d2ce6107fab01d9", 0xc3, 0x40000, 0x1}, 0x4) openat$cgroup_ro(r1, &(0x7f0000000440)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) r5 = pidfd_getfd(r1, r2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000700)={@mcast2, 0x79}) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, r6, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x880) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000980)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x7c, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc0}, 0x40000c1) 01:27:42 executing program 3: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x0, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) fork() 01:27:42 executing program 6: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x0, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000580)=""/27, 0x1b}], 0x6, &(0x7f0000000640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x1, 0x20, &(0x7f0000000740)) openat$cgroup_int(r2, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$cgroup_int(r4, &(0x7f0000000800)='notify_on_release\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:27:42 executing program 2: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000580)=""/27, 0x1b}], 0x6, &(0x7f0000000640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x1, 0x20, &(0x7f0000000740)) openat$cgroup_int(r2, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:27:42 executing program 4: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0xd00, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4801) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x9) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r2, &(0x7f0000000280)='syz1\x00', 0x1ff) socketpair(0x1, 0xa, 0x4, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000300)="dc2954afc7f767f4dbf018f657f3e70e2728fdf6934804b3d805638cc80fa6815c12f90caf1f9cc916d126b9e38ba17e2c0b46177e5cc7c80bb767c5a30280437f12572822b52ec2b7a0edee2afe34ffa7f77901699dcb1d91450783ef846ecb19a8c07b7dd387a6df1a3ef0309f595bd05167ea2b0773c4ed7707bb24087050c12005a531b6a1b4f751fbc2726fa8ca5bfc44e6066641b9ddaf46f79efada4802469dc228d7cd6b6208de466ee9df93127cc16918b54c01f5f6383d2ce6107fab01d9", 0xc3, 0x40000, 0x1}, 0x4) openat$cgroup_ro(r1, &(0x7f0000000440)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) r5 = pidfd_getfd(r1, r2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000700)={@mcast2, 0x79}) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, r6, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x880) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000980)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x7c, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc0}, 0x40000c1) 01:27:43 executing program 7: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f00000003c0)='syz0\x00', 0x1ff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x50, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000700), 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) recvfrom(0xffffffffffffffff, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r2 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:27:43 executing program 1: sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000700), 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) recvfrom(0xffffffffffffffff, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r2 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:27:43 executing program 0: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x75efb9ad, 0xffffffffffffffff, 0x8) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000980), 0x2080, 0x0) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:28:05 executing program 6: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x0, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000580)=""/27, 0x1b}], 0x6, &(0x7f0000000640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x1, 0x20, &(0x7f0000000740)) openat$cgroup_int(r2, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$cgroup_int(r4, &(0x7f0000000800)='notify_on_release\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:28:05 executing program 4: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0xd00, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4801) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x9) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r2, &(0x7f0000000280)='syz1\x00', 0x1ff) socketpair(0x1, 0xa, 0x4, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000300)="dc2954afc7f767f4dbf018f657f3e70e2728fdf6934804b3d805638cc80fa6815c12f90caf1f9cc916d126b9e38ba17e2c0b46177e5cc7c80bb767c5a30280437f12572822b52ec2b7a0edee2afe34ffa7f77901699dcb1d91450783ef846ecb19a8c07b7dd387a6df1a3ef0309f595bd05167ea2b0773c4ed7707bb24087050c12005a531b6a1b4f751fbc2726fa8ca5bfc44e6066641b9ddaf46f79efada4802469dc228d7cd6b6208de466ee9df93127cc16918b54c01f5f6383d2ce6107fab01d90a92", 0xc5, 0x40000, 0x1}, 0x4) openat$cgroup_ro(r1, &(0x7f0000000440)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) r5 = pidfd_getfd(r1, r2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000700)={@mcast2, 0x79}) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, r6, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x880) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000980)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x7c, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc0}, 0x40000c1) 01:28:05 executing program 7: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f00000003c0)='syz0\x00', 0x1ff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x50, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000700), 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) recvfrom(0xffffffffffffffff, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r2 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:28:05 executing program 2: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000580)=""/27, 0x1b}], 0x6, &(0x7f0000000640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x1, 0x20, &(0x7f0000000740)) openat$cgroup_int(r2, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:28:05 executing program 1: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, 0x0, 0x20048011) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000700), 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) recvfrom(0xffffffffffffffff, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r2 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:28:05 executing program 5: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r0, 0x1, 0x70bd2b, 0x0, {}, [@ETHTOOL_A_EEE_TX_LPI_TIMER={0x8}, @ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x9}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r1, &(0x7f00000003c0)='syz0\x00', 0x1ff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@GTPA_LINK={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvfrom(r3, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r4 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:28:05 executing program 3: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x0, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) fork() 01:28:05 executing program 0: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x0, 0xffffffffffffffff, 0x8) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000980), 0x2080, 0x0) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:28:06 executing program 7: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f00000003c0)='syz0\x00', 0x1ff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x50, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000700), 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) recvfrom(0xffffffffffffffff, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r2 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:28:06 executing program 1: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, 0x0, 0x20048011) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000700), 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) recvfrom(0xffffffffffffffff, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r2 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:28:06 executing program 4: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0xd00, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4801) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x9) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r2, &(0x7f0000000280)='syz1\x00', 0x1ff) socketpair(0x1, 0xa, 0x4, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000300)="dc2954afc7f767f4dbf018f657f3e70e2728fdf6934804b3d805638cc80fa6815c12f90caf1f9cc916d126b9e38ba17e2c0b46177e5cc7c80bb767c5a30280437f12572822b52ec2b7a0edee2afe34ffa7f77901699dcb1d91450783ef846ecb19a8c07b7dd387a6df1a3ef0309f595bd05167ea2b0773c4ed7707bb24087050c12005a531b6a1b4f751fbc2726fa8ca5bfc44e6066641b9ddaf46f79efada4802469dc228d7cd6b6208de466ee9df93127cc16918b54c01f5f6383d2ce6107fab01d90a92", 0xc5, 0x40000, 0x1}, 0x4) openat$cgroup_ro(r1, &(0x7f0000000440)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) r5 = pidfd_getfd(r1, r2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000700)={@mcast2, 0x79}) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, r6, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x880) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000980)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x7c, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc0}, 0x40000c1) 01:28:06 executing program 0: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x0, 0xffffffffffffffff, 0x8) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000980), 0x2080, 0x0) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:28:06 executing program 6: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x0, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000580)=""/27, 0x1b}], 0x6, &(0x7f0000000640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x1, 0x20, &(0x7f0000000740)) openat$cgroup_int(r2, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$cgroup_int(r4, &(0x7f0000000800)='notify_on_release\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:28:06 executing program 3: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x0, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) fork() 01:28:07 executing program 2: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000580)=""/27, 0x1b}], 0x6, &(0x7f0000000640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x1, 0x20, &(0x7f0000000740)) openat$cgroup_int(r2, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:28:07 executing program 5: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x3c, r0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_EEE_TX_LPI_TIMER={0x8}, @ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r1, &(0x7f00000003c0)='syz0\x00', 0x1ff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@GTPA_LINK={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvfrom(r3, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r4 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:28:07 executing program 7: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f00000003c0)='syz0\x00', 0x1ff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x50, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000700), 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) recvfrom(0xffffffffffffffff, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r2 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:28:07 executing program 6: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x0, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000580)=""/27, 0x1b}], 0x6, &(0x7f0000000640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x1, 0x20, &(0x7f0000000740)) openat$cgroup_int(r2, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$cgroup_int(r4, &(0x7f0000000800)='notify_on_release\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:28:07 executing program 1: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, 0x0, 0x20048011) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000700), 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) recvfrom(0xffffffffffffffff, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r2 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:28:29 executing program 4: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0xd00, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4801) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x9) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r2, &(0x7f0000000280)='syz1\x00', 0x1ff) socketpair(0x1, 0xa, 0x4, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000300)="dc2954afc7f767f4dbf018f657f3e70e2728fdf6934804b3d805638cc80fa6815c12f90caf1f9cc916d126b9e38ba17e2c0b46177e5cc7c80bb767c5a30280437f12572822b52ec2b7a0edee2afe34ffa7f77901699dcb1d91450783ef846ecb19a8c07b7dd387a6df1a3ef0309f595bd05167ea2b0773c4ed7707bb24087050c12005a531b6a1b4f751fbc2726fa8ca5bfc44e6066641b9ddaf46f79efada4802469dc228d7cd6b6208de466ee9df93127cc16918b54c01f5f6383d2ce6107fab01d90a92", 0xc5, 0x40000, 0x1}, 0x4) openat$cgroup_ro(r1, &(0x7f0000000440)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) r5 = pidfd_getfd(r1, r2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000700)={@mcast2, 0x79}) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, r6, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x880) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000980)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x7c, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc0}, 0x40000c1) 01:28:29 executing program 0: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x0, 0xffffffffffffffff, 0x8) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000980), 0x2080, 0x0) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:28:29 executing program 5: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x3c, r0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_EEE_TX_LPI_TIMER={0x8}, @ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r1, &(0x7f00000003c0)='syz0\x00', 0x1ff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@GTPA_LINK={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvfrom(r3, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r4 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:28:29 executing program 1: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000700), 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) recvfrom(0xffffffffffffffff, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r2 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:28:29 executing program 6: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x0, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000580)=""/27, 0x1b}], 0x6, &(0x7f0000000640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x1, 0x20, &(0x7f0000000740)) openat$cgroup_int(r2, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$cgroup_int(r4, &(0x7f0000000800)='notify_on_release\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:28:29 executing program 2: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000580)=""/27, 0x1b}], 0x6, &(0x7f0000000640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x1, 0x20, &(0x7f0000000740)) openat$cgroup_int(r2, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:28:29 executing program 7: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f00000003c0)='syz0\x00', 0x1ff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x50, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000700), 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) recvfrom(0xffffffffffffffff, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r2 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:28:29 executing program 3: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x0, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) fork() 01:28:30 executing program 6: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x0, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000580)=""/27, 0x1b}], 0x6, &(0x7f0000000640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x1, 0x20, &(0x7f0000000740)) openat$cgroup_int(r2, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$cgroup_int(r4, &(0x7f0000000800)='notify_on_release\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:28:30 executing program 1: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000700), 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) recvfrom(0xffffffffffffffff, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r2 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:28:30 executing program 1: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000700), 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) recvfrom(0xffffffffffffffff, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r2 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:28:30 executing program 0: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000980), 0x2080, 0x0) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:28:30 executing program 3: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x0, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) fork() 01:28:30 executing program 4: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0xd00, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4801) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x9) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r2, &(0x7f0000000280)='syz1\x00', 0x1ff) socketpair(0x1, 0xa, 0x4, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000300)="dc2954afc7f767f4dbf018f657f3e70e2728fdf6934804b3d805638cc80fa6815c12f90caf1f9cc916d126b9e38ba17e2c0b46177e5cc7c80bb767c5a30280437f12572822b52ec2b7a0edee2afe34ffa7f77901699dcb1d91450783ef846ecb19a8c07b7dd387a6df1a3ef0309f595bd05167ea2b0773c4ed7707bb24087050c12005a531b6a1b4f751fbc2726fa8ca5bfc44e6066641b9ddaf46f79efada4802469dc228d7cd6b6208de466ee9df93127cc16918b54c01f5f6383d2ce6107fab01d90a92b6", 0xc6, 0x0, 0x1}, 0x4) openat$cgroup_ro(r1, &(0x7f0000000440)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) r5 = pidfd_getfd(r1, r2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000700)={@mcast2, 0x79}) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, r6, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x880) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000980)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x7c, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc0}, 0x40000c1) 01:28:51 executing program 6: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000580)=""/27, 0x1b}], 0x6, &(0x7f0000000640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x1, 0x20, &(0x7f0000000740)) openat$cgroup_int(r2, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$cgroup_int(r4, &(0x7f0000000800)='notify_on_release\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:28:51 executing program 7: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f00000003c0)='syz0\x00', 0x1ff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x58, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000700), 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) recvfrom(0xffffffffffffffff, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r2 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:28:51 executing program 5: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x3c, r0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_EEE_TX_LPI_TIMER={0x8}, @ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r1, &(0x7f00000003c0)='syz0\x00', 0x1ff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@GTPA_LINK={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvfrom(r3, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r4 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:28:51 executing program 4: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0xd00, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4801) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x9) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r2, &(0x7f0000000280)='syz1\x00', 0x1ff) socketpair(0x1, 0xa, 0x4, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000300)="dc2954afc7f767f4dbf018f657f3e70e2728fdf6934804b3d805638cc80fa6815c12f90caf1f9cc916d126b9e38ba17e2c0b46177e5cc7c80bb767c5a30280437f12572822b52ec2b7a0edee2afe34ffa7f77901699dcb1d91450783ef846ecb19a8c07b7dd387a6df1a3ef0309f595bd05167ea2b0773c4ed7707bb24087050c12005a531b6a1b4f751fbc2726fa8ca5bfc44e6066641b9ddaf46f79efada4802469dc228d7cd6b6208de466ee9df93127cc16918b54c01f5f6383d2ce6107fab01d90a92b6", 0xc6, 0x0, 0x1}, 0x4) openat$cgroup_ro(r1, &(0x7f0000000440)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) r5 = pidfd_getfd(r1, r2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000700)={@mcast2, 0x79}) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, r6, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x880) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000980)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x7c, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc0}, 0x40000c1) 01:28:51 executing program 0: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000980), 0x2080, 0x0) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:28:51 executing program 2: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000580)=""/27, 0x1b}], 0x6, &(0x7f0000000640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x1, 0x20, &(0x7f0000000740)) openat$cgroup_int(r2, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:28:51 executing program 1: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000700), 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) recvfrom(0xffffffffffffffff, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r2 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:28:51 executing program 3: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x0, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) fork() 01:28:51 executing program 7: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f00000003c0)='syz0\x00', 0x1ff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x58, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000700), 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) recvfrom(0xffffffffffffffff, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r2 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:28:51 executing program 2: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000580)=""/27, 0x1b}], 0x6, &(0x7f0000000640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x1, 0x20, &(0x7f0000000740)) openat$cgroup_int(r2, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:28:51 executing program 4: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0xd00, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4801) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x9) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r2, &(0x7f0000000280)='syz1\x00', 0x1ff) socketpair(0x1, 0xa, 0x4, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000300)="dc2954afc7f767f4dbf018f657f3e70e2728fdf6934804b3d805638cc80fa6815c12f90caf1f9cc916d126b9e38ba17e2c0b46177e5cc7c80bb767c5a30280437f12572822b52ec2b7a0edee2afe34ffa7f77901699dcb1d91450783ef846ecb19a8c07b7dd387a6df1a3ef0309f595bd05167ea2b0773c4ed7707bb24087050c12005a531b6a1b4f751fbc2726fa8ca5bfc44e6066641b9ddaf46f79efada4802469dc228d7cd6b6208de466ee9df93127cc16918b54c01f5f6383d2ce6107fab01d90a92b6", 0xc6, 0x0, 0x1}, 0x4) openat$cgroup_ro(r1, &(0x7f0000000440)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) r5 = pidfd_getfd(r1, r2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000700)={@mcast2, 0x79}) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, r6, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x880) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000980)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x7c, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc0}, 0x40000c1) 01:28:52 executing program 3: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x0, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) fork() 01:28:52 executing program 0: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000980), 0x2080, 0x0) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:28:52 executing program 6: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000580)=""/27, 0x1b}], 0x6, &(0x7f0000000640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x1, 0x20, &(0x7f0000000740)) openat$cgroup_int(r2, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$cgroup_int(r4, &(0x7f0000000800)='notify_on_release\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:28:52 executing program 7: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f00000003c0)='syz0\x00', 0x1ff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x58, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000700), 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) recvfrom(0xffffffffffffffff, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r2 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:28:52 executing program 5: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x3c, r0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_EEE_TX_LPI_TIMER={0x8}, @ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r1, &(0x7f00000003c0)='syz0\x00', 0x1ff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@GTPA_LINK={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvfrom(r3, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r4 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:28:52 executing program 1: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000700), 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) recvfrom(0xffffffffffffffff, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r2 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:28:52 executing program 4: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0xd00, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4801) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x9) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r2, &(0x7f0000000280)='syz1\x00', 0x1ff) socketpair(0x1, 0xa, 0x4, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000300)="dc2954afc7f767f4dbf018f657f3e70e2728fdf6934804b3d805638cc80fa6815c12f90caf1f9cc916d126b9e38ba17e2c0b46177e5cc7c80bb767c5a30280437f12572822b52ec2b7a0edee2afe34ffa7f77901699dcb1d91450783ef846ecb19a8c07b7dd387a6df1a3ef0309f595bd05167ea2b0773c4ed7707bb24087050c12005a531b6a1b4f751fbc2726fa8ca5bfc44e6066641b9ddaf46f79efada4802469dc228d7cd6b6208de466ee9df93127cc16918b54c01f5f6383d2ce6107fab01d90a92b6", 0xc6, 0x40000}, 0x4) openat$cgroup_ro(r1, &(0x7f0000000440)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) r5 = pidfd_getfd(r1, r2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000700)={@mcast2, 0x79}) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, r6, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x880) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000980)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x7c, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc0}, 0x40000c1) 01:29:14 executing program 2: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000580)=""/27, 0x1b}], 0x6, &(0x7f0000000640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x1, 0x20, &(0x7f0000000740)) openat$cgroup_int(r2, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:29:14 executing program 5: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x3c, r0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_EEE_TX_LPI_TIMER={0x8}, @ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r1, &(0x7f00000003c0)='syz0\x00', 0x1ff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@GTPA_LINK={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvfrom(r3, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r4 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:29:14 executing program 1: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000700), 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) recvfrom(0xffffffffffffffff, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r2 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:29:14 executing program 7: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f00000003c0)='syz0\x00', 0x1ff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x50, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000700), 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) recvfrom(0xffffffffffffffff, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r2 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:29:14 executing program 0: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000980), 0x2080, 0x0) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:29:14 executing program 3: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x0, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) fork() 01:29:14 executing program 6: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000580)=""/27, 0x1b}], 0x6, &(0x7f0000000640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x1, 0x20, &(0x7f0000000740)) openat$cgroup_int(r2, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$cgroup_int(r4, &(0x7f0000000800)='notify_on_release\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:29:14 executing program 4: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0xd00, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4801) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x9) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r2, &(0x7f0000000280)='syz1\x00', 0x1ff) socketpair(0x1, 0xa, 0x4, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000300)="dc2954afc7f767f4dbf018f657f3e70e2728fdf6934804b3d805638cc80fa6815c12f90caf1f9cc916d126b9e38ba17e2c0b46177e5cc7c80bb767c5a30280437f12572822b52ec2b7a0edee2afe34ffa7f77901699dcb1d91450783ef846ecb19a8c07b7dd387a6df1a3ef0309f595bd05167ea2b0773c4ed7707bb24087050c12005a531b6a1b4f751fbc2726fa8ca5bfc44e6066641b9ddaf46f79efada4802469dc228d7cd6b6208de466ee9df93127cc16918b54c01f5f6383d2ce6107fab01d90a92b6", 0xc6, 0x40000}, 0x4) openat$cgroup_ro(r1, &(0x7f0000000440)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) r5 = pidfd_getfd(r1, r2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000700)={@mcast2, 0x79}) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, r6, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x880) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000980)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x7c, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc0}, 0x40000c1) 01:29:15 executing program 3: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) fork() 01:29:15 executing program 0: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000980), 0x2080, 0x0) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:29:32 executing program 4: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0xd00, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4801) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x9) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r2, &(0x7f0000000280)='syz1\x00', 0x1ff) socketpair(0x1, 0xa, 0x4, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000300)="dc2954afc7f767f4dbf018f657f3e70e2728fdf6934804b3d805638cc80fa6815c12f90caf1f9cc916d126b9e38ba17e2c0b46177e5cc7c80bb767c5a30280437f12572822b52ec2b7a0edee2afe34ffa7f77901699dcb1d91450783ef846ecb19a8c07b7dd387a6df1a3ef0309f595bd05167ea2b0773c4ed7707bb24087050c12005a531b6a1b4f751fbc2726fa8ca5bfc44e6066641b9ddaf46f79efada4802469dc228d7cd6b6208de466ee9df93127cc16918b54c01f5f6383d2ce6107fab01d90a92b6", 0xc6, 0x40000}, 0x4) openat$cgroup_ro(r1, &(0x7f0000000440)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) r5 = pidfd_getfd(r1, r2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000700)={@mcast2, 0x79}) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, r6, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x880) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000980)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x7c, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc0}, 0x40000c1) 01:29:32 executing program 5: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x3c, r0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_EEE_TX_LPI_TIMER={0x8}, @ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r1, &(0x7f00000003c0)='syz0\x00', 0x1ff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@GTPA_LINK={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvfrom(r3, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r4 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:29:32 executing program 0: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000980), 0x2080, 0x0) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:29:32 executing program 6: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000580)=""/27, 0x1b}], 0x6, &(0x7f0000000640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x1, 0x20, &(0x7f0000000740)) openat$cgroup_int(r2, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$cgroup_int(r4, &(0x7f0000000800)='notify_on_release\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:29:32 executing program 2: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000580)=""/27, 0x1b}], 0x6, &(0x7f0000000640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x1, 0x20, &(0x7f0000000740)) openat$cgroup_int(r2, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:29:32 executing program 7: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f00000003c0)='syz0\x00', 0x1ff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x50, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000700), 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) recvfrom(0xffffffffffffffff, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r2 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:29:32 executing program 3: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) fork() 01:29:32 executing program 1: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000700), 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) recvfrom(0xffffffffffffffff, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r2 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:29:33 executing program 0: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, 0x0, 0xa00, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000980), 0x2080, 0x0) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:29:33 executing program 1: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000700), 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) recvfrom(0xffffffffffffffff, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r2 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:29:33 executing program 7: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f00000003c0)='syz0\x00', 0x1ff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x50, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000700), 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) recvfrom(0xffffffffffffffff, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r2 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:29:33 executing program 3: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) fork() 01:29:33 executing program 6: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000580)=""/27, 0x1b}], 0x6, &(0x7f0000000640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x1, 0x20, &(0x7f0000000740)) openat$cgroup_int(r2, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$cgroup_int(r4, &(0x7f0000000800)='notify_on_release\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:29:33 executing program 2: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000580)=""/27, 0x1b}], 0x6, &(0x7f0000000640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x1, 0x20, &(0x7f0000000740)) openat$cgroup_int(r2, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:29:33 executing program 4: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0xd00, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4801) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x9) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r2, &(0x7f0000000280)='syz1\x00', 0x1ff) socketpair(0x1, 0xa, 0x4, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000300)="dc2954afc7f767f4dbf018f657f3e70e2728fdf6934804b3d805638cc80fa6815c12f90caf1f9cc916d126b9e38ba17e2c0b46177e5cc7c80bb767c5a30280437f12572822b52ec2b7a0edee2afe34ffa7f77901699dcb1d91450783ef846ecb19a8c07b7dd387a6df1a3ef0309f595bd05167ea2b0773c4ed7707bb24087050c12005a531b6a1b4f751fbc2726fa8ca5bfc44e6066641b9ddaf46f79efada4802469dc228d7cd6b6208de466ee9df93127cc16918b54c01f5f6383d2ce6107fab01d90a92b6", 0xc6, 0x40000, 0x1}, 0x0) openat$cgroup_ro(r1, &(0x7f0000000440)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) r5 = pidfd_getfd(r1, r2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000700)={@mcast2, 0x79}) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, r6, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x880) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000980)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x7c, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc0}, 0x40000c1) 01:29:33 executing program 0: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, 0x0, 0xa00, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000980), 0x2080, 0x0) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:29:34 executing program 5: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_EEE_TX_LPI_TIMER={0x8}, @ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r1, &(0x7f00000003c0)='syz0\x00', 0x1ff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@GTPA_LINK={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvfrom(r3, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r4 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:29:34 executing program 4: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0xd00, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4801) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x9) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r2, &(0x7f0000000280)='syz1\x00', 0x1ff) socketpair(0x1, 0xa, 0x4, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000300)="dc2954afc7f767f4dbf018f657f3e70e2728fdf6934804b3d805638cc80fa6815c12f90caf1f9cc916d126b9e38ba17e2c0b46177e5cc7c80bb767c5a30280437f12572822b52ec2b7a0edee2afe34ffa7f77901699dcb1d91450783ef846ecb19a8c07b7dd387a6df1a3ef0309f595bd05167ea2b0773c4ed7707bb24087050c12005a531b6a1b4f751fbc2726fa8ca5bfc44e6066641b9ddaf46f79efada4802469dc228d7cd6b6208de466ee9df93127cc16918b54c01f5f6383d2ce6107fab01d90a92b6", 0xc6, 0x40000, 0x1}, 0x0) openat$cgroup_ro(r1, &(0x7f0000000440)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) r5 = pidfd_getfd(r1, r2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000700)={@mcast2, 0x79}) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, r6, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x880) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000980)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x7c, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc0}, 0x40000c1) 01:29:34 executing program 1: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000700), 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) recvfrom(0xffffffffffffffff, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r2 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:29:34 executing program 3: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) fork() 01:29:34 executing program 7: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f00000003c0)='syz0\x00', 0x1ff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x58, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000700), 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) recvfrom(0xffffffffffffffff, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r2 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:29:34 executing program 0: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, 0x0, 0xa00, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000980), 0x2080, 0x0) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:29:34 executing program 6: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000580)=""/27, 0x1b}], 0x6, &(0x7f0000000640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x1, 0x20, &(0x7f0000000740)) openat$cgroup_int(r2, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$cgroup_int(r4, &(0x7f0000000800)='notify_on_release\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:29:34 executing program 4: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0xd00, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4801) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x9) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r2, &(0x7f0000000280)='syz1\x00', 0x1ff) socketpair(0x1, 0xa, 0x4, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000300)="dc2954afc7f767f4dbf018f657f3e70e2728fdf6934804b3d805638cc80fa6815c12f90caf1f9cc916d126b9e38ba17e2c0b46177e5cc7c80bb767c5a30280437f12572822b52ec2b7a0edee2afe34ffa7f77901699dcb1d91450783ef846ecb19a8c07b7dd387a6df1a3ef0309f595bd05167ea2b0773c4ed7707bb24087050c12005a531b6a1b4f751fbc2726fa8ca5bfc44e6066641b9ddaf46f79efada4802469dc228d7cd6b6208de466ee9df93127cc16918b54c01f5f6383d2ce6107fab01d90a92b6", 0xc6, 0x40000, 0x1}, 0x0) openat$cgroup_ro(r1, &(0x7f0000000440)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) r5 = pidfd_getfd(r1, r2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000700)={@mcast2, 0x79}) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, r6, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x880) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000980)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x7c, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc0}, 0x40000c1) 01:29:57 executing program 5: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_EEE_TX_LPI_TIMER={0x8}, @ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r1, &(0x7f00000003c0)='syz0\x00', 0x1ff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@GTPA_LINK={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvfrom(r3, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r4 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:29:57 executing program 2: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000580)=""/27, 0x1b}], 0x6, &(0x7f0000000640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x1, 0x20, &(0x7f0000000740)) openat$cgroup_int(r2, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:29:57 executing program 4: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0xd00, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4801) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x9) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r2, &(0x7f0000000280)='syz1\x00', 0x1ff) socketpair(0x1, 0xa, 0x4, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000300)="dc2954afc7f767f4dbf018f657f3e70e2728fdf6934804b3d805638cc80fa6815c12f90caf1f9cc916d126b9e38ba17e2c0b46177e5cc7c80bb767c5a30280437f12572822b52ec2b7a0edee2afe34ffa7f77901699dcb1d91450783ef846ecb19a8c07b7dd387a6df1a3ef0309f595bd05167ea2b0773c4ed7707bb24087050c12005a531b6a1b4f751fbc2726fa8ca5bfc44e6066641b9ddaf46f79efada4802469dc228d7cd6b6208de466ee9df93127cc16918b54c01f5f6383d2ce6107fab01d90a92b6", 0xc6, 0x40000, 0x1}, 0x4) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) r5 = pidfd_getfd(r1, r2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000700)={@mcast2, 0x79}) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, r6, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x880) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000980)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x7c, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc0}, 0x40000c1) 01:29:57 executing program 7: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f00000003c0)='syz0\x00', 0x1ff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x58, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000700), 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) recvfrom(0xffffffffffffffff, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r2 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:29:57 executing program 1: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0}, 0x20048011) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000700), 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) recvfrom(0xffffffffffffffff, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r2 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:29:57 executing program 3: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) fork() 01:29:57 executing program 0: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000980), 0x2080, 0x0) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:29:57 executing program 6: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000580)=""/27, 0x1b}], 0x6, &(0x7f0000000640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x1, 0x20, &(0x7f0000000740)) openat$cgroup_int(r2, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$cgroup_int(r4, &(0x7f0000000800)='notify_on_release\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:29:57 executing program 4: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0xd00, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4801) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x9) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r2, &(0x7f0000000280)='syz1\x00', 0x1ff) socketpair(0x1, 0xa, 0x4, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000300)="dc2954afc7f767f4dbf018f657f3e70e2728fdf6934804b3d805638cc80fa6815c12f90caf1f9cc916d126b9e38ba17e2c0b46177e5cc7c80bb767c5a30280437f12572822b52ec2b7a0edee2afe34ffa7f77901699dcb1d91450783ef846ecb19a8c07b7dd387a6df1a3ef0309f595bd05167ea2b0773c4ed7707bb24087050c12005a531b6a1b4f751fbc2726fa8ca5bfc44e6066641b9ddaf46f79efada4802469dc228d7cd6b6208de466ee9df93127cc16918b54c01f5f6383d2ce6107fab01d90a92b6", 0xc6, 0x40000, 0x1}, 0x4) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) r5 = pidfd_getfd(r1, r2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000700)={@mcast2, 0x79}) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, r6, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x880) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000980)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x7c, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc0}, 0x40000c1) 01:29:57 executing program 2: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000580)=""/27, 0x1b}], 0x6, &(0x7f0000000640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x1, 0x20, &(0x7f0000000740)) openat$cgroup_int(r2, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:29:57 executing program 1: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0}, 0x20048011) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000700), 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) recvfrom(0xffffffffffffffff, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r2 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:29:57 executing program 6: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000580)=""/27, 0x1b}], 0x6, &(0x7f0000000640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x1, 0x20, &(0x7f0000000740)) openat$cgroup_int(r2, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$cgroup_int(r4, &(0x7f0000000800)='notify_on_release\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:29:57 executing program 0: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000980), 0x2080, 0x0) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:29:58 executing program 4: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0xd00, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4801) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x9) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r2, &(0x7f0000000280)='syz1\x00', 0x1ff) socketpair(0x1, 0xa, 0x4, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000300)="dc2954afc7f767f4dbf018f657f3e70e2728fdf6934804b3d805638cc80fa6815c12f90caf1f9cc916d126b9e38ba17e2c0b46177e5cc7c80bb767c5a30280437f12572822b52ec2b7a0edee2afe34ffa7f77901699dcb1d91450783ef846ecb19a8c07b7dd387a6df1a3ef0309f595bd05167ea2b0773c4ed7707bb24087050c12005a531b6a1b4f751fbc2726fa8ca5bfc44e6066641b9ddaf46f79efada4802469dc228d7cd6b6208de466ee9df93127cc16918b54c01f5f6383d2ce6107fab01d90a92b6", 0xc6, 0x40000, 0x1}, 0x4) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) r5 = pidfd_getfd(r1, r2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000700)={@mcast2, 0x79}) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, r6, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x880) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000980)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x7c, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc0}, 0x40000c1) 01:30:21 executing program 3: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) fork() 01:30:21 executing program 6: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000580)=""/27, 0x1b}], 0x6, &(0x7f0000000640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x1, 0x20, &(0x7f0000000740)) openat$cgroup_int(r2, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$cgroup_int(r4, &(0x7f0000000800)='notify_on_release\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:30:21 executing program 0: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000980), 0x2080, 0x0) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:30:21 executing program 5: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_EEE_TX_LPI_TIMER={0x8}, @ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r1, &(0x7f00000003c0)='syz0\x00', 0x1ff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@GTPA_LINK={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvfrom(r3, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r4 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:30:21 executing program 4: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0xd00, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4801) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x9) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r2, &(0x7f0000000280)='syz1\x00', 0x1ff) socketpair(0x1, 0xa, 0x4, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000300)="dc2954afc7f767f4dbf018f657f3e70e2728fdf6934804b3d805638cc80fa6815c12f90caf1f9cc916d126b9e38ba17e2c0b46177e5cc7c80bb767c5a30280437f12572822b52ec2b7a0edee2afe34ffa7f77901699dcb1d91450783ef846ecb19a8c07b7dd387a6df1a3ef0309f595bd05167ea2b0773c4ed7707bb24087050c12005a531b6a1b4f751fbc2726fa8ca5bfc44e6066641b9ddaf46f79efada4802469dc228d7cd6b6208de466ee9df93127cc16918b54c01f5f6383d2ce6107fab01d90a92b6", 0xc6, 0x40000, 0x1}, 0x4) openat$cgroup_ro(r1, 0x0, 0x0, 0x0) r5 = pidfd_getfd(r1, r2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000700)={@mcast2, 0x79}) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, r6, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x880) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000980)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x7c, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc0}, 0x40000c1) 01:30:21 executing program 2: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000580)=""/27, 0x1b}], 0x6, &(0x7f0000000640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x1, 0x20, &(0x7f0000000740)) openat$cgroup_int(r2, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:30:21 executing program 7: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f00000003c0)='syz0\x00', 0x1ff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x58, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000700), 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) recvfrom(0xffffffffffffffff, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r2 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:30:21 executing program 1: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0}, 0x20048011) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000700), 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) recvfrom(0xffffffffffffffff, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r2 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:30:21 executing program 4: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0xd00, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4801) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x9) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r2, &(0x7f0000000280)='syz1\x00', 0x1ff) socketpair(0x1, 0xa, 0x4, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000300)="dc2954afc7f767f4dbf018f657f3e70e2728fdf6934804b3d805638cc80fa6815c12f90caf1f9cc916d126b9e38ba17e2c0b46177e5cc7c80bb767c5a30280437f12572822b52ec2b7a0edee2afe34ffa7f77901699dcb1d91450783ef846ecb19a8c07b7dd387a6df1a3ef0309f595bd05167ea2b0773c4ed7707bb24087050c12005a531b6a1b4f751fbc2726fa8ca5bfc44e6066641b9ddaf46f79efada4802469dc228d7cd6b6208de466ee9df93127cc16918b54c01f5f6383d2ce6107fab01d90a92b6", 0xc6, 0x40000, 0x1}, 0x4) openat$cgroup_ro(r1, 0x0, 0x0, 0x0) r5 = pidfd_getfd(r1, r2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000700)={@mcast2, 0x79}) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, r6, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x880) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000980)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x7c, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc0}, 0x40000c1) 01:30:46 executing program 1: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x280008c4}, 0x0) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000700), 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) recvfrom(0xffffffffffffffff, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r2 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:30:46 executing program 5: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x2c, r0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_EEE_TX_LPI_TIMER={0x8}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x9}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r1, &(0x7f00000003c0)='syz0\x00', 0x1ff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@GTPA_LINK={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvfrom(r3, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r4 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:30:46 executing program 2: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000580)=""/27, 0x1b}], 0x6, &(0x7f0000000640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x1, 0x20, &(0x7f0000000740)) openat$cgroup_int(r2, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:30:46 executing program 7: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f00000003c0)='syz0\x00', 0x1ff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x50, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000700), 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) recvfrom(0xffffffffffffffff, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r2 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:30:46 executing program 6: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x75efb9ad, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000580)=""/27, 0x1b}], 0x6, &(0x7f0000000640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x1, 0x20, &(0x7f0000000740)) openat$cgroup_int(r2, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$cgroup_int(r4, &(0x7f0000000800)='notify_on_release\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:30:46 executing program 0: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x2080, 0x0) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:30:46 executing program 4: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0xd00, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4801) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x9) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r2, &(0x7f0000000280)='syz1\x00', 0x1ff) socketpair(0x1, 0xa, 0x4, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000300)="dc2954afc7f767f4dbf018f657f3e70e2728fdf6934804b3d805638cc80fa6815c12f90caf1f9cc916d126b9e38ba17e2c0b46177e5cc7c80bb767c5a30280437f12572822b52ec2b7a0edee2afe34ffa7f77901699dcb1d91450783ef846ecb19a8c07b7dd387a6df1a3ef0309f595bd05167ea2b0773c4ed7707bb24087050c12005a531b6a1b4f751fbc2726fa8ca5bfc44e6066641b9ddaf46f79efada4802469dc228d7cd6b6208de466ee9df93127cc16918b54c01f5f6383d2ce6107fab01d90a92b6", 0xc6, 0x40000, 0x1}, 0x4) openat$cgroup_ro(r1, 0x0, 0x0, 0x0) r5 = pidfd_getfd(r1, r2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000700)={@mcast2, 0x79}) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, r6, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x880) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000980)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x7c, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc0}, 0x40000c1) 01:30:46 executing program 3: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) fork() 01:30:47 executing program 3: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) fork() 01:30:47 executing program 4: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0xd00, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4801) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x9) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r2, &(0x7f0000000280)='syz1\x00', 0x1ff) socketpair(0x1, 0xa, 0x4, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000300)="dc2954afc7f767f4dbf018f657f3e70e2728fdf6934804b3d805638cc80fa6815c12f90caf1f9cc916d126b9e38ba17e2c0b46177e5cc7c80bb767c5a30280437f12572822b52ec2b7a0edee2afe34ffa7f77901699dcb1d91450783ef846ecb19a8c07b7dd387a6df1a3ef0309f595bd05167ea2b0773c4ed7707bb24087050c12005a531b6a1b4f751fbc2726fa8ca5bfc44e6066641b9ddaf46f79efada4802469dc228d7cd6b6208de466ee9df93127cc16918b54c01f5f6383d2ce6107fab01d90a92b6", 0xc6, 0x40000, 0x1}, 0x4) openat$cgroup_ro(r1, &(0x7f0000000440)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) r5 = pidfd_getfd(0xffffffffffffffff, r2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000700)={@mcast2, 0x79}) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, r6, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x880) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000980)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x7c, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc0}, 0x40000c1) 01:30:47 executing program 7: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f00000003c0)='syz0\x00', 0x1ff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x50, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000700), 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) recvfrom(0xffffffffffffffff, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r2 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:30:47 executing program 6: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x75efb9ad, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000580)=""/27, 0x1b}], 0x6, &(0x7f0000000640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x1, 0x20, &(0x7f0000000740)) openat$cgroup_int(r2, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$cgroup_int(r4, &(0x7f0000000800)='notify_on_release\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:30:47 executing program 0: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x2080, 0x0) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:30:47 executing program 4: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0xd00, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4801) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x9) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r2, &(0x7f0000000280)='syz1\x00', 0x1ff) socketpair(0x1, 0xa, 0x4, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000300)="dc2954afc7f767f4dbf018f657f3e70e2728fdf6934804b3d805638cc80fa6815c12f90caf1f9cc916d126b9e38ba17e2c0b46177e5cc7c80bb767c5a30280437f12572822b52ec2b7a0edee2afe34ffa7f77901699dcb1d91450783ef846ecb19a8c07b7dd387a6df1a3ef0309f595bd05167ea2b0773c4ed7707bb24087050c12005a531b6a1b4f751fbc2726fa8ca5bfc44e6066641b9ddaf46f79efada4802469dc228d7cd6b6208de466ee9df93127cc16918b54c01f5f6383d2ce6107fab01d90a92b6", 0xc6, 0x40000, 0x1}, 0x4) openat$cgroup_ro(r1, &(0x7f0000000440)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) r5 = pidfd_getfd(0xffffffffffffffff, r2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000700)={@mcast2, 0x79}) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, r6, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x880) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000980)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x7c, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc0}, 0x40000c1) 01:30:47 executing program 3: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) fork() 01:30:47 executing program 2: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000580)=""/27, 0x1b}], 0x6, &(0x7f0000000640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x1, 0x20, &(0x7f0000000740)) openat$cgroup_int(r2, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:30:48 executing program 0: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x2080, 0x0) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:30:48 executing program 1: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x280008c4}, 0x0) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000700), 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) recvfrom(0xffffffffffffffff, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r2 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:30:48 executing program 5: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x2c, r0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_EEE_TX_LPI_TIMER={0x8}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x9}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r1, &(0x7f00000003c0)='syz0\x00', 0x1ff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@GTPA_LINK={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvfrom(r3, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r4 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:30:48 executing program 4: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0xd00, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4801) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x9) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r2, &(0x7f0000000280)='syz1\x00', 0x1ff) socketpair(0x1, 0xa, 0x4, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000300)="dc2954afc7f767f4dbf018f657f3e70e2728fdf6934804b3d805638cc80fa6815c12f90caf1f9cc916d126b9e38ba17e2c0b46177e5cc7c80bb767c5a30280437f12572822b52ec2b7a0edee2afe34ffa7f77901699dcb1d91450783ef846ecb19a8c07b7dd387a6df1a3ef0309f595bd05167ea2b0773c4ed7707bb24087050c12005a531b6a1b4f751fbc2726fa8ca5bfc44e6066641b9ddaf46f79efada4802469dc228d7cd6b6208de466ee9df93127cc16918b54c01f5f6383d2ce6107fab01d90a92b6", 0xc6, 0x40000, 0x1}, 0x4) openat$cgroup_ro(r1, &(0x7f0000000440)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) r5 = pidfd_getfd(0xffffffffffffffff, r2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000700)={@mcast2, 0x79}) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, r6, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x880) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000980)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x7c, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc0}, 0x40000c1) 01:30:48 executing program 6: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x75efb9ad, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000580)=""/27, 0x1b}], 0x6, &(0x7f0000000640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x1, 0x20, &(0x7f0000000740)) openat$cgroup_int(r2, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$cgroup_int(r4, &(0x7f0000000800)='notify_on_release\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:30:48 executing program 0: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:30:48 executing program 7: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f00000003c0)='syz0\x00', 0x1ff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x50, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000700), 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) recvfrom(0xffffffffffffffff, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r2 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:30:48 executing program 4: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0xd00, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4801) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x9) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r2, &(0x7f0000000280)='syz1\x00', 0x1ff) socketpair(0x1, 0xa, 0x4, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000300)="dc2954afc7f767f4dbf018f657f3e70e2728fdf6934804b3d805638cc80fa6815c12f90caf1f9cc916d126b9e38ba17e2c0b46177e5cc7c80bb767c5a30280437f12572822b52ec2b7a0edee2afe34ffa7f77901699dcb1d91450783ef846ecb19a8c07b7dd387a6df1a3ef0309f595bd05167ea2b0773c4ed7707bb24087050c12005a531b6a1b4f751fbc2726fa8ca5bfc44e6066641b9ddaf46f79efada4802469dc228d7cd6b6208de466ee9df93127cc16918b54c01f5f6383d2ce6107fab01d90a92b6", 0xc6, 0x40000, 0x1}, 0x4) openat$cgroup_ro(r1, &(0x7f0000000440)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) r5 = pidfd_getfd(r1, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000700)={@mcast2, 0x79}) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, r6, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x880) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000980)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x7c, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc0}, 0x40000c1) 01:30:48 executing program 2: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000580)=""/27, 0x1b}], 0x6, &(0x7f0000000640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x1, 0x20, &(0x7f0000000740)) openat$cgroup_int(r2, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:31:12 executing program 3: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x75efb9ad, 0xffffffffffffffff, 0x8) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) fork() 01:31:12 executing program 7: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f00000003c0)='syz0\x00', 0x1ff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x58, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000700), 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) recvfrom(0xffffffffffffffff, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r2 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:31:12 executing program 5: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x2c, r0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_EEE_TX_LPI_TIMER={0x8}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x9}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r1, &(0x7f00000003c0)='syz0\x00', 0x1ff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@GTPA_LINK={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvfrom(r3, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r4 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:31:12 executing program 2: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000580)=""/27, 0x1b}], 0x6, &(0x7f0000000640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x1, 0x20, &(0x7f0000000740)) openat$cgroup_int(r2, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:31:12 executing program 1: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x280008c4}, 0x0) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000700), 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) recvfrom(0xffffffffffffffff, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r2 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:31:12 executing program 0: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:31:12 executing program 6: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x0, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000580)=""/27, 0x1b}], 0x6, &(0x7f0000000640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x1, 0x20, &(0x7f0000000740)) openat$cgroup_int(r2, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$cgroup_int(r4, &(0x7f0000000800)='notify_on_release\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:31:12 executing program 4: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0xd00, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4801) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x9) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r2, &(0x7f0000000280)='syz1\x00', 0x1ff) socketpair(0x1, 0xa, 0x4, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000300)="dc2954afc7f767f4dbf018f657f3e70e2728fdf6934804b3d805638cc80fa6815c12f90caf1f9cc916d126b9e38ba17e2c0b46177e5cc7c80bb767c5a30280437f12572822b52ec2b7a0edee2afe34ffa7f77901699dcb1d91450783ef846ecb19a8c07b7dd387a6df1a3ef0309f595bd05167ea2b0773c4ed7707bb24087050c12005a531b6a1b4f751fbc2726fa8ca5bfc44e6066641b9ddaf46f79efada4802469dc228d7cd6b6208de466ee9df93127cc16918b54c01f5f6383d2ce6107fab01d90a92b6", 0xc6, 0x40000, 0x1}, 0x4) openat$cgroup_ro(r1, &(0x7f0000000440)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) r5 = pidfd_getfd(r1, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000700)={@mcast2, 0x79}) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, r6, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x880) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000980)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x7c, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc0}, 0x40000c1) 01:31:12 executing program 6: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x0, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000580)=""/27, 0x1b}], 0x6, &(0x7f0000000640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x1, 0x20, &(0x7f0000000740)) openat$cgroup_int(r2, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$cgroup_int(r4, &(0x7f0000000800)='notify_on_release\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:31:37 executing program 0: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:31:37 executing program 4: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0xd00, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4801) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x9) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r2, &(0x7f0000000280)='syz1\x00', 0x1ff) socketpair(0x1, 0xa, 0x4, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000300)="dc2954afc7f767f4dbf018f657f3e70e2728fdf6934804b3d805638cc80fa6815c12f90caf1f9cc916d126b9e38ba17e2c0b46177e5cc7c80bb767c5a30280437f12572822b52ec2b7a0edee2afe34ffa7f77901699dcb1d91450783ef846ecb19a8c07b7dd387a6df1a3ef0309f595bd05167ea2b0773c4ed7707bb24087050c12005a531b6a1b4f751fbc2726fa8ca5bfc44e6066641b9ddaf46f79efada4802469dc228d7cd6b6208de466ee9df93127cc16918b54c01f5f6383d2ce6107fab01d90a92b6", 0xc6, 0x40000, 0x1}, 0x4) openat$cgroup_ro(r1, &(0x7f0000000440)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) r5 = pidfd_getfd(r1, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000700)={@mcast2, 0x79}) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, r6, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x880) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000980)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x7c, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc0}, 0x40000c1) 01:31:37 executing program 5: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x30, r0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_EEE_TX_LPI_TIMER={0x8}, @ETHTOOL_A_EEE_HEADER={0x4}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x9}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r1, &(0x7f00000003c0)='syz0\x00', 0x1ff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@GTPA_LINK={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvfrom(r3, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r4 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:31:37 executing program 6: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x0, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000580)=""/27, 0x1b}], 0x6, &(0x7f0000000640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x1, 0x20, &(0x7f0000000740)) openat$cgroup_int(r2, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$cgroup_int(r4, &(0x7f0000000800)='notify_on_release\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:31:37 executing program 1: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x0) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000700), 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) recvfrom(0xffffffffffffffff, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r2 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:31:37 executing program 2: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000580)=""/27, 0x1b}], 0x6, &(0x7f0000000640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x1, 0x20, &(0x7f0000000740)) openat$cgroup_int(r2, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:31:37 executing program 3: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x75efb9ad, 0xffffffffffffffff, 0x8) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) fork() 01:31:37 executing program 7: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f00000003c0)='syz0\x00', 0x1ff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x58, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000700), 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) recvfrom(0xffffffffffffffff, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r2 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:31:38 executing program 4: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0xd00, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4801) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x9) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r2, &(0x7f0000000280)='syz1\x00', 0x1ff) socketpair(0x1, 0xa, 0x4, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000300)="dc2954afc7f767f4dbf018f657f3e70e2728fdf6934804b3d805638cc80fa6815c12f90caf1f9cc916d126b9e38ba17e2c0b46177e5cc7c80bb767c5a30280437f12572822b52ec2b7a0edee2afe34ffa7f77901699dcb1d91450783ef846ecb19a8c07b7dd387a6df1a3ef0309f595bd05167ea2b0773c4ed7707bb24087050c12005a531b6a1b4f751fbc2726fa8ca5bfc44e6066641b9ddaf46f79efada4802469dc228d7cd6b6208de466ee9df93127cc16918b54c01f5f6383d2ce6107fab01d90a92b6", 0xc6, 0x40000, 0x1}, 0x4) openat$cgroup_ro(r1, &(0x7f0000000440)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) pidfd_getfd(r1, r2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000700)={@mcast2, 0x79}) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, r5, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x880) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000980)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x7c, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc0}, 0x40000c1) 01:31:38 executing program 6: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000580)=""/27, 0x1b}], 0x6, &(0x7f0000000640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x1, 0x20, &(0x7f0000000740)) openat$cgroup_int(r2, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$cgroup_int(r4, &(0x7f0000000800)='notify_on_release\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:31:38 executing program 0: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000980), 0x2080, 0x0) fork() syz_genetlink_get_family_id$fou(0x0, r0) 01:31:38 executing program 2: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000580)=""/27, 0x1b}], 0x6, &(0x7f0000000640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x1, 0x20, &(0x7f0000000740)) openat$cgroup_int(r2, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:31:38 executing program 3: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x75efb9ad, 0xffffffffffffffff, 0x8) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) fork() 01:31:38 executing program 0: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000980), 0x2080, 0x0) fork() syz_genetlink_get_family_id$fou(0x0, r0) 01:31:38 executing program 7: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f00000003c0)='syz0\x00', 0x1ff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x58, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000700), 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) recvfrom(0xffffffffffffffff, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r2 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:31:38 executing program 6: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000580)=""/27, 0x1b}], 0x6, &(0x7f0000000640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x1, 0x20, &(0x7f0000000740)) openat$cgroup_int(r2, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$cgroup_int(r4, &(0x7f0000000800)='notify_on_release\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:31:38 executing program 4: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0xd00, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4801) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x9) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r2, &(0x7f0000000280)='syz1\x00', 0x1ff) socketpair(0x1, 0xa, 0x4, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000300)="dc2954afc7f767f4dbf018f657f3e70e2728fdf6934804b3d805638cc80fa6815c12f90caf1f9cc916d126b9e38ba17e2c0b46177e5cc7c80bb767c5a30280437f12572822b52ec2b7a0edee2afe34ffa7f77901699dcb1d91450783ef846ecb19a8c07b7dd387a6df1a3ef0309f595bd05167ea2b0773c4ed7707bb24087050c12005a531b6a1b4f751fbc2726fa8ca5bfc44e6066641b9ddaf46f79efada4802469dc228d7cd6b6208de466ee9df93127cc16918b54c01f5f6383d2ce6107fab01d90a92b6", 0xc6, 0x40000, 0x1}, 0x4) openat$cgroup_ro(r1, &(0x7f0000000440)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) pidfd_getfd(r1, r2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000700)={@mcast2, 0x79}) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, r5, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x880) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000980)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x7c, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc0}, 0x40000c1) 01:31:38 executing program 1: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x0) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000700), 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) recvfrom(0xffffffffffffffff, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r2 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:31:38 executing program 5: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x30, r0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_EEE_TX_LPI_TIMER={0x8}, @ETHTOOL_A_EEE_HEADER={0x4}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x9}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r1, &(0x7f00000003c0)='syz0\x00', 0x1ff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@GTPA_LINK={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvfrom(r3, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r4 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:32:04 executing program 3: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x0, 0xffffffffffffffff, 0x8) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) fork() 01:32:04 executing program 5: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x30, r0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_EEE_TX_LPI_TIMER={0x8}, @ETHTOOL_A_EEE_HEADER={0x4}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x9}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r1, &(0x7f00000003c0)='syz0\x00', 0x1ff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@GTPA_LINK={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvfrom(r3, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r4 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:32:04 executing program 4: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0xd00, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4801) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x9) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r2, &(0x7f0000000280)='syz1\x00', 0x1ff) socketpair(0x1, 0xa, 0x4, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000300)="dc2954afc7f767f4dbf018f657f3e70e2728fdf6934804b3d805638cc80fa6815c12f90caf1f9cc916d126b9e38ba17e2c0b46177e5cc7c80bb767c5a30280437f12572822b52ec2b7a0edee2afe34ffa7f77901699dcb1d91450783ef846ecb19a8c07b7dd387a6df1a3ef0309f595bd05167ea2b0773c4ed7707bb24087050c12005a531b6a1b4f751fbc2726fa8ca5bfc44e6066641b9ddaf46f79efada4802469dc228d7cd6b6208de466ee9df93127cc16918b54c01f5f6383d2ce6107fab01d90a92b6", 0xc6, 0x40000, 0x1}, 0x4) openat$cgroup_ro(r1, &(0x7f0000000440)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) pidfd_getfd(r1, r2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000700)={@mcast2, 0x79}) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, r5, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x880) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000980)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x7c, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc0}, 0x40000c1) 01:32:04 executing program 0: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000980), 0x2080, 0x0) fork() syz_genetlink_get_family_id$fou(0x0, r0) 01:32:04 executing program 2: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0x0, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000580)=""/27, 0x1b}], 0x6, &(0x7f0000000640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x1, 0x20, &(0x7f0000000740)) openat$cgroup_int(r2, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:32:04 executing program 6: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000580)=""/27, 0x1b}], 0x6, &(0x7f0000000640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x1, 0x20, &(0x7f0000000740)) openat$cgroup_int(r2, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$cgroup_int(r4, &(0x7f0000000800)='notify_on_release\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:32:04 executing program 7: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f00000003c0)='syz0\x00', 0x1ff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x50, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000700), 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) recvfrom(0xffffffffffffffff, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r2 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:32:04 executing program 1: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x0) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000700), 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) recvfrom(0xffffffffffffffff, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r2 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:32:05 executing program 4: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0xd00, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4801) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x9) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r2, &(0x7f0000000280)='syz1\x00', 0x1ff) socketpair(0x1, 0xa, 0x4, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000300)="dc2954afc7f767f4dbf018f657f3e70e2728fdf6934804b3d805638cc80fa6815c12f90caf1f9cc916d126b9e38ba17e2c0b46177e5cc7c80bb767c5a30280437f12572822b52ec2b7a0edee2afe34ffa7f77901699dcb1d91450783ef846ecb19a8c07b7dd387a6df1a3ef0309f595bd05167ea2b0773c4ed7707bb24087050c12005a531b6a1b4f751fbc2726fa8ca5bfc44e6066641b9ddaf46f79efada4802469dc228d7cd6b6208de466ee9df93127cc16918b54c01f5f6383d2ce6107fab01d90a92b6", 0xc6, 0x40000, 0x1}, 0x4) openat$cgroup_ro(r1, &(0x7f0000000440)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) pidfd_getfd(r1, r2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, r5, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x880) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000980)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x7c, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc0}, 0x40000c1) 01:32:05 executing program 7: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f00000003c0)='syz0\x00', 0x1ff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x50, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000700), 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) recvfrom(0xffffffffffffffff, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r2 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:32:05 executing program 0: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000980), 0x2080, 0x0) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), 0xffffffffffffffff) 01:32:05 executing program 1: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x80) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000700), 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) recvfrom(0xffffffffffffffff, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r2 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:32:31 executing program 2: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0x0, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000580)=""/27, 0x1b}], 0x6, &(0x7f0000000640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x1, 0x20, &(0x7f0000000740)) openat$cgroup_int(r2, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:32:31 executing program 7: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f00000003c0)='syz0\x00', 0x1ff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x50, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000700), 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) recvfrom(0xffffffffffffffff, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r2 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:32:31 executing program 1: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x80) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000700), 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) recvfrom(0xffffffffffffffff, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r2 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:32:31 executing program 0: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000980), 0x2080, 0x0) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), 0xffffffffffffffff) 01:32:31 executing program 5: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x3c, r0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x9}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x80) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/236, 0xec, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r1, &(0x7f00000003c0)='syz0\x00', 0x1ff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@GTPA_LINK={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvfrom(r3, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r4 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:32:31 executing program 3: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x0, 0xffffffffffffffff, 0x8) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) fork() 01:32:31 executing program 4: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0xd00, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4801) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x9) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r2, &(0x7f0000000280)='syz1\x00', 0x1ff) socketpair(0x1, 0xa, 0x4, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000300)="dc2954afc7f767f4dbf018f657f3e70e2728fdf6934804b3d805638cc80fa6815c12f90caf1f9cc916d126b9e38ba17e2c0b46177e5cc7c80bb767c5a30280437f12572822b52ec2b7a0edee2afe34ffa7f77901699dcb1d91450783ef846ecb19a8c07b7dd387a6df1a3ef0309f595bd05167ea2b0773c4ed7707bb24087050c12005a531b6a1b4f751fbc2726fa8ca5bfc44e6066641b9ddaf46f79efada4802469dc228d7cd6b6208de466ee9df93127cc16918b54c01f5f6383d2ce6107fab01d90a92b6", 0xc6, 0x40000, 0x1}, 0x4) openat$cgroup_ro(r1, &(0x7f0000000440)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) pidfd_getfd(r1, r2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, r5, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x880) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000980)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x7c, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc0}, 0x40000c1) 01:32:31 executing program 6: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000580)=""/27, 0x1b}], 0x6, &(0x7f0000000640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x1, 0x20, &(0x7f0000000740)) openat$cgroup_int(r2, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$cgroup_int(r4, &(0x7f0000000800)='notify_on_release\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:32:31 executing program 3: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x0, 0xffffffffffffffff, 0x8) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) fork() 01:32:31 executing program 3: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) fork() 01:32:32 executing program 0: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000980), 0x2080, 0x0) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), 0xffffffffffffffff) 01:32:32 executing program 3: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) fork() 01:32:32 executing program 6: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000580)=""/27, 0x1b}], 0x6, &(0x7f0000000640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x1, 0x20, &(0x7f0000000740)) openat$cgroup_int(r2, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$cgroup_int(r4, &(0x7f0000000800)='notify_on_release\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) 01:32:32 executing program 4: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0xd00, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4801) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x9) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r2, &(0x7f0000000280)='syz1\x00', 0x1ff) socketpair(0x1, 0xa, 0x4, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, &(0x7f0000000300)="dc2954afc7f767f4dbf018f657f3e70e2728fdf6934804b3d805638cc80fa6815c12f90caf1f9cc916d126b9e38ba17e2c0b46177e5cc7c80bb767c5a30280437f12572822b52ec2b7a0edee2afe34ffa7f77901699dcb1d91450783ef846ecb19a8c07b7dd387a6df1a3ef0309f595bd05167ea2b0773c4ed7707bb24087050c12005a531b6a1b4f751fbc2726fa8ca5bfc44e6066641b9ddaf46f79efada4802469dc228d7cd6b6208de466ee9df93127cc16918b54c01f5f6383d2ce6107fab01d90a92b6", 0xc6, 0x40000, 0x1}, 0x4) openat$cgroup_ro(r1, &(0x7f0000000440)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) pidfd_getfd(r1, r2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, r5, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x880) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000980)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x7c, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc0}, 0x40000c1) 01:32:32 executing program 3: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0xa546, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) fork() 01:32:32 executing program 1: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x280008c4}, 0x20048011) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x80) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x10101, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000844}, 0x40000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x6a00, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000700), 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000740)={@remote, 0x35}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@dev, @in6=@empty}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) recvfrom(0xffffffffffffffff, &(0x7f0000000900)=""/241, 0xf1, 0x102, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80) r2 = gettid() clone3(&(0x7f0000000e00)={0x40002400, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40), {0x1f}, &(0x7f0000000c80)=""/156, 0x9c, &(0x7f0000000d40), &(0x7f0000000d80)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) 01:32:32 executing program 2: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) clone3(0xfffffffffffffffd, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4c, 0x4, 0x20, 0x24, 0x0, 0x3, 0xa000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0x0, 0x1}, 0x80, 0x3, 0x401, 0x2, 0x1, 0x6, 0x20, 0x0, 0x0, 0x0, 0x7}, r0, 0x75efb9ad, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000580)=""/27, 0x1b}], 0x6, &(0x7f0000000640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x1, 0x20, &(0x7f0000000740)) openat$cgroup_int(r2, &(0x7f0000000780)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000007c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) fork() syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r0) [ 2784.538344] ------------[ cut here ]------------ [ 2784.538981] WARNING: CPU: 0 PID: 59909 at net/ipv4/ipmr.c:440 ipmr_rules_exit+0x13a/0x1c0 [ 2784.539778] Modules linked in: [ 2784.540307] CPU: 0 UID: 0 PID: 59909 Comm: syz-executor.5 Not tainted 6.13.0-rc3-next-20241220 #1 [ 2784.541163] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2784.541952] RIP: 0010:ipmr_rules_exit+0x13a/0x1c0 [ 2784.542434] Code: ff df 48 c1 ea 03 80 3c 02 00 75 7d 48 c7 83 00 08 00 00 00 00 00 00 5b 5d 41 5c 41 5d 41 5e e9 5c 80 a3 00 e8 47 df 6a fd 90 <0f> 0b 90 eb 93 e8 3c df 6a fd 0f b6 2d 1d 26 36 02 31 ff 89 ee e8 [ 2784.544077] RSP: 0018:ffff88803ad6f8b8 EFLAGS: 00010246 [ 2784.544592] RAX: 0000000000040000 RBX: ffff888036e04500 RCX: ffffc90002feb000 [ 2784.545281] RDX: 0000000000040000 RSI: ffffffff8406ea09 RDI: 0000000000000005 [ 2784.545977] RBP: ffff888030234000 R08: 0000000000000000 R09: ffffed1006dc08c9 [ 2784.546652] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001 [ 2784.547348] R13: ffff888036e04d00 R14: ffff888036e04500 R15: fffffbfff0c51178 [ 2784.548040] FS: 00007f4e45f35700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 2784.548782] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2784.549358] CR2: 0000565355c1f228 CR3: 000000003b33c000 CR4: 0000000000350ef0 [ 2784.550051] Call Trace: [ 2784.550771] [ 2784.551377] ? __warn+0xea/0x380 [ 2784.552298] ? ipmr_rules_exit+0x13a/0x1c0 [ 2784.553350] ? report_bug+0x2f5/0x3f0 [ 2784.554342] ? ipmr_rules_exit+0x13a/0x1c0 [ 2784.555769] ? ipmr_rules_exit+0x13b/0x1c0 [ 2784.556686] ? handle_bug+0xe5/0x180 [ 2784.557610] ? exc_invalid_op+0x35/0x80 [ 2784.560075] ? asm_exc_invalid_op+0x1a/0x20 [ 2784.560534] ? ipmr_rules_exit+0x139/0x1c0 [ 2784.561802] ? ipmr_rules_exit+0x13a/0x1c0 [ 2784.562276] ? ipmr_rules_exit+0x139/0x1c0 [ 2784.562704] ipmr_net_exit_batch+0x53/0xa0 [ 2784.563154] ? __pfx_ipmr_net_exit_batch+0x10/0x10 [ 2784.563635] ? __pfx_ipmr_net_exit+0x10/0x10 [ 2784.564140] ops_exit_list+0x12b/0x180 [ 2784.564574] setup_net+0x492/0x7a0 [ 2784.564977] ? __pfx_setup_net+0x10/0x10 [ 2784.565389] ? __pfx_down_read_killable+0x10/0x10 [ 2784.565868] ? __raw_spin_lock_init+0x3a/0x110 [ 2784.566380] ? srso_return_thunk+0x5/0x5f [ 2784.566794] ? debug_mutex_init+0x37/0x70 [ 2784.567286] copy_net_ns+0x2e3/0x700 [ 2784.567680] create_new_namespaces+0x3f6/0xaf0 [ 2784.568190] copy_namespaces+0x45c/0x580 [ 2784.568609] copy_process+0x26c0/0x70e0 [ 2784.569069] ? srso_return_thunk+0x5/0x5f [ 2784.569480] ? lock_release+0x20f/0x6f0 [ 2784.569962] ? __pfx_copy_process+0x10/0x10 [ 2784.570422] ? srso_return_thunk+0x5/0x5f [ 2784.570834] ? _copy_from_user+0x5b/0xd0 [ 2784.571294] kernel_clone+0xeb/0x850 [ 2784.571693] ? srso_return_thunk+0x5/0x5f [ 2784.572151] ? __pfx_kernel_clone+0x10/0x10 [ 2784.572622] ? srso_return_thunk+0x5/0x5f [ 2784.573070] __do_sys_clone3+0x1d9/0x260 [ 2784.573498] ? __pfx___do_sys_clone3+0x10/0x10 [ 2784.574038] ? srso_return_thunk+0x5/0x5f [ 2784.574447] ? xfd_validate_state+0x51/0x180 [ 2784.574942] ? srso_return_thunk+0x5/0x5f [ 2784.575356] ? trace_x86_fpu_regs_activated+0x130/0x190 [ 2784.575939] do_syscall_64+0xbf/0x1d0 [ 2784.576336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2784.576841] RIP: 0033:0x7f4e489bfb19 [ 2784.577247] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2784.578895] RSP: 002b:00007f4e45f35188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2784.579591] RAX: ffffffffffffffda RBX: 00007f4e48ad2f60 RCX: 00007f4e489bfb19 [ 2784.580271] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000e00 [ 2784.580954] RBP: 00007f4e48a19f6d R08: 0000000000000000 R09: 0000000000000000 [ 2784.581595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2784.582277] R13: 00007fffd14604af R14: 00007f4e45f35300 R15: 0000000000022000 [ 2784.582995] [ 2784.583232] irq event stamp: 10979 [ 2784.583561] hardirqs last enabled at (10989): [] __up_console_sem+0x78/0x80 [ 2784.584389] hardirqs last disabled at (11000): [] __up_console_sem+0x5d/0x80 [ 2784.585218] softirqs last enabled at (10888): [] handle_softirqs+0x50c/0x770 [ 2784.586074] softirqs last disabled at (10881): [] __irq_exit_rcu+0xc4/0x100 [ 2784.586865] ---[ end trace 0000000000000000 ]--- VM DIAGNOSIS: 01:32:32 Registers: info registers vcpu 0 RAX=000000000000002e RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff82842b15 RDI=ffffffff8868a060 RBP=ffffffff8868a020 RSP=ffff88803ad6f178 R8 =0000000000000000 R9 =ffffed1001826046 R10=000000000000002e R11=0000000000000000 R12=000000000000002e R13=ffffffff8868a020 R14=0000000000000010 R15=ffffffff82842b00 RIP=ffffffff82842b6d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f4e45f35700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000565355c1f228 CR3=000000003b33c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=0000000000000000 RCX=ffff888019567738 RDX=ffff888015828000 RSI=ffffffff8153a6b5 RDI=ffffffff85b29510 RBP=ffffffff85b29500 RSP=ffff8880195676c0 R8 =0000000000000000 R9 =fffffbfff0b7bdeb R10=ffffffff85bdef5f R11=0000000000000000 R12=0000000000000000 R13=00000000000003bd R14=ffff888019567878 R15=dffffc0000000000 RIP=ffffffff8153a6b9 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f34d41e3700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fe61167a541 CR3=000000000d14c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000